Privacy Policy – we're RIOTS

PRIVACY AND COOKIE POLICY

The company RIOTS Sp. z o.o., with its registered office in Warsaw (Al. Rzeczypospolitej 12 apt 46, 02-972 Warsaw), entered to the register of entrepreneurs maintained by the District Court for the capital city of Warsaw in Warsaw, 13th Economic Division of the National Court Register under NCR no. KRS 0001036735, TIN: 9512568659 (hereinafter referred to as „RIOTS”) collects, uses and discloses your personal data to ensure safe, smooth, effective provision of its services adapted to the user’s needs. Data collection, use and disclosure allow RIOTS to provide services and products in order to meet your needs and requirements. This policy defines the terms and responsibility of RIOTS as regards the collection, use and disclosure of your data.

While continuing benefitting from RIOTS services you acknowledge having read, understood and agreeing for the terms hereof regarding the collection, use and disclosure of your data by RIOTS which can be amended at any time.

RIOTS collects different types of data which depend on the circumstances of their collection and the type of service ordered or transaction performed. There are two capacious categories of data:

1) Personal data of an identified or identifiable person (data subject) such as name, surname, e-mail address, phone number, mailing address. In case of participation in castings run by RIOTS – the controller of personal data – such data can be complemented by data required to run the respective casting, personal data needed to purchase nominal tickets,
2) statistical data stored exclusively for analytical purposes which are 100% anonymous such as a number of visitors, number of website views.

Such information shall not be combined with personal data and shall be aggregated exclusively for statistical analysis purposes to allow RIOTS to understand RIOTS users better and improve the range of RIOTS services.

This privacy policy includes two parts: A and B.

Part A: General privacy policy (information notice).
Part B: Statement on the Privacy Policy with respect to data collected via RIOTS websites.

Part A : General privacy policy (information notice).

Pursuant to article 13 item 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) you are informed that:

1) the Controller of your personal data is RIOTS Sp. z o.o. with its registered office in Warsaw, at Al. Rzeczypospolitej 12 apt. 46, 02-972 Warsaw, entered to the register of entrepreneurs maintained by the District Court for the capital city of Warsaw in Warsaw, 13th Economic Division, under NCR no. 0001036735, TIN: 9512568659.

2) your personal data shall be processed for the following purposes and on the following legal grounds:
- pursuant to art. 6 item 1 character a), b) and c) along with art. 6 item 1 character f) of the General Data Protection Regulation (the Controller’s legitimate interest – communication with contact persons hereunder and actions taken upon the data subject’s request, before the execution of the agreement and performance thereof) for the following purposes: when the processing is required to perform the agreement – including agreements with partners, co-workers and subcontractors, actions agreed upon under the relevant documents, including casting documents (data required to perform the agreement), newsletters subscribers, nominal ticket purchase agency services, agency services related to execution of insurance agreements, including for passengers, actions taken with respect to the legitimate interest of the Controller or entities with whom the Controller shares those data under this Privacy Policy;
- pursuant to art. 6 item 1 character a) of the General Data Protection Regulation when actions comply with documents – e.g. casting documents and in accordance with the clauses agreed upon or to be agreed upon in writing;
- pursuant to art. 6 item 1 character c) of the General Data Protection Regulation (legal obligation) – Accounting Act and tax law regulations – when obligations arising from the respective legal regulations on issuance and storage of accounting documents (bills, invoices, agreements) must be fulfilled – legal obligation imposed on the controller;
- pursuant to art. 6 item 1 character b) of the General Data Protection Regulation (processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract or during the performance thereof), in order to handle the complaint handling process and when it is necessary – processing for the performance of a contract or at the request of the data subject prior to entering into a contract;
- pursuant to art. 6 item 1 character f) of the General Data Protection Regulation (the Controller’s legitimate interest – direct marketing of products and services) in order to carry out promotion and marketing actions and satisfaction surveys;
- pursuant to art. 6 item 1 character b) of the General Data Protection Regulation (processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract or during the performance thereof),
- pursuant to art. 6 item 1 character c) of the General Data Protection Regulation (legal obligation in art. 22(1) § 1 of the Labour Code and Regulation of the Minister of Family, Labour and Social Policy on staff records – it applies to job candidates under employment agreements),
art. 6 item 1 character a) of the General Data Protection Regulation (voluntary consent, if data other than referred to in labour regulations are referred to – i.a. CV photo),
art. 9 item 2 character a) of the General Data Protection Regulation (voluntary consent – if specific categories of personal data are collected – so-called sensitive data),
art. 10 of the General Data Protection Regulation (processing is acceptable under the EU legislation or legislation of any member state if the employment at a given job position requires personal data relating to criminal convictions or offences) in order to proceed with a recruitment for the respective job position;
- pursuant to art. 6 item 1 character f) of the General Personal Data Protection (the Controller’s legitimate interest – raising claims / defense against claims, debt enforcement actions) in order to raise claims / defend against claims and take debt enforcement actions;
- pursuant to art. 6 item 1 character a) of the General Personal Data Protection (voluntary additional consent) in order to pursue selected forms of marketing communication (e.g. newsletter, advertising gift ) and take part in future recruitment processes.

3) The recipients of your personal data will be entities providing services to RIOTS, notably providers of IT and www.riots.film hosting service, accounting companies (accounting of payments made), banks and payment operators, marketing agencies (performing marketing actions), casting agencies (performing casting actions), business partners and co-workers, namely production division, directors, screenwriters, photographers, technical staff, legal advisors and debt enforcement companies (as regards raising and fulfillment of claims. The recipients of your personal data can also be entities entitled to receive your data under the regulations in force. Each entity with which RIOTS entrusts the processing of personal data under the respective agreement ensures the adequate level of safety and confidentiality of personal data.

4) Your personal data will be transferred to a third country (that is a country other than member of the EEA) under the standard personal data protection regulations adopted by the European Commission. You are entitled to request copies of the protection measures of your personal data transferred to any third country by sending the respective inquiry to the contact details referred to item 7 below.

5) Your personal data shall be stored:
- throughout the performance of the agreement signed with you or cooperation pursued with you,
- until you object to the processing of your data – if the processing of your personal data is done on the grounds of the so-called legitimate interest of the Controller or third party (cases described in item 2 above),
Once the aforementioned period lapses, your personal data shall be stored for the amount of time required by the regulations in force as regards data storage or until the prescription of possible claims. Should no specific legal or contractual provisions apply, the basic period of data storage for the evidence purposes regarding the performance of the agreement is no more than 10 years.

6) With respect to the processing of personal data you have the following rights:
a) right of access to the contents of data, right of data rectification, right to erase data, right to restrict the processing of data, right to data portability,
b) right to object to the processing of data – when the processing of your personal data is performed on the grounds of the so-called legitimate interest and under the terms defined in the General Data Processing Regulation.
c) right to lodge a complaint to the supervisory authority (President of the Personal Data Protection Office) if you find that the processing of personal data infringes the provisions of the General Data Protection Regulation.

7) All the aforementioned rights apply to the extent resulting from the General Data Protection Regulation. To exercise your rights, you have to send a request to the following address: RIOTS Sp. z o.o. with its registered office in Warsaw, at Al. Rzeczypospolita 12 apt. 46, 02-972 Warsaw by e-mail to the following e-mail address: [email protected]

8) You have to provide your personal data if such a duty results from the provisions of the accounting act and tax laws (within the area of issuing accounting documents and their storage). Providing data for the purposes of accomplishing the other goals (referred to in item 2) is voluntary, but can turn out necessary to benefit from services offered by RIOTS.

Data safety

RIOTS is very serious about the safety and protection of your data. As a result, it implements, in accordance with the applicable legal regulations, technical and organizational measures necessary to ensure safety levels ad required for risks present in order to protect your data against unauthorized access and disclosure.

Part B: Statement on the Privacy Policy with respect to data collected via RIOTS websites.

1. COOKIES

Cookies are files placed in your computer by websites you visit or some of the e-mails you open.

By visiting web pages and websites you agree that RIOTS Sp. z o.o., with its registered office in Warsaw, at Al. Rzeczypospolitej 12 apt. 46, 02-972 Warsaw, uses cookies for the purposes of collecting and using your personal data in order to collect data on the use of its website and improve the quality of its online services.

It can apply to information on the ways of using our website, choice of a search engine, type of the device you use and its global location. If you don’t agree for the use of cookies by RIOTS Sp. z o.o. with its registered office in Warsaw, at Al. Rzeczypospolitej 12 apt. 46, 02-972 Warsaw, for the purposes of collecting and using your personal data, you can disable cookies by following the instructions provided in „Consent for the use of cookies” below.

Online behavioural advertising

Online behavioural advertising (also known as interest-based advertising) is a way ads are displayed on the websites you visit and adapted to your interests. Common interests are grouped on the basis of the history of your website visits in order to provide you with advertising adapted to your interests. This way, advertising can be as adequate and useful as possible. Adequate advertising can also be provided on the basis of contents of the website you have viewed. This kind of process is called “retargeting”. If you do not wish to receive online behavioural advertising, you can disable cookies by following the instructions provided in „Consent for the use of cookies” below.

Consent for the use of cookies

You can refuse to accept cookies by changing the settings of your search engine. If you decide not to allow the use of cookies, some areas of websites or web pages can become unavailable to use or not work correctly.

If you remove cookies, RIOTS will not know any longer that you are giving up on online behavioural advertising. Instead, it will consider that you agree for RIOTS privacy policy and the use of cookies as well as for information on the language and country you selected. It means that banners from third party websites will be displayed. Wherever it is needed, you will have to agree for the use of cookies and provide once again other information related to them.
(third party suppliers, including Google, use cookies for the purposes of displaying ads on the basis of the user’s history on a given website. RIOTS website users can disable Google cookies on the website by disabling Google ads option – https://www.google.pl/privacy/ads/)

2. Purposes of collecting and using cookies

RIOTS uses cookies on its websites for the following purposes:

- Technical

To allow for smooth operation of RIOTS websites and web pages, including i.a.:
a) to balance traffic on websites in order to provide all the users with consistent and reliable services;
b) to restrict traffic to the most important parts of the website in order to maintain capacity levels and
c) to store the consent for the privacy policy of RIOTS by the user.

- Easy use

Cookies are used to make it easier to navigate on the website, i.a.:
a) to save the selected language and country and to present adequate contents;
b) to track the number of the membership loyalty card after logging and
c) to ensure the best possible departure place during the booking of a flight.

- Tracking

Cookies are used for collecting statistical data on traffic and transactions made on our websites, including i.a.:

a) to collect feedback on the user’s satisfaction level via survey and
b) to get insight into the navigation and transactions made on our websites in order to improve their functionality.

- Marketing

Cookies are used to allow RIOTS to present adequate news, i.a.:

a) to enable our web domains to handle all website versions for marketing purposes;
b) to allow third parties to display adequate ads and track their efficiency and
c) to display news which offer a selection of products according to the user’s behaviour on our websites and other selected ones.

3. History of visited websites

In order to improve the quality of web activities, RIOTS can track behavior over the Internet or the history of visited websites in order to make it easier to use our websites and track links from other websites. Such data shall not be stored in customer registers and will be collected only for the purposes of statistical analyses.

4. Links to other websites and plugins to social platforms

a) RIOTS website includes a plugin to social media such as Facebook (Facebook Inc.), Instagram (Facebook Inc.), Linkedin (LinkedIn Corporation), hereinafter: “social platform”
b) each plugin to a social platform on the RIOTS website is labelled with the logo of that social platform. The plugin connects the RIOTS website user directly to the RIOTS profile on a given server. The platform can then access information that a given RIOTS user visited the RIOTS website via its IP address. In such a case, the platform will register the information that the user is logged to his or her profile on that platform. To avoid the above, it is recommended that you block (by logging out of your account) the possibility to get such information.
c) The platform does not transfer to RIOTS any information on collected data and the ways of using them. RIOTS does not know the purpose and scope of data collected by the platform. In order to receive additional information on privacy on a given social platform you are recommended contacting directly that platform or acquainting yourself with its privacy policy at:
Facebook: https://www.facebook.com/about/privacy/,
Instagram: https://help.instagram.com/155833707900388,
Linkedin: https://pl.linkedin.com/legal/privacy-policy

RIOTS website includes links to other websites. RIOTS is not liable for the privacy policy implemented by the owners or admins of websites where links found on the RIOTS website redirect. In case of any doubts, RIOTS website users should read the privacy protection statements found on the platform’s pages. RIOTS shares links to other websites in order to provide you with comfort and information. You visit those websites at your own risk, while RIOTS is not liable for those websites. While RIOTS will protect your data on RIOTS websites, it cannot control or be held liable for the regulations of other parties where links can be directed or for the use of any data which you share. You should remember that RIOTS privacy policy does not apply to other websites and that RIOTS recommends you to read their regulations.

5. Underage users

RIOTS cannot guess the age of the users of its websites. If an underage person (as defined in the legislation in force) provided RIOTS with data without the consent of their parents or legal guardians, the respective parent or legal guardian should contact RIOTS (see „Contact us” below) to erase the respective data and deregister the underage user.

6. Google Analytics

Google Analytics is an Internet analysis service provided by Google. Google uses collected data to track and examine the patterns of use of riots.film’s websites, e.g. riots.film.COM.SG or riots.SG, in order to prepare reports on their activities and share them with other Google services. Google can use collected data to contextualize and customize ads in its advertising network. You will learn more in Google’s Privacy Policy.

Updates of the Privacy Policy

RIOTS will update from time to time this Privacy Policy and its updated versions will be found on www.riots.film and marked with a date to let you know when they were updated.

If you have any remarks, questions, complaints or inquiries regarding this Privacy Policy, contact us by sending an e-mail to [email protected] or in writing to the address published on RIOTS website - www.riots.film that is RIOTS Sp. z o.o. with its registered office in Warsaw, at Al. Rzeczypospolitej 12 apt. 46, 02-972 Warsaw.

Last update: 7.06.2023