SANDSTONE GLOBAL PRODUCTIONS
We are an award-winning production company which produces and licenses groundbreaking film and audio content for a wide range of outlets (“Services”).
2. WHO COLLECTS INFORMATION ABOUT YOU?
SandStone Global collects, uses and is responsible for certain personal information about you. When we do so we are responsible as ‘controller’ of that personal information.
“Clients” means any of our clients (including the individuals working for our clients) to whom we provide the Services. Clients also include prospective clients, such as contacts who we have communicated with but have not yet engaged us to provide Services.
“Suppliers” means those external vendors and suppliers that provide services to SandStone Global.
“Website Visitors” means individuals who visit our Website and who may opt to provide us with personal information to request further information or to receive marketing communications from us.
“Personal information” (or “personal data”) means any information about an individual from which that personal can be identified. It does not include data where the identity has been removed (i.e., anonymous data).
3. WHAT PERSONAL INFORMATION DO WE COLLECT AND HOW DO WE USE IT?
We may collect, use, store and transfer different kinds of personal information about you which we have grouped together as follows:
Identity Data such as your first name, last name, job title and company.
Contact Data such as your email address, business address, location, telephone numbers and professional and/or social network profile details.
Financial Data which may include (i) credit card and/ or billing information so that we can charge you for the Clients Services, and (ii) bank details so that we can pay for the services you provide (if this is part of the contractual arrangements between us).
Technical Data such as your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this Website.
Usage Data which may include information about how you use our Website.
Marketing and Communications Data including your preferences in receiving marketing or other communications from us.
We may also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal information but is not considered personal information in law as this data does not directly or indirectly reveal your identity.
How do we collect personal information about you?
We may collect information from the following sources:
Directly from you: This is the information you or an individual at your organisation give us during the course of us providing the Services, when you visit our Website or where we receive services from you. It also includes any information you provide to us when you attend events, interact with us at a conference or correspond with us in person, by phone, email, web form or otherwise.
Third-party sources: This will include information about you or your colleagues (where you are a Client or a Supplier) that is available through publicly available sources, such as professional networking sites (including LinkedIn) and general market research.
Information we collect automatically: When you visit our Website, we collect certain Technical and Usage Data automatically from your device.
How do we use your personal information?
If you are a Website Visitor, we use your personal information for the following purposes:
To respond to your enquiries, such as a request for information about our Services.
To send you information which we think you may find interesting (such as details about our products and services, market research, reports and other relevant content), in accordance with your marketing preferences.
To administer and protect our Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).
To deliver relevant website content to you and to measure and understand the effectiveness of the content we serve to you.
To use data analytics to improve our Website, content, marketing and user experience.
4. WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?
Compliance with laws. We may be required to share some personal information as required to comply with the law.
If you are a Website Visitor:
Where we process your personal information for the purposes described above, we consider this is necessary for our legitimate interests and that your interests and fundamental rights do not override those interests.
What happens if you fail to provide information?
If you do not provide us with certain requested personal information or object to the processing of your personal information, this may limit our ability to provide the Services. You can still visit our Website and learn more about SandStone Global without giving us your personal information, but we will need your contact details to administer and respond to any enquiries you submit via the Website or otherwise.
6. THIRD PARTY LINKS AND SERVICES
This Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
7. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION FOR?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information, and whether we can achieve those purposes through other means, and the applicable legal requirements.
8. SECURITY AND DATA TRANSFERS
We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
9. YOUR RIGHTS
Subject to any exemptions provided by law, you may have the right to:
• Request correction of the personal information we hold about you. This enables you to have any incomplete or inaccurate information the controller holds about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Receive the personal information concerning you which you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;
• Object to processing of your personal information at any time for direct marketing purposes.
• Object to decisions being taken by automated means which produce legal effects concerning you or significantly affect you;
• Object in certain other situations to our continued processing of your personal information;
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Withdraw your consent to our processing of your personal information, where we have collected and processed it with your consent.
If you would like to exercise any of these rights, please email us at firstname.lastname@example.org and let us have enough information to identify you. We may need to request specific information from you to help us confirm your identity. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
How to Complain
We hope that we can resolve any query or concern that you raise about our use of your personal information.
You also have the right to make a complaint to your supervisory authority. In the UK, this is the Information Commissioner’s Office (www.ico.org.uk).
10. HOW TO CONTACT US?
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.