We use “Cookies” to ensure your experience of the site, and our ability to improve it, is enhanced. Specifically, the following Cookies are in use:
Google Analytics (3rd party). We use this to see how many visitors we are getting, and how they found us. You can find out more about Google Analytics’ Cookies here: http://www.google.com/policies/privacy/ads/#toc-analytics
Social Media Sharing and Integration (3rd party). We use Facebook and Twitter functionality within this site so that you can share items of interest, or become a fan of our Social Media Profiles. You can find out more about Facebook’s Cookie use here: http://www.facebook.com/help/?faq=115180708570932, and Twitter’s here: https://twitter.com/privacy
Box Bear is responsible for your data. Our registered address is Technology House, 10 Pinehill Road, Crowthorne, RG45 7JD. We are registered as a company in England and Wales under company number 09926138. We are the data controller of the data which we collect from you, and as such we control the ways your personal data are collected and the purposes for which your personal data are used. We are data processors for the data we hold within footage that is captured as part of a production.
Depending on how you use our services and our websites, we might collect the following kinds of information about you:
|Your name and contact details||When you fill in forms on our website. When you make contact with us through email. When you complete a booking form.|
|Information about other colleagues, clients and contacts||When you have included them in a production.|
|Communication we have with you (emails, letters, telephone calls, messages sent to us through our social media platforms, feedback)||When you get in touch with us. When you respond to our requests for feedback|
Certain kinds of personal data, such as data about your racial or ethnic origin, your physical or mental health, conviction of criminal offences are special categories of personal data which by law require additional protection. We try to limit the circumstances in which we collect sensitive personal data of this kind, but we do collect and process it under such circumstances including but not limited to:
We can only use your personal data if we have a proper reason for doing so. According to the law, we can only use your data for one or more of these reasons:
In the table below, we have set out the different ways in which we use your personal data and the reasons we rely on for using that data.
If we rely on our legitimate interests for using your personal data, we will explain that to you.
|What we use your personal data for||Legal grounds for using it||Our legitimate interests|
|To communicate with you and manage our relationship with you||Fulfilling contracts. Our legitimate interests. With your consent||Provision of services requested|
|To personalise and improve your customer experience. To inform you about our new products and trends that we think you might be interested in.||Fulfilling contracts. Our legitimate interests. With your consent||Keeping our records up to date. Working out which of our products and services may interest you. Developing products and services and what we charge for them. Identifying or defining types of customers for new products of services. Being efficient about how we fulfil our contracts, provide our services and fulfil our legal duties.|
|To meet our health and safety responsibilities.||Fulfilling contracts. Our legitimate interests. Our legal duty.||Being efficient about how we fulfil our contracts, provide our services and fulfil our legal duties|
|To run our business in an efficient and proper way. To fulfil our administrative purposes including accounting, billing and audit. To improve our services. To manage how we work with other companies that provide goods and services to us and our customers. To protect our business interests.||Fulfilling contracts. Our legitimate interests. Our legal duty.||Being efficient about how we fulfil our contracts, provide our services and fulfil our legal duties.Identifying ways to improve the way we deliver services to our customers.|
|To develop and manage our brand, products and services. To test new products and services.||Fulfilling contracts. Our legitimate interests. Our legal duty.||Being efficient about how we fulfil our contracts, provide our services and fulfil our legal duties. Identifying ways to improve the way we deliver products and services to our customers.|
When video footage and files are captured of an individual their consent to process the data will be gathered via a consent form supplied by you to us granting us consent from the individual to process their data. This consent will be given by the individual for the processing of the footage to create the project as specified. Each use for the footage must be specified. Any future uses of the footage requiring new processing of the data for a different purpose or project will require additional consent.
This consent must be freely given, specific, informed and unambiguous and is the joint responsibility of Box Bear and you to gather.
At the time of obtaining consent, individuals are made aware that they are able to withdraw consent at any time but also that this would not render processing prior to withdrawal to be unlawful.
DreamingFish and our clients may have a legitimate interest to continue to use and process personal data even if an individual has withdrawn their consent for the business to do so including but not limited to:
iii) the processing is balanced against the impact such processing will have on the fundamental rights and freedoms of data subjects.
In considering whether or not it is proportionate and legitimate for a business to continue using video footage which contains imagery of an identifiable individual the following factors will be considered:
We keep your data only for as long as we need it. How long we need data depends on what we are using it for, whether that is to provide services to you, for our own legitimate interests (described above) or so that we can comply with the law.
We will actively review the information we hold and when there is no longer a customer, legal or business need for us to hold it, we will either delete it securely or in some cases anonymise it.
Raw, un processed video footage and files will be stored for a maximum of 2 years unless otherwise agreed with you.
We protect your personal data against unauthorised access, unlawful use, accidental loss, corruption or destruction.
We use technical measures such as but not limited to encryption and password protection to protect your data and the systems they are held in. We also use operational measures to protect the data, for example by limiting the number of people who have access to the databases in which information is held.
We may share your data with staff and sub-contractors who are fulfilling a specialist role within the production. For example but not limited to production staff, animators, actors, AV crew and drone operators. We will make sure that our suppliers respect your personal data and comply with data protection laws. We also sometimes have to provide your personal data to government authorities including HMRC and HSE to fulfil our legal obligations.
You are entitled to see copies of all personal data held by us and to amend, correct or delete such data. You can also limit, restrict or object to the processing of your data.
If you gave us your consent to use your data so that we can send you marketing emails, you can withdraw your consent. Please note that even if you withdraw your consent, we can still rely on the consent you gave as the lawful basis for processing your data before you withdrew your consent.
You can object to our use of your data where we rely on our legitimate interests to do so. We explained the legitimate interests we rely in the table above under the heading ‘How we use your personal data’.
To raise any objections or to exercise any of your rights, you can send an email to us at firstname.lastname@example.org or you can write to us at Data Protection, Box Bear Digital Limited, Technology House, 10 Pinehill Road, Crowthorne, RG45 7JD.
When you get in touch, we will come back to you as soon as possible and where possible within one month. If your request is more complicated, it may take a little longer to come back to you but we will come back to you within two months of your request. There is no charge for most requests, but if you ask us to provide a significant amount of data for example we may ask you to pay a reasonable admin fee. We may also ask you to verify your identity before we provide any information to you.
Last updated 25 January 2021