This policy explains what data we collect about you and why, how we use it and who we share it with, as well as your rights as a data subject. Your data security is important to us and we will look after it in line with the laws and regulations relating to the protection of personal data, this of course will include the General Data Protection Regulation (GDPR)(EU) 2016/679).
Any reference to “we“, “us” and “our” is to MB “NoMountain” (company reg. no. 305053629). We are known as the “data controller” of your personal data and in case of any queries regarding your data collection, you can contact us at email@example.com.
The data we process may include your name, address, email address, IP address, gender, date of birth, age, phone number, passport details or other national identifier, driving licence, income, employment information and details about your previous roles and personal history. We collect information about you from a number of sources, including from you directly. The list below gives more information.
(1) Information that you give us
From the forms and any documentation that you (or an agent on your behalf) complete when you apply for a role or part in, or contribute to, a programme when you provide it to us in correspondence and conversations (e.g. application telephone interviews, video calls, various questionnaires and release forms). When you apply, participate or contribute to a programme, or attend a live recording, information which is relevant to your application or contribution. The information will be dependent on the nature of the programme, but where relevant this could also include special category data such as medical information, political opinions, sexual orientation and where relevant your criminal history. The nature of the programme and the information which we will be asking you for will be explained to you in advance.
(2) Information we obtain from others
(a) Publicly available and accessible directories, sources and social media platforms.
(b) Subscription only databases.
(c) Tax authorities, including those that are based outside Republic of Lithuania.
(d) Governmental and competent regulatory authorities to whom we have regulatory obligations.
(e) Agents, agencies and production companies.
(f) Fraud prevention and detection agencies and organisations.
We require personal information about you when you apply to take part in a programme or are confirmed as a participant or contributor to a programme which we are producing.
We need to process this information to consider your application or to make the programme once you have been selected.
We have set out below some more specific information about why we process your personal data.
(1) Our contracts with you
We consider it necessary to process your personal data to perform our contracts with you in the following circumstances.
(a) to meet the contractual obligations between us.
(b) as part of any contract which you have entered into with us for your application, contribution and/or participation in a programme.
(c) if you are due any payment, to provide your information to our accountants in order for this to be paid.
Contracts are retained for a minimum of five (5) years from the date of signature, or for the period during which we have rights to the programme, whichever is the longest.
(2) To comply with applicable laws
We process your personal data where it is necessary to do so to comply with applicable laws which apply to us as an organisation, including
(a) to verify your identity.
(b) to carry out verification and anti-money laundering checks, prevent and detect fraud and carry out other legally mandated checks.
(c) if we are legally obliged to disclose your personal data.
(3) Our legitimate interests
We consider that we have a legitimate interest in producing programming for commercial exploitation, as such, ‘on-screen’ and ‘off-screen’ contributions from individuals are crucial to this production activity and require the processing of personal information about these individuals.
We consider that it is in our legitimate interests (or those of a third party) to process your personal information, namely
(a) to produce programming for commercial purposes, such as processing ‘on-screen’ and ‘off-screen’ contributions from individuals. When we refer to a “programme” in this policy we mean not just the finished programme but all rushes, clips and unused material.
(b) to assess your continuing involvement for the programme that you are contributing to (if your application to participate in a programme is unsuccessful, your information will be deleted within twelve (12) months of the programme going into production unless you have agreed you may be contacted about future programmes).
(c) to deal with any questions or complaints arising in relation to your participation in the programme.
(d) to deal with any agents or agencies acting on your behalf.
(e) to retain the programme and your personal data in it in our archive, for the purposing of repeating the programme or otherwise using it for commercial purposes.
(f) to commercially make full use of either the entire programme or clips from it in the Republic of Lithuania and around the world, for the period in which we have rights in the programme. We also keep an archive copy of the programme after our rights have expired, as a record of programming we have either made and/or broadcast.
(g) if applicable, to provide to any third parties (e.g. travel agencies, airlines, resorts and/or hotels) who require it to supply any prizes and/or benefits to you during your participation in a programme, or to facilitate your participation in the programme.
(h) to share with our professional advisors and/or the commissioning entity or commissioning broadcaster that we are producing the programme for and/or any co-producer that we are producing the programme with.
(i) to verify your age, identity and other information as we may require for the production and exploitation of the programme we are producing.
(j) in the event that we sell or buy any business or assets, in which case we may disclose your information to the prospective seller or buyer of such business or assets, along with its professional advisers. In such circumstances the acquirer of the information will become the new data controller.
(k) to comply with applicable regulatory obligations.
(l) to pass on to a competent regulator, prosecutor or competent authority or law enforcement authorities should it be requested from us.
(m) to comply with our accounting and tax reporting requirements.
(n) to comply with our audit requirements.
(o) to protect our business against fraud, breach of confidence, theft of proprietary materials, and other financial or business crimes (to the extent that this is not required of us by law).
(p) to monitor communications to/from us using our systems.
(q) to protect the security and integrity of our IT systems.
(r) to arrange for you to attend the live recording of our programmes.
We only process data on this legal basis where we have considered that, on balance, our legitimate interests are not overridden by your interests, fundamental rights or freedoms.
(4) Monitoring as described at (p) above
We monitor communications where the law requires us to do so. We will also monitor where we are required to do so to comply with our regulatory rules and practices and, where we are permitted to do so, to protect our business and the security of our systems.
(5) Future participation
Where you have agreed to this, we process your personal data in connection with your consideration for future series of programmes and/or other shows produced by us. This information may be kept by us for period of up to 3 years from date of the applicable agreement, unless you ask us to delete it earlier.
We are committed to protecting the privacy of children aged under 18 years old. If you are aged 17 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with any personal information. We will take reasonable steps to verify this by contacting your parent or guardian to confirm their consent.
Your information will be used by the relevant production team for the purposes of making the programme. It may also be shared internally with the legal and finance team to prepare contractual documentation or provide legal advice, and with any other in-house teams involved in commercial exploitation, and the health and safety and insurance teams if their advice is required.
We may pass your information to our third-party service providers such as agents, subcontractors, and other associated organisations for the purposes of facilitating your application, entry or enquiry or nomination for the programme you are interested in taking part in. However, when we use third party service providers, we disclose only those elements of your information that are necessary to deliver the required service.
Please be assured that we will not otherwise share your information further, unless
(a) we are required to do so by law, for example by a court order or for the purposes of prevention of fraud or other crime.
(b) we are asked to by competent regulatory, prosecuting and other governmental agencies, or litigation counterparties, in any country or territory.
(c) for the purposes of prevention of fraud or other crime.
We may transfer your personal data to other members of our team, and to third party service providers outside of the European Economic Area, which do not have similarly strict data protection and privacy laws.
Where we transfer personal data to other members of our team, or our service providers, we will put in place data transfer agreements and safeguards. Where this happens, we will ensure that adequate security and safeguards are in place to appropriately protect your information.
We do not retain your information for longer than necessary for the purpose it was collected.
We keep your personal data for as long as it is required by us for our legitimate business purposes, to perform our contractual obligations, or where longer, such longer period as is required by law or regulatory obligations which apply to us.
In general we keep your information only for the period we have legal rights to exploit the programme that your information relates to, but we have included some exceptions to that rule above. We will usually delete your personal information at the end of that period.
There are circumstances in which we can make programmes about an individual without their consent provided we comply with the relevant laws and regulatory codes.
We do not generally rely on obtaining your consent to process your personal data to make a programme in which you appear. This is something which we do as part of our legitimate business interests, as explained above.
Where you have entered into a contract with us to participate in our programmes, we may be entitled to show the programme whether or not you later change your mind about participation.
In law you are the data subject and you have several rights that you can exercise over your data. These rights include:
(a) The right to be informed.
(b) The right of access.
(c) The right to rectification.
(d) The right to erasure.
(e) The right to restrict processing.
(f) The right to data portability.
(g) The right to object.
(h) Rights in relation to automated decision making and profiling.
If you would like a copy of some or all of your personal information, please contact us directly using the contact details below. If we cannot comply with your request to exercise your rights we will usually tell you why.
There will not usually be a charge for handling a request to exercise your rights.