DNEG Privacy and Cookies Notice

• Information you’ve provided to us, including through our websites or applications, or when you attend one of our events.
• Contact details, including your name, address and contact information (such as phone numbers, email addresses and social media handles), date of birth, job title, location and marketing preferences.
• Information relating to your interactions with us.
• Information about our content, products and services that you have enquired about.
• Photographs and videos.
• IP addresses, MAC addresses, unique identification numbers, online identifiers (including device IDs and advertising IDs), browser information, location data port information, logical network address, and other similar identifying information required for your devices to communicate with websites and applications on the internet.
• Technical information from the devices you use to access DNEG content, products and services, for example, the collection of diagnostics (e.g. errors and system statuses) and traffic or location information. Note that devices and applications have their own privacy settings and notices under which they collect your information, so please check and manage your device and application settings.
• Special category data, including health information.

Your personal data is used by DNEG for the following purposes and legal bases:

In reliance on DNEG’s legitimate interests, including:

• To respond to general enquiries, queries and complaints from members of the public, the media and investors and to communicate with business contacts.
• To gather expressions of interest in and to help coordinate, plan and administer events.
• For advertising, marketing, business development and public relations purposes. This may include communications by post, telephone, SMS, email or other electronic means, using contact details you or your representatives have provided to us.
• For market research.
• To capture photographs and videos taken at our events, and to use and communicate the images for marketing and promotional purposes.
• To monitor, record, store and use service communications we have with you. This helps us to improve the quality of our customer service, to confirm any instructions you give us, and/or for training and development.
• To promote our people, services and the content on which we have been engaged. For example, by listing the Credits (the names and job titles) of the cast and crew of content on which DNEG worked, by nominating DNEG people for awards consideration and by creating monthly newsletters.
• To protect or enforce our rights or the rights of any third party and prevent and detect fraud, including by analysing activity on our network to help block unauthorised or illegitimate content, publication of or access to it.
• For the protection of the legitimate rights and interests of DNEG and/or third parties, including to support legal and compliance activity including the defence of litigation claims.

Where DNEG has a legal or regulatory obligation, including:

• Responding to legitimate, lawful requests for information from law enforcement and other government agencies and as part of court orders where DNEG is legally required to provide the information.
• Processing data to conduct internal investigations as part of responding to requests for information and complaints from regulators, and to comply with requirements from regulators, such as the Information Commissioner’s Office or the Financial Conduct Authority in the UK.
• Monitoring DNEG’s compliance with Data Protection obligations and principles and maintaining records to demonstrate such compliance, including managing and responding to requests received from individuals exercising their rights under Data Protection legislation.

Where you have provided your consent, including:

• For advertising, marketing, business development and public relations purposes.
• In order to process special category data you’ve provided to us. This may include using data you have provided to us or to our business partners concerning your health to enable us to provide you with assistance and support when you attend one of our events or offices.

We will also process your data where we need to in order to safeguard your vital interests or those of another person, for example, to support crime prevention and protect the safety of members of the public and DNEG employees.

We work with a number of suppliers and partners to process your personal data for the purposes described above. Where these suppliers and partners act on our behalf they must only process your personal data in accordance with our instructions. The categories of suppliers and partners that we use include:

• IT and information technology and services companies
• Other DNEG Group companies (DNEG company details can be found here, and ReDefine company details can be found here)
• Marketing and PR companies that deliver our communications
• Companies that manage and maintain website content
• Survey partners
• Freelancers
• Delivery and courier companies
• Travel and booking management providers

Sometimes our UK and EU companies share personal data with suppliers and business partners who may process it outside of the UK or European Economic Area. Most of the time the data we share will be with companies who supply services to us to enable us to supply our services to you. We grant these companies access to personal data only where necessary and only where appropriate security measures and controls are in place to protect your personal data in accordance with applicable data protection laws, regulations and regulatory guidance. This means these transfers will take place on the basis of approved data transfer mechanisms, such as UK or EU Standard Contractual Clauses and EU Commission Decisions on Adequacy (country details here).

We may also share personal data with the courts, enforcement agencies (e.g. the police) and with regulatory authorities (e.g. Data Protection Regulators) where this is required, in order for us to comply with our legal and regulatory obligations.

In the event the structure of our business changes so that another DNEG Group company provides our services, we will pass your personal information to that company. This includes, for example, a merger between us and another company, where another company acquires us or some or all of our assets, where we acquire another company or where our holding company restructures our corporate group.

You have the following rights in relation to your personal data:

• To request access to, erasure of, and/or correction of the personal data we hold about you.
• To request us to restrict the processing of the personal data we hold about you.
• To object to us processing personal data relating to you.
• Where you have given us consent to process your personal data, to withdraw that consent at any time.
• To obtain certain personal data from us in a format that can be transferred electronically to a third party (also called “data portability”).

Please note that some of these rights are not absolute, and whether you can exercise your right depends on the circumstances. We will keep you informed throughout the process.

You may update, correct or modify any information held by DNEG, or withdraw your consent where your data is processed on the basis of consent, at any time by contacting us using the details above.

All data held by DNEG is processed in accordance with all applicable data protection laws, meaning that the data will only be processed and retained for the purposes for which it was originally collected.

You can contact us using the details above if you wish to find out more about how to exercise your subject rights.

For individuals who are resident in California, please be aware that DNEG does not sell your personal information.

Artistic purposes

There may be circumstances where our processing of personal data is necessary for artistic purposes in the public interest but that such processing is incompatible with data protection laws (for instance, as part of the exploitation of a production and in publishing lists of cast and crew on our website). In these circumstances there are exemptions that apply to certain data protection requirements and on which we may rely. However, we will always use our best efforts to comply with data protection laws and this notice where possible.

We will usually only keep your information for as long as we need it for the purposes it was collected, and we apply the following retention periods to your information:

• General enquiries and correspondence are retained for 2 years.
• Information captured as part of the organisation and administration of events are retained for a maximum of 1 year after the events.
• Photographs and videos will be retained for a maximum of 5 years after the events.
• Contact details for advertising, marketing, business development and public relations purposes will be retained for a maximum of 3 years after we last contact you.

We keep the data for this length of time for business reasons because the information is helpful if we receive any enquiries or complaints, and so that we are able to verify your identity when you contact DNEG.

In some cases, information such as contact information and correspondence with notes and complaints will need to be retained for longer periods for regulatory purposes so that DNEG can demonstrate compliance with Data Protection legislation, for example, where we need to evidence that we have responded to and dealt with subject rights requests made by individuals; or to enable us to defend potential legal claims under the statutory periods set out in applicable legislation.

If you have any queries or comments about this Privacy and Cookies Notice, please contact us at info@dneg.com or the Data Protection Officer by email on dataprivacy@dneg.com.

In addition, you can contact the Data Protection Officer by mail at the addresses available on dneg.com and redefine.co.

If you wish to make a complaint about how DNEG uses your information, please contact the Data Protection Officer via email and we will do our best to help. If you are still unhappy, you can contact your Data Protection Authority as follows:

• For the UK company listed above, the Information Commissioner’s Office: https://ico.org.uk.
• For the Bulgarian company listed above, the Commission for Personal Data Protection: https://www.cpdp.bg.
• For the Hungarian company listed above, the Hungarian National Authority for Data Protection and Freedom of Information: https://www.naih.hu.
• For the Spanish company listed above, the Agencia Española de Protección de Datos (AEPD): https://www.aepd.es/es.
• For the Australian company listed above, the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au/.

Cookies are created when you visit a website. They are small files that are stored on your device and used to customise your experience.

When you access dneg.com, redefine.co or other DNEG websites for the first time, you will be asked to set your cookie preferences for the site.

To help you make your choices this notice explains how we use cookies and similar technologies to collect information when you access our services and how we use that information. We also explain when and how you can manage your cookie preferences.

We use cookies to make your use of our sites quicker, easier and more relevant to you. If you don’t turn these cookies on it may affect your browsing experience. To avoid impacting your browsing experience cookies need to be enabled in your browser settings.

What do we use cookies for?

Required Cookies:

These cookies are needed to provide the content, product or service you have asked for. We use required cookies for the following purposes:

• Enabling you to stream content properly
• Making sure our website is working properly and displayed correctly
• Remembering if you’ve been to the site before
• Enabling features of our service.

Functional/Performance cookies:

We use cookies to help improve our websites. For example:

• To keep track of what pages, content and links are popular and which ones don’t get used.
• To see how users navigate through our sites, when error messages appear and what caused them.
• The information collected using these cookies is grouped with the information from everyone else so we can see overall patterns rather than individual activity. When given the option, we recommend you turn on cookies used for these purposes.

How long do cookies stay on your device?

When you set your cookie preferences on one of our sites, we will remember those preferences. We will ask you again to confirm your preferences after 180 days, unless we add new cookies or use non-essential cookies for different purposes in the meantime, in which case we will ask you to confirm your preferences again when we make those changes. Please note that if you change your preferences to reject cookies which you had previously accepted, DNEG will stop collecting data from these cookies but some of them may remain on your device until you clear them. To find out how to do this, please see “Other ways to manage your cookie preferences” below.

Managing your cookie preferences

We don’t give you the option to turn off Required cookies when you manage your cookie preferences because these cookies are required and necessary to make our sites function properly. For the other categories of cookies referred to above, you can control how they are used on that DNEG site. After you have made your initial choice, you can change your preferences via the ‘Cookie Preferences’ link in the footer of the site.

Other ways to manage your cookie preferences

Most modern browsers allow you to see what cookies you have on your device and to clear them all or individually. To find out how to do this, go to aboutcookies.org, which contains comprehensive information on how to do this on a variety of browsers.

Please remember that any settings you change will not just affect the cookies we use. The changes will apply to all websites you visit unless you choose to block cookies only from specific sites.

Deleting cookies means that settings you have made on a site or app will be lost. If you’ve set your preferences to opt out of cookies, this setting will be lost too if that information is stored in a cookie. Blocking all cookies means functionality on our sites and apps may be lost. Therefore, we don’t recommend turning all cookies off when using our sites and apps.