“you” means the user of our website or the Spotlight Services,
“we/us/Spotlight” means [Spotlight], whose trading address and registered office is 7 Leicester Place, London WC2H 7RJ. VAT Number 239068741. Registered in England and Wales, Company Number 07172054,
“Services” means any of the services available from Spotlight, and
“Site” means the site located at profileperformers.com.
Spotlight as your Data Controller
Spotlight is your Data Controller. Spotlight has a Data Protection Officer who can be contacted via firstname.lastname@example.org or by writing to Data Protection Officer, 7 Leicester Place, London WC2H 7RJ.
We regard the lawful and correct treatment of your personal information by us as very important to our business. To this end we fully endorse and adhere to data protection law across Europe in the form of the General Data Protection Regulation (GDPR) and the equivalent data protection law in the UK. As your Data Controller, Spotlight has notified its activities to the Office of the Information Commissioner as required under the Data Protection Act 1998 and can be found in the Data Protection Public Register.
Relationships when Spotlight is not your Data Controller
If you are a Spotlight Member please note that your agent (if you are represented) or training establishment may also act as your Data Controller both for the supply of your information to Spotlight/National Theatre and its use in submissions made by your Agent on your behalf via the Site, and additionally for any third party tools your Agent or training establishment may employ to administer your data. It is your responsibility to ensure that your Agent or training establishment only processes your personal data in accordance with your wishes.
How we make sure your data is used lawfully?
We will only collect, use, store, share (and any other of the defined uses of processing data) where there is a lawful basis as defined by data protection legislation, and do not collect more information than we need to fulfil the purpose. We document what lawful bases are relied upon for our processing activities. Lawful bases include where you have given consent, where processing is necessary for the performance of a contract with you, when complying with the law and where there are legitimate interests. More information on how we use these lawful bases is provided below:
- Consent – In certain situations, we can process your data with your consent. Where we process data based on consent, we will ask you for your explicit consent (you have to take an action) which you can withdraw at any time, but it will not affect the lawfulness of processing before then.
- For example, you ticking a box to receive marketing communication from us.
- Contract – In certain situations, we need your personal information to comply with our contractual obligations. Where we rely on contract, we will ask you to agree to the use of your personal data necessary for entering into or the performance of your contract with us.
- For example, by becoming a ProFile member we will collect information about you so we can deliver the service to you.
- Complying with the law – we may need to process your personal information if the law requires us to.
- For example, we may have to pass on information of people in fraud or other criminal activity to law enforcement,
- Legitimate interest – We will only rely on legitimate interests where the processing of your data is not overridden by your interests or rights and freedoms. This means that we may need your information and use in a way that can reasonably be expected as part of us running Profile and does not materially impact your rights, freedoms or interests.
- For example, we may use your information to build a more accurate picture of you to better inform our business decisions.
When do we collect your personal information?
We will collect personal information from you when you complete an application or contact form or use our Site.
What personal information do we collect?
We will only ever ask you for the necessary information needed to process your data. We may process data including the following personal information about you, where supplied: Name, gender, date of birth, address(es), email, telephone number(s), information pertaining to disability and ethnicity, IP address, photographs, video and audio clips and career history.
Please note that, as our services are primarily promotional tools, personal data included in Site profiles will be accessible by other users of the Site and could even become available to the public via wide circulation or re-distribution. Therefore, you should never include any personal data on your profile that you would wish to remain private.
How will we use your personal information?
We (or third party data processors acting on our behalf) may collect, store, use and share your personal information for the following purposes:
- to provide you with National Theatre/Spotlight services
- to keep your details and records up-to-date and accurate;
- to answer your enquiries or otherwise communicate with you,
- to provide you with important service communications
- internal record keeping,
- to notify you of other products and/or services that we think will be of interest to you (you can unsubscribe from these communications at any time), and
- to develop, test and improve our sites, services and products that we provide to you;
- to comply with any legal obligation such as to share data with law enforcement.
What personal information do we share?
We sometimes share personal information with carefully selected and trusted third parties. Wherever possible only information contained within your public profile would be released to such third parties. To keep your data safe and maintain your privacy we have the following approach:
- We implement appropriate legal, procedural and technical controls;
- We only provide the information they need to undertake that service;
- They can only use the information for that specific purpose;
- We maintain a close relationship to make sure that your data is protected and your privacy maintained;
- We mandate that if or when the service stops, they must return or delete any information held.
Here are the examples of the types of trusted third parties we work with:
- IT companies who help us deliver our sites and services;
- third parties who provide service enhancements or additional functionality to our users related to how they use our services.
- More information: In order to facilitate certain users of Spotlight with their workflow management processes or other functionality, Spotlight may from time to time provide or authorise the use of certain third party software or applications to facilitate additional off-site access to the professional materials and content otherwise available via the Services. An example of this would be third-party tools used by Agents to administer their client submissions to casting services alongside diary management etc. Such third-party packages or systems should only be used subject to the written approval of Spotlight. You acknowledge that your personal information may be used in this way. Please note however that Spotlight does not endorse and is therefore not responsible for any such third-party packages or systems, and Spotlight will not be liable for any loss of information, materials, data or otherwise that may occur due to the use of your information within them.
- third parties who are involved in furthering research and technology in areas connected with our service.
- More information: We are constantly looking for new ways to change and upgrade our Services and functionality. This may involve partnering with selected and trusted research organisations and technology providers to contribute to their research and innovation projects. Often the most innovative developments come from other industries or fields of research outside of our own, and the outputs of the research may have a broader application beyond the improvements from which we directly benefit. As part of this research, our trusted partners may be given access to our systems and data and/or be provided with copies of our data, including member photos, video and audio clips, and other professional information from their public profile. In all such circumstances, our partners’ access to and use of this information will be comprehensively documented and strictly limited to specific research projects that may include benefits for Spotlight and our Services to you, and will be under secure, confidential, temporary conditions, and closed testing environments. Under no circumstances will this information be used for any commercial or live operational activity, other than to develop and test the specific technology and functionality, without your prior consent.
- law enforcement in complying with the law, or to enforce our Terms and Conditions or to protect the rights, property, or safety of ourselves, our customers or other third parties, and
- if we acquire any new business, and/or sell all or part of our business.
How long do we keep your information?
We will not keep personal information for longer than it is necessary, and will only retain information for as long as needed to carry out our functions and that purpose. Personal information is retained in line with our retention schedule.
Where your information may be processed?
Links to other websites
Keeping your personal information up-to-date If you have provided us with personal information, it is your responsibility to ensure that it is correct and up to date. This will enable us to provide you with the best service possible.
Please contact us as soon as possible if you believe that any information we are holding on you is incorrect or incomplete. Our contact details are set out below.
You have a number of rights to your information that can be accessed by contacting the Data Protection Officer at email@example.com or by writing to Spotlight, 7 Leicester Place, London WC2H 7RJ.
To make sure we protect you and your information, we will need to verify your identity for any requests we receive from you before we begin to process your request.
As a Parent or Guardian representing a child, you are a third party acting on behalf of your child and it is your responsibility to inform the child of their rights and to act solely in your child’s best interests. Parents or guardians have the right to exercise the below rights on behalf of the child that they represent.
If this is a third party acting on your behalf, we will request that they provide proof that they have your consent to represent you.
If we decide not to action your request we will explain our justification for refusal.
- Access your information – you can request access to or a copy of your personal information and check what information we hold about you.
- Change or correct your information – if you wish to have any errors corrected, you can request this – although this is not an absolute right and we may request for further information.
- Take your information – you can ask for a copy of your personal information to be provided in a reusable and machine-readable form.
- Object to, limit or restrict the use of your information – you can ask that we stop using parts or all of your personal information or limit its use if you believe that this personal information is unlawfully held.
- Direct marketing – you can ask that we stop using your personal information for direct marketing. This can be by clicking on an ‘unsubscribe’ link in an email or writing to the Data Protection Officer.
- Delete your information – you can ask that your personal information is deleted if you believe it is no longer necessary for the purposes it was collected.
- Legitimate interest – if we are processing your information on the grounds of legitimate interest, you can ask us to stop this if there are reasons related to your individual circumstances. We have to do this unless we believe we still have an overriding legitimate reason.
If you are unhappy
The theme throughout this Policy is that Spotlight treats your privacy with the utmost importance and we strive to meet the highest standards when collecting and using personal information. If for whatever reason you believe that our collection or use of your information is unfair or inappropriate, we encourage you to report this to our Data Protection Officer. We will take any complaints we receive about your privacy very seriously.
You also have the right to complain to your supervisory authority if you are unhappy with how your personal information has been collected, used or managed which within the UK is the Information Commissioner’s Office (ICO) who can be contacted by calling 0303 123 1113 or by visiting www.ico.org.uk.
Cookies, IP Addresses and Analytics
You can also see a full list of all third party cookies on your web browser by visiting this website:http://www.youronlinechoices.com/uk/.
For more information about cookies, including how to remove and disable them, visit the following website: http://ico.org.uk/for_the_public/topic_specific_guides/online/cookies.
An IP address is a number which is automatically assigned to your computer whenever you access the internet. When you access the ProFile site we will log your IP address. We generally only use IP addresses to analyse trends, administer our website, track general user movements and gather broad demographic information for aggregate use, or where investigating possible criminal activity
More information and information in an accessible format
Queries and Requests
If you have any queries about the way your data is used by Spotlight, please contact:
Data Protection Officer
7 Leicester Place
London WC2H 7RJ