Legal
Privacy notice
Not ready for publication
This notice must be drafted and approved by the company's legal adviser before launch. It is currently a placeholder and is excluded from search engine indexing. The site cannot go live with this page in its present state (§35 — launch acceptance criteria).
What this notice must cover
- Identity and contact details of the data controller
- Categories of personal data collected through each form
- Purpose and legal basis for each processing activity
- Handling of uploaded artwork and tech packs, including restricted access
- Retention periods, stated separately for enquiry data and uploaded files
- Third-party processors — hosting, CRM, e-mail and analytics providers
- International transfers, where applicable
- Data subject rights and how to exercise them
- Complaint routes under KVKK and GDPR
- Cookie and consent handling, cross-referenced to the cookie notice
See §25.6 and §28.5 of the project constitution for the security and retention commitments this notice has to reflect.