1. The Data Controller

Personal data is being handled by ORIGO Film Group Zrt. (company registration number: 01-10-045812, registered seat: 1151 Budapest, Felsőkert utca 9., hereinafter: Data Controller), the owner and operator of origostudios.com.

The Data Controller is committed to the protection of its website users' and visitors' personal data and makes it a priority to honor their right to informational self-determination. The Data Controller processes all personal data confidentially, and takes all safety, technical and organizational measures to guarantee data security.

Contact details:
• E-mail address: contact@origotalent.com
• Phone number: 00 36 1 3270590
• Postal address: 1151 Budapest, Felsőkert utca 9.

Name and contact details of the Data Protection Officer:
• Name: Mihály Tóth
• E-mail address: mihalytoth@kerkom.hu
• Phone number: 00 36 30 4891212
• Postal address: HABILITÁS Kft., 1136 Budapest, Hegedűs Gyula utca 40. fszt. 1.
2. About individual data processing

Visiting and viewing the page of the website of the Data Controller (https://www.origotalent.com  hereinafter: Website ) presenting Hungarian and foreign language speaking actors lawfully residing in Hungary, as well as registering and accessing the Website are all activities that involve the processing of personal data.

Personal data is processed in accordance with the present Privacy Statement and Regulation 2016/679/EU of the European Parliament and of the European Council (hereinafter: GDPR ) and Act CXII of 2011 (hereinafter: Info Act ).

2.1 Data processing in connection with application to the Website ('Application Form')

By applying to appear on the Website, you provide a number of personal details, such as your name, date of birth, height, eye colour, contact details, etc. You also have the option to include references by linking or uploading. Please note, that if the uploaded image, video, or audio material includes other persons besides you, you must have appropriate consent or authorisation from those persons to use it. By uploading the image, video, or audio materials, you take responsibility for ensuring that you have properly informed these persons and then obtained their necessary consent.

All personal data you have submitted during your application are being processed by the Data Controller to assess it and decide whether you will be given the opportunity to appear on the Website.

The legal basis for data processing is your (the data subject's) consent (Article [6] [1] [a] GDPR).

Duration of storage of personal data: in the case of an unsuccessful application, up to 3 months from the assessment of your application, in the case of a successful application, the Data Controller will no longer process your data for assessment purposes.

2.2 Data processing in connection with appearance on the Website

If your application to appear on the Website is successful and your profile is fit to appear on the Website, the Data Controller will continue to handle your data you have provided during the course of your application and display your profile on the Website. Details you have provided are displayed on the Website as searchable categories.

Personal data you have provided will be processed by the Data Controller in order to create a profile and display that profile containing your data on the Website.

The legal basis for data processing is your (the data subject's) consent (Article [6] [1] [a] GDPR).

Duration of storage of personal data: until you withdraw your consent, or for 5 years after the first appearance on the Website, and every 5th year thereafter the Data Controller will ask you to re-confirm whether you consent to your data being processed or whether you request their erasure.

2.3 Disclosing the contents of your profile

Please note that your consent not only extends to your appearance in the database, but explicitly includes the disclosure of your data by the Data Controller, making the data it contains openly available to the public in a searchable form.

The database also contributes to foreign film productions in Hungary to optimise their costs and reduce their carbon footprint related to travel.

If you do not wish to consent to the above conditions, please do not submit your application to the Website, as the purpose of the data processing cannot be fulfilled without disclosing your data.

The personal data you provided is being disclosed to the public by the Data Controller to promote your employment as an actor by showcasing your qualities and characteristics. The database displays actors’ profiles in an easily searchable and transparent manner, helping film studios conveniently find and directly contact the most suitable actors for the role.

The legal basis for data processing and disclosure to the public is your (the data subject’s) consent (Article [6] [1] [a] GDPR).

Duration of storage of personal data: until you withdraw your consent, or for 5 years after the first appearance on the Website, and every 5th year thereafter the Data Controller will ask you to re-confirm whether you consent to your data being processed or whether you request their erasure.

2.4 Data processing

Sub-contractors we employ to run and maintain our Website, may occasionally have access to your personal data. Our sub-contractors therefore work in complete confidentiality and provide contractual guarantees that they will fully comply with our instructions and applicable data protection provisions. Your data shall remain under our control even if we use a data processor.

During our activity, we employ the following data processors:

• Web hosting provider: ORIGO Film Group Zrt. , contact: it@origofilmgroup.com
• Web developer: Gorgó-M Kft., contact: felfoldi.hajni@gmail.com
• E-mail service provider: Microsoft Corporation, contact: it@origofilmgroup.com

2.5 Transmission of data

Your personal data may only be transferred to third parties in exceptional cases, such as to comply with a legal obligation, typically at a court of law or other authority's request, or if you have explicitly given your consent to the transmission of your data.

A separate database is being maintained for ad hoc data transmissions, which data subjects may access on request.

Your kind attention is once again drawn to the fact that your consent not only extends to your appearance in the database, but explicitly includes the disclosure of your data by the Data Controller, making the data it contains openly available to the public in a searchable form.

2.6 Transmission of personal data to third countries or international organisations

As a Data Controller, we only transmit your personal data to third countries on the basis of your consent, or if it is in our legitimate interest, and only in the cases we have received adequate guarantees from our third-country data controllers that data rights in that country are effectively enforceable and effective legal remedies are in place.

We do not forward your data to international organisations.

3. Withdrawal of consent

In the case of data processing on the legal basis of consent, you may withdraw your consent at any time, by notifying us at one of the contact details listed under point 1. In this case, we will immediately remove your profile from the Website. When submitting your application, please take into consideration that any subsequent withdrawal of your consent will not affect the lawfulness of consent-based data processing prior to your withdrawal, and that before the withdrawal - it being the purpose of the Website - anybody may have accessed your personal data, over which the Data Controller has no control.

4. Your rights as data subject

You retain your right to control your personal data for the duration of the data processing. As a data subject, you maintain the right to access, rectify, erase, or restrict the procession of your personal data, to object to the processing of your data, and, in certain cases, you have the right to data portability.

These rights are detailed in Article 14-22 of the GDPR.

To exercise your data subject rights, please contact us at one of the contact details provided. You will receive a reply as soon as possible, and in any event within one month of receipt. While complying with your request, no cost will be charged.

If you wish to exercise your data subject rights, your identity will need to be verified, and the Data Controller will need to communicate with you. In order to verify your identity, you will be asked to provide your personal data (however, verification can only be based on those data, which are already being processed of you), and your request will remain in the Data Controller's e-mail account for the duration of data processing period, as indicated in this Privacy Statement.

4.1 Right to information

As data subject, it is your right to receive concise, transparent, understandable, and easily accessible, clearly worded information regarding the procession of your personal data. This is the aim of this Statement.

If you find that we have not worded the conditions of your data processing clearly or explicitly enough, or if you have further questions, please do not hesitate to contact us at our contact details.

4.2 Right of access

On the data subject's request, following identity verification, the data subject will be informed about whether we are processing his or her data, and if so, the details of data procession.

4.3 Right to rectification

If your processed personal data is inaccurate or incomplete, we shall rectify or complete it based on your request or statement.

4.4 Right to erasure (‘right to be forgotten’)

At your request, your data will be deleted once the processing has fulfilled its purpose; in the case of consent-based data procession, if you withdraw your consent; or if you legitimately object to your data being processed; furthermore, if processing your data would be unlawful; or if your data need to be erased in order to comply with a legal obligation.

If you requested the erasure of your personal data, we may solely continue processing them in extraordinary circumstances, such as complying with legal obligations or pursuing legal claims.

4.5 Right to restriction of processing

On your request, we may restrict the processing of your data:

• if you contest the accuracy of your personal data, for a period enabling us to verify their accuracy;
• if the processing is suspected to be unlawful and you oppose the erasure until its investigation is concluded;
• if we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
• if you objected to processing, pending the decision on your objection.

In these cases, your data may only be processed with your consent, or for exercising legal claims, or for reasons of important public interest.

If data processing has been restricted based on your request, you will be informed before the restriction of processing is lifted.

4.6 Our obligation to notify data recipients

As Data Controller, we shall communicate any rectification or erasure of personal data or restriction of processing to each recipient with whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You shall be informed about those recipients upon request.

4.7 Right to data portability

As data subject, you have the right to receive the personal data concerning yourself, which you have provided to us and we are processing based on your consent or a contract between us, in a structured, commonly used, and machine-readable format. You may request us to transmit those data to another data controller.

4.8 Automated decision-making in individual cases, including profiling

While processing your data, we do not use automated decision-making or profiling.

4.9 Withdrawal of consent

If we process your personal data based on your consent, you may withdraw your consent at any time. However, the withdrawal shall not affect the lawfulness of your data processing conducted on the basis of your consent before the withdrawal.

4.10 Exercising legal claims regarding personal data after the death of the data subject

Within five years of the death of the data subject, the rights of the deceased when alive may be exercised by a person authorised by the data subject by means of a declaration duly made to the Data Controller. If the data subject has not made such a declaration, his or her next of kin according to the Civil Code has the right to request the rectification of the personal data and object to the processing of personal data based on his or her legitimate interest.

The person exercising this right shall verify the fact of the data subject’s death and the time of death, as well as his or her identity, and – if applicable – him or her being the next of kin, by means of adequate documentary evidence.

5. Data subject's right to complaint and other legal remedies

If you have any questions, comments, or complaints regarding the processing of your personal data, please contact us at one of our contact details listed in point 1, and we will do our best to answer and resolve them.

If you believe that you have been wronged as data subject, you may also directly submit a complaint to the National Authority for Data Protection and Freedom of Information (you may find contact details at the https://naih.hu/ website).

You may also turn directly to the court to enforce your rights.

6. Changes to the Privacy Statement

The Data Controller reserves the right to change this Privacy Statement at any time. Data subjects will be notified of changes to the Privacy Statement in due course.

Origo Film Group Zrt. Private Limited Company

Budapest, 15 December 2023