Processing of your personal data
The General Data Protection Regulation (GDPR) gives you rights which enable you to always have an overview of which personal data we process about you.
1. We are the data controller – how do you contact us?
U ITCH I SCRATCH
Århusgade 88 - 4th Floor
2100 - Copenhagen Ø DK
2. Purposes and legal basis for processing of your personal data
We process your personal data for the following purposes:
- To produce and sell contents in the form of audio/visual services.
- To be able to enter into and fulfil contracts with customers to provide services.
- To be able to enter into and fulfil contracts with performers (actors/extras), suppliers of technical and artistic services and suppliers of equipment.
The legal basis for processing your personal data ensues from a number of rules:
Art. 6(1), letter b of the General Data Protection Regulation, as processing is necessary in order to fulfil our contract on the production and delivery of contents (audio/visual).
Art. 6(1), letter c of the General Data Protection Regulation, as processing is necessary in order to comply with a legal obligation, including the Danish Act on Bookkeeping and Danish fiscal legislation.
Art. 11(2) of the General Data Protection Regulation, as processing of personal identity numbers is required by law and is necessary for unambiguous identification.
Art. 6(1), letter f of the General Data Protection Regulation, as processing of your personal data takes place to safeguard a legitimate interest in protecting your legal rights, and as the regard for you does not take precedence over this. Our legitimate interest is to carry out our business and to secure protection of legal rights.
Our legitimate interest is to be able to
- Carry out our business and to secure protection of legal rights.
3. Categories of personal data
We process only personal data about you that are relevant in order to accomplish the task entrusted to us.
This includes, for instance, the following categories of data:
4. Recipients or categories of recipients
We only pass on your personal data or hand them over to the following recipients when it is relevant in order to fulfil our contract, and when it is legally required:
Public authorities, including SKAT [the Danish Fiscal Authority], other national authorities
Companies in the same group as the data processor
We use the following external data processors:
- External book-keeping
Data processors may only process personal data if so instructed by us and only to carry out specific tasks. Data processors must not pass on personal data.
We receive data about you from a number of sources, including:
- Personal data about our suppliers’ staff may also be collected from other individuals in the supplier’s organisation
6. Storage of your personal data
As a general rule, data about customers, suppliers and performers will be deleted no later than five years after the expiry of the contractual relationship.
Data about long-term intellectual property rights (such as, for instance, data about copyright that become obsolete 70 years after the death of the author) will be kept for as long as it is relevant.
7. The right to withdraw consent
If you have consented to having your personal data processed you may at any time withdraw your consent. You can do so by contacting us using the contact information in item 1 above.
If you choose to withdraw your consent, this will not, based on your previous consent, influence the legitimacy of our processing of your personal data up to the time of withdrawal. Therefore, if you withdraw your consent, it will not become effective until the time of such withdrawal.
8. Your rights
Under the General Data Protection Regulation you have certain rights in relation to our processing of your data.
If you wish to exercise your rights you should contact us using the contact information in item 1 above.
Right to see data (right of insight)
You are entitled to have insight into the data we process about you and into certain other information.
Right to rectification (correction)
You are entitled to have incorrect data about yourself corrected.
Right to deletion
In special cases you are entitled to have data about yourself deleted prior to the date of our standard deletion of these.
Right to restrict processing
In certain cases you are entitled to restricted processing of your personal data. If you are entitled to restricted processing, we may henceforth only process such data – apart from their storage – with your consent, or for the purpose of establishing, asserting or defending a legal claim, or in order to protect an individual or matters of important public interest.
Right to object
In certain cases you are entitled to object to our processing, although legitimate, of your personal data. You can also object to your data being processed for direct marketing purposes.
Right to transmit data (data portability)
In certain cases you are entitled to receive your personal data in an established, structured, and machine- readable format and to have such personal data transferred from one data controller to another without hindrance.
You can read more about your rights in the Danish Data Protection Agency’s instructions on the rights of registered individuals. You will find these instructions on the website www.datatilsynet.dk.
9. Filing a complaint with the Danish Data Protection Agency
You are entitled to file a complaint with the Danish Data Protection Agency if you are dissatisfied with the way in which we process your personal data. You will find the Danish Data Protection Agency’s contact information on the website www.datatilsynet.dk.