VIDEORIGHTS S.r.l., with its registered office at Verziere 2, 20122 Milan (Italy), VAT Number 09416590967, Tel. +39 02.89056654, Fax. +39 02.89057084, in its quality of the personal data controller (“Controller”, or “VIDEORIGHTS”) informs you (“Data Subject”) – according to Art. 13 of the Regulation EU no. 2016/679 (“GDPR”) – that your personal data will be processed with the mechanisms and for the purposes set forth below.

1. What is being processed?
Personal data collected directly from the Data Subject
The Controller processes the personal data (such as, first name, surname, State and place of birth, citizenship, date of birth, fiscal code/VAT number, address of residence and/or address of domicile, telephone number, email address, information for payment) that you provide us with:
  • Upon entering into or executing the Artist’s Contract/Producer’s Contract for the services rendered and the activities carried out by VIDEORIGHTS;
  • By filling in the Form available in the “Catalogue” section contained in the Controller’s website.

Personal data collected through your use of VIDEORIGHTS website.
In the normal course of operation of the Controller’s website, the IT system and the relative procedures - enabling the functioning itself - acquire some personal data whose transmission is implicit in any communication protocol.
This information is not gathered to be associated with identified Data Subjects, but because of its own nature, it could indeed enable the identification of users through elaboration and association with data kept by third parties.
This category of data may include the IP addresses or the domain names of the computers used by users connecting to the website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the response status given by the server (successful, error, etc.) as well as other parameters relating to the operating system and the user’s IT environment.
Such data are used only to obtain anonymous statistical information on the website’s use and to control its proper functioning and are erased immediately after elaboration. Such data could also be used to ascertain liability in case of hypothetical IT crimes to the detriment of the website. Browsing data will be kept for 26 (twenty-six) months.

Cookies
Detailed information about our Cookie Policy can be found in a dedicated section of the Controller’s website.

2. Legal basis and purposes of the processing
Your personal data are processed for specific purposes and on these legal base:

A) As necessary to perform the Artist’s/Producer’s Contract you signed with us and to comply with legal obligations imposed on VIDEORIGHTS as Controller, in particular for the following purposes (“Service-related Purposes”):
  • To sign contracts for the services rendered by VIDEORIGHTS;
  • To comply with pre-contractual, contractual and fiscal obligations deriving from the relationship with you;
  • To comply with legal obligations laid down by law, regulation, the EU legislation or by measure issued by a public authority;
  • To exercise the rights of VIDEORIGHTS (such as, the right to take legal action).

B) Only upon your prior explicit consent – which you can give and/or withdraw at any time by PEC for the following purposes (“Communication-related purposes”):
  • To send – via email, mail and/or text message and/or contact details – newsletters and commercial information regarding the services rendered by VIDEORIGHTS;
  • To display your personal data – strictly limited to name and surname – on the Controller’s website (http://www.videorights.it/en/) to indicate the list of the rightholders.

C) Only upon your explicit consent, which you can give at the time of filling the form available in the “Who is with us” section contained in the Controller’s website, for the following purposes: allow the Controller to contact you to receive information (“Contact purposes”).

It remains safe as specified for browsing data.

3. Methods of Processing
Your personal data are processed – in conformity with GDPR’s provisions and the national legislation – with the following operations: collection, recording, organization, storage, consultation, adaptation, alteration, selection, retrieval, alignment, use, combination, restriction, disclosure, erasure or destruction.

Your personal data are processed both in paper and in electronic form.

Since VIDEORIGHTS provides its services by means of advanced IT systems – in the interests of the rights held – the personal data processing may be carried out with partially automated methods which do not exclude the human intervention on the part of the controller. In case of disagreement with such methods of processing, you have the right to express your opinion and to challenge the decision taken with the procedures as per point 9. In such case, however, VIDEORIGHTS may not guarantee the Services described in point 2.A).

VIDEORIGHTS will process your personal data for no longer than is necessary for the purposes as per point 2., but, in any case, for the “Service-related Purposes” no later than ten (10) years after termination of the relationship, for the “Communication-related Purposes” and for the “Contact-related Purposes” no later than two (2) years from the data on which the form is sent.

It remains safe as specified for browsing data.

4. Sharing of personal data
Your personal data may be shared for the purposes laid down in points 2.A) and 2.B):
  • With employers and collaborators of the Controller in charge of personal data processing and/or in their capacity of data processor;
  • With companies, entities and societies in general (such as other collecting societies) in charge – on a collective and/or individual basis – of managing neighboring rights and collecting money deriving from relevant exploitations of the repertoires of the Controller’s Mandators in their capacity of data processors or independent data controllers;
  • With third-party companies or other individuals carrying out IT outsourced services on behalf of the Controller in their capacity of data processors.
Personal data you provide with for the purposes as per point 2. C) will be indeed shared exclusively among those employers and collaborators of the Controller who are in charge of processing personal data.

It remains safe as specified for browsing data.

5. Disclosure of personal data
The Controller may disclosure your personal data for the purposes as per point 2.A) to supervisory authority, judicial authorities, insurance companies for the provision of insurance services, as well as to those individuals to whom such disclosure is mandatory by law. Such individuals will process the data in their capacity of independent data controllers.
Other than what provided for in the previous paragraph, your personal data will remain confidential and It remains safe as specified for browsing data.

6. Transfer of personal data
Your personal data are stored on the Controller’s server located on the territory of the European Union. In order to perform its activities and services as per points 2.A) and 2.B), VIDEORIGHTS may transfer your personal data to third parties located in countries which are not members of the European Union. In such instances, VIDEORIGHTS shall ensure that the transfer of your personal data is carried out in accordance with the GDPR and, in particular, by means of standard contractual clauses approved by the EU Commission or on the basis of adequacy decisions of the European Commission.

7. Provision of your personal data and consequences of your refusal to provide them
The provision of your personal data is essential in order to perform the activities and services for the purposes as per point 2.A), since they constitute the core business of VIDEORIGHTS. Otherwise, we can’t ensure you such services and activities.

The provision of your personal data is optional as per the purposes described in point 2.B). You can therefore choose not to provide the Controller with any of your personal data or to withdraw your consent at any time. Such withdrawal shall not affect the lawfulness of processing based on your consent before your withdrawal. In such instance, you may neither receive newsletters and commercial communications regarding the Services of the Controller nor being displayed in the roster of the our Mandators VIDEORIGHTS’s Mandators available on the Controller’s website.

The above is without prejudice of the provisions laid down with regard to the Service-related purposes as per point 2.A).

The provision of your personal data is optional as per the purposes of point 2.C). However, should you not to consent, the Controller may not be able to supply you with the information you request by filling in the above- mentioned “First Contact Form”.

8. Rights of the Data subject
As Data Subject and in relation to your personal data, you are given the rights listed in Arts. 15-22 of the GDPR, and precisely:
  1. The right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed and – even if not recorded yet – to obtain the communication of such data in intelligible form;
  2. The right to obtain from the controller:
    1. Any available information as to the source of personal data not collected from you;
    2. Any available information regarding purposes and methods of the personal data processing;
    3. Any meaningful information about the logic involved in the processing carried out with the use of electronic instruments;
    4. The contact details of the controller, the processors and – where applicable – of the controller’s representative as per Art. 3 paragraph 1 of the GDPR;
    5. Information regarding the recipients or categories of recipients of your personal data, including those who may become acquainted with them in their capacity of designated representatives within the Territory of the State, controllers or those who are in charge of processing.
  3. Right to obtain:
    1. The update, rectification or – when interested – completion of incomplete personal data without undue delay and receiving also a supplementary statement.
    2. The erasure of personal data – without undue delay – where the grounds as per Art. 17 of the GDPR apply or the interruption in case of personal data unlawfully processed: including personal data which do not require storage in relation to the purposes for which they have been originally collected and/or further processed;
    3. The confirmation that the operations as per previous letters a), b) and c) have been communicated – even with reference to their content – to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
  4. Right to object – in whole or in part:
    1. On legitimate grounds - to the processing of personal data, even if it is pertinent to the purpose of their collection;
    2. To the processing of personal data relating to you for the purposes of sending advertising materials or direct selling or for the performance of market or commercial communication surveys via automatic calling machines, via emails and/or via traditional marketing techniques, via telephone and/or mail. Your right to object to direct marketing purposes through automated processes extends to and concerns also the traditional processes. You retain the right of objection, in whole or even only in part. You may therefore decide whether to be notified only by means of traditional methods or only by automated communications or not to be notified at all;
  5. The right to obtain restriction of processing, where one of the circumstances as per Art. 18 of the GDPR occurs (such as, contestation of the accuracy of the personal data, unlawful processing, exercise of a legal claim before a Court, objection to processing);
  6. The right to data portability that is the right to receive the personal data concerning you in a structured commonly used and machine-readable format and the right to transmit such data to another controller, with respect for third-party rights and freedoms;
  7. The right to lodge a complaint with the Authority for the protection of personal data.

9. Procedures for exercising the rights
As Data Subject, you can give and/or withdraw by PEC your consent for “Communication-related purposes” as art. 2.B) by sending a certified letter (PEC) to the email address videorights@legalmail.it

As Data Subject, you can exercise your rights at any time:
  • By sending a registered letter to VIDEORIGHTS S.r.l. – Verziere 2, 20122 Milano (MI);
  • By sending a certified letter (PEC) to the email address: videorights@legalmail.it

10. Data Protection Officer – other persons in charge of processing
The Data Protection Officer - appointed by VIDEORIGHTS – is Mr. Fernando Mantovani, reachable at any time: via email dpo@videorights.it, via regular mail to VIDEORIGHTS registered offices at Verziere 2, 20122 Milano or by phone at +39 02 89056654.

The updated list of controllers and of other persons in charge of personal data processing is kept at VIDEORIGHTS’s registered offices.

11. Amendments and changes
This present regulation of personal data processing was updated to July 23rd 2019. The Controller may amend or update its content at any time. Should the occurred amendments lead to substantial modifications in the processing or have a significant impact on Data Subjects, you shall be adequately notified by the Controller.

Please click here to download the Pdf version updated to July 23rd 2019