1. Data Controller
Castings ("we", "Controller") is the data controller for personal data collected through this Service. Contact: privacy@castingplatform.com. You may submit a data request at any time via our Help page or by emailing the address above.
2. Data We Collect
We collect the following categories of personal data: • Identity & Contact: name, last name, email address. • Profile Data: gender, date of birth, physical parameters (height, weight, measurements), bio, skills, profile photos, video files. • Communications: messages sent via the contact form or support requests. • Usage Data: IP address, browser type, pages visited, session duration (via standard server logs). • Payment Data: we do not store card details; payments are processed by our payment providers in compliance with PCI-DSS.
3. Legal Basis for Processing (GDPR Art. 6)
We process your data on the following lawful bases: • Performance of contract (Art. 6(1)(b)): to provide your account, manage castings and applications. • Legitimate interests (Art. 6(1)(f)): to prevent fraud, improve the Service, and send transactional notifications. • Consent (Art. 6(1)(a)): for optional marketing communications and push notifications — you may withdraw consent at any time. • Legal obligation (Art. 6(1)(c)): to comply with tax and accounting requirements for payments.
4. How We Use Your Data
Your data is used to: • Create and manage your account. • Allow Directors to find and contact Talents. • Process casting applications and notify subscribers. • Send transactional emails (account verification, password reset). • Process subscription payments via our payment providers. • Respond to support requests. • Detect and prevent abuse or fraudulent activity.
5. Data Retention
We retain your data for the following periods: • Account data: retained until you delete your account. After deletion, data is permanently erased within 30 days. • Application records: retained for 2 years after submission. • Payment and billing records: retained for 7 years to comply with financial regulations. • Support requests: retained for 3 years. • Server logs (IP, usage): retained for 90 days.
6. Data Sharing
We do not sell your data. We may share data with: • Payment providers: for payment processing. • Amazon Web Services (AWS S3): for file storage — data is stored within EU/EEA regions or with appropriate safeguards. • Email service providers: for transactional email delivery. • Legal authorities: only when required by law or valid legal process. All third-party processors are bound by data processing agreements.
7. Your Rights (GDPR)
As a data subject you have the right to: • Access: request a copy of personal data we hold about you. • Rectification: request correction of inaccurate data. • Erasure: request deletion of your data ("right to be forgotten"). • Portability: receive your data in a machine-readable format. • Restriction: request that we limit processing of your data. • Objection: object to processing based on legitimate interests. • Withdraw consent: for consent-based processing at any time. To exercise these rights, contact privacy@castingplatform.com or use the form on our Help page. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority.
8. Cookies
We use the following cookies: • Session cookie: required for authentication — expires when you close your browser. • Locale cookie ("locale"): stores your language preference — expires after 1 year. • CSRF token cookie: required for security — session-scoped. We do not use third-party analytics or advertising cookies. You may disable cookies in your browser, but some features may not function correctly.
9. Security
We implement appropriate technical and organisational measures to protect your data, including TLS encryption in transit, encrypted storage for sensitive fields, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. Continued use after the effective date constitutes acceptance.
12. Contact & Data Requests
Data Controller contact: Email: privacy@castingplatform.com Help page: /help (contact form) For erasure or data export requests, please use the Help page contact form and select the relevant subject, or email privacy@castingplatform.com with the subject "Data Request".
Last updated: Effective date: 1 January 2025