Recycled Movie Costumes is dedicated to respecting the privacy of your Personal Data & Personal Information… YOU own your data.
This Privacy Policy describes how Recycled MovieCostumes.com processes Personal Data/ Personal Information pertaining to natural persons that have registered themselves into the website. This includes how such data/ Information is collected, stored, accessed, processed, and shared.
This Privacy Policy is provided to you, in line with the following Applicable personal data Protection Legislation:
- The Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, also known as the General Data Protection Regulation (the GDPR), which became enforceable across the EU and the EEA from 25 May 2018, having replaced the previous Directive 95/46/EC; In Ireland, the national law, which amongst other considerations, gives further effect to the GDPR, is the data Protection Act 2018 (‘the 2018 Act’).
- The Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009, also known as the ePrivacy Directive, amending the Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks and services, Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and Regulation (EC) No 2006/2004 on cooperation between national authorities responsible for the enforcement of consumer protection laws.
- The California Consumer Privacy Act 2018 (CCPA), assembly Bill of the State of California, United States of America, No. 375, under CHAPTER 55, an act to add Title 1.81.5 (commencing with Section 1798.100) to Part 4 of Division 3 of the Civil Code, relating to privacy and approved by the Governor on 28 June 2018. Filed with the Secretary of State on 28 June 2018 and enforceable since 01 January 2020.
The primary goal of processing personal data is to allow Recycled MovieCostumes.com the identification of those natural persons who have joined Recycled MovieCostumes.com on their own free will and initiative as website users.
RecycledMovieCostumes.com (the organization and its staff members) is aware that Personal Data may represent a risk towards you if accessed by unauthorized third parties. Therefore, a set of Policies, Operational Processes, and mechanisms (technological and human-based) have been developed, to ensure that the personal data entrusted by you to RecycledMovieCostumes.com will be maintained, handled, and shared in a manner that warrants its security, accuracy, confidentiality, and privacy, hence assuring your personal data Protection.
Personal data is exclusively Processed under the scope and purpose of the Services described on this Privacy Policy.
Every data subject maintains full control over his/ her personal data as well as the personal data processing activities undertaken by RecycledMovieCostumes.com (as defined under applicable personal data Protection Legislation or specifically the GDPR, where its ruling is more protective of the data subject’s Rights.
APPLICABILITY
Recycledmoviecostumes.com reserves the right to modify this Privacy Policy at any time by posting updated time-stamp versions on its website.
THE DATA CONTROLLER
Recycledmoviecostumes.com is a United States-based service that acts as an online track and tracing repository over Movie Costumes whereabouts; meaning users who have freely registered on the website will input and update information on movie Costumes that have been used on movies, which have been those movies and where they can be found at present time.
All questions or requests regarding the processing of the personal data under Recycledmoviecostumes.com control or processing may be addressed to [email protected].
RECYCLEDMOVIECOSTUMES.COM CORE ACTIVITY – SERVICE CATALOG AND LEGAL BASIS
As mentioned, Recycled Movie Costumes allows its users to register and consult information about Movie Costumes; and the Processing of Personal Data occurs exclusively under Explicit Consent which is asked of you when you register on the website.
Under this scope, Recycledmoviecostumes.com’s Service Catalogue includes the following services and inherent Personal Data Processing Activities:
Enter information on a given movie costume.
Search registered information on a given movie costume.
Recycledmoviecostumes.com will exclusively profile your actions over the website (e.g. which costumes you have visualized over a period of time) if you specifically provide your Explicit Consent to such processing activities, which may benefit you for they will allow Recycledmoviecostumes.com to channel information about Movie Costumes that you have demonstrated (by your actions on this website) to be interest in.
Recycledmoviecostumes.com does NOT share any of its profiling information with any 3rd party.
Be informed about updates to movie costumes registered information that might be of interest to you. Nevertheless, you must agree to becoming a member of our mailing list by providing your Consent to it.
ADDITIONAL PROCESSING OF PERSONAL DATA
When a data subject uses the Recycledmoviecostumes.com website, session cookies will be placed on his/ her browser device to allow the following services which are relevant for the accurate deliver of the services or to the data subject him/ herself:
- Type of device and web browser in use – allowing for the content to be displayed in a manner that allows and improves its visualization.
- Allowing load balancing (meaning for the service to be delivered with minimum latency.
None of these “mandatory” cookies (in the sense that without them the service may not be properly delivered) are able to or used to identify the user.
If you provide your Consent to Profiling additional Cookies may be required, so Cookies that are presented as “optional” may become “mandatory”, namely:
- Allowing IP addresses collection/ location data – exclusively cross-referenced with other data for the purpose of safekeeping the user with regards to potential specific taxes or legal obligations that may apply where purchasing online from the country of residence/ access and/ or for marketing purposes to assertively include campaigns or promotions that apply to your geography on the Mailing List messages.
- Storing and tracking views – it is part of the profiling activities and allows Recycledmoviecostumes.com to assess your preferences and points of interest.
This website (as determined under the EU ePrivacy Directive) allows you to manage all Cookies in use that are not “mandatory” (in the sense that if not active the service may not be available or present errors).
STORING
Recycledmoviecostumes.com is a digital company and the data and information it requires to operate is exclusively maintained in digital format on its IT systems hosted at BigScoots data centers in the United States of America (U.S.).
Using Recycledmoviecostumes.com means therefore that Personal Data pertaining to you will be transferred from your country of residency to the U.S. and that the Consent you provide to become a user of this website also implies your Consent to the transfer of such Personal Data to the U.S.
Data in transit and at rest is encrypted, guaranteeing its security and confidentiality according to market standards.
DATA MINIMIZATION
Recycledmoviecostumes.com takes every reasonable step to ensure that personal data under its direct processing activities (as the Controller) is limited to the minimum amount and type that is necessary to the successful execution and delivery of its service and no more than that.
PERSONAL DATA SECURITY, PRIVACY, AND CONFIDENTIALITY ASSURANCE
Recycledmoviecostumes.com IT landscape is configured and monitored under guidance provided by the strictest security market standards (e.g., ISO 27000 family, Soc2, ITIL, Privacy by Design) and it has reviewed and adopted changes to its operational processes in a manner that ensures compliance with the requirements posed under applicable personal data Protection Legislation towards the Protection of Personal Data/ personal Information. This is intended to assure confidentiality and privacy while under personal data processing activities performed by itself and its partners within the scope of Recycledmoviecostumes.com rendered services.
PERSONAL DATA RETENTION
Data retention is a major potential risk generator since, during the period the data is available, it may be accessed by a third party, constituting a personal data breach.
Recycledmoviecostumes.com will maintain Personal Data from its users while they remain active users of the service, meaning for a maximum period of 6 months after the last Login. Once such period has elapsed without the user having logged in, Recycledmoviecostumes.com will automatically send a message to that user asking him/ her to login; if the user does not login within 1 calendar week of the message having been issued, all Personal Data pertaining to that user (unless if any must be maintained under a Legal Requirement or Legitimate Interest in case of an ongoing dispute) will be erased from Recycledmoviecostumes.com repositories.
DATA SUBJECTS RIGHTS
Under applicable personal data Protection Legislation, the data subject has the following set of established rights:
[GDPR] Right of access. The right to obtain from the controller confirmation as to whether their personal data is being processed, and, if so, to access such personal data as well as related information. Recycledmoviecostumes.com will share the personal data over a secure channel, and that (depending on the type of data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the data subject to ensure authorized secure access. participants may exercise this right by reviewing information on the Recycledmoviecostumes.com website user account area or by submitting a request as per herein defined ahead in this document which is the application process for those data subjects who are not a Recycledmoviecostumes.com Participant.
[CCPA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California residents have the right to:
- Know the categories of personal information we collect and the categories of sources from which we got the information;
- Know the business or commercial purposes for which we collect and share personal information;
- Know the categories of third parties and other entities with whom we share personal information; and
- Access the specific pieces of personal information we have collected about you.
[GDPR] Right to rectification. The right to obtain the rectification of inaccurate personal data pertaining to that data subject. participants may directly amend existing information on the Recycledmoviecostumes.com website user account area or by submitting a request as per herein defined ahead in this document which is the application process for those data subjects who are not Recycledmoviecostumes.com participants.
[GDPR] Right to erasure. The right to have personal data pertaining to them that is under processing by Recycledmoviecostumes.com erased and, therefore, processing stopped, unless a legal duty or have a legitimate ground to retain certain data prevents Recycledmoviecostumes.com from observing such right, in which case the data subject shall be duly informed. This right may be exercised by submitting a request as defined in the procedure stated below in this section.
[CCPA] Right to deletion – again in a similar manner to what the GDPR rules, natural persons who reside in the state of California may, in some circumstances, ask us to delete their Personal Data/ information. We may refuse the exercise of such right if it prevents us from exercising legal defense, we cannot do it driven from a legal obligation or there is the risk of by doing so, not being able to fulfill any open contractual obligations.
[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and have in place processing restrictions (in scope and purpose) towards personal data that pertains to them. When exercising this right, the data subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the data subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to processing, asking for additional confirmation prior to implementing the request. This right may be exercised by submitting a request as defined in the procedure stated below in this section.
[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy has occurred under the Legal Basis of Legitimate Interest by the side of Recycledmoviecostumes.com. The exercise of this right may also occur where the data subject wishes to opt-out from an existing Service (and not necessarily cancelling the Service). When exercising this right, the data subject must be specific about which processing activities are being requested to stop and the Controller shall provide feedback to the data subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to processing, asking for additional confirmation prior to implementing the request. This right may be exercised by submitting a request as defined in the procedure stated below in this section.
[CCPA] Right to opt out of sales – We do not sell your data.
[GDPR] Right to data portability. The right to receive the personal data pertaining to that data subject, in a structured, commonly used and machine-readable format as well as the right to transmit such personal data to another controller without hindrance. Recycledmoviecostumes.com will share the personal data over a secure channel, and that (depending on the type of data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the data subject to ensure authorized secure access. Customers may directly amend existing information on Recycledmoviecostumes.com’s website user account area or by submitting a request as per herein defined ahead in this document which is the application process for those data subjects who are not Recycledmoviecostumes.com Customers.
[GDPR] Right to be informed about a personal data Breach. The data subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her personal data to unauthorized 3rd parties within 72 hours of its occurrence.
[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding Recycledmoviecostumes.com’s processing activities over his/ her personal data towards any of the EU Member States data protection Supervisory Authorities. Recycledmoviecostumes.com is however also available to provide any clarification towards those data subjects who may feel that it’s processing of the personal data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such personal data processed in a secure manner and Confidentiality assurance. data subject may submit a complaint via the request process as per herein defined ahead.
[CCPA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. We are, however, permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data. For any of the above-mentioned CCPA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may take additional time to fulfil your request.
Any data subject may exercise his/ her rights under GDPR by reaching out to Recycledmoviecostumes.com’ DPO through the e-mail address [email protected].
If you have any questions, complaints or wish to exercise your rights under GDPR, please do make clear on your message:
- Purpose: Question; Complaint; Exercise of the data subject’s rights under GDPR
- What triggered your need to contact us?
- When did the root cause which triggered the need to contact us took place?
- If a Participant, a mobile phone number or alternative personal e-mail address so we may proceed with a two-factor authentication process.
Why the need to provide alternative personal contact?
Under applicable personal data Protection legislation only the data subject may exercise his/ her rights, hence organizations must ensure and document that the data subject or his/ her legal representatives are the ones interacting with the company while acting over his/ her personal data.
GLOSSARY
“Data Protection Officer” (DPO) means the natural person within a company who bears the responsibility of ensuring corporate compliance towards GDPR (as defined under this Regulation), both by means of monitoring compliance status as well as acting towards the organization and management structure informing those about existing non-conformity points and the need for the organization to act upon them in order to make them compliant with GDPR rules, guidelines and requirements.
“Data subject” means the identified or identifiable natural person to whom personal data relates. Both Parties understand that the data subject is the sole owner of personal data which pertains to them.
“Data subjects’ Rights” means the rights established towards the data subjects under Applicable personal data Protection legislation. Please check the item below under the title “How to exercise data subjects’ rights”
“IT Landscape” means the set of IT assets and services of and at the disposal of each party that enables their personal data Treatment” operation, meaning the communications infrastructure (LAN, WAN, Wi-Fi networks), data Center and technical rooms, Cloud-based services, workstations, software systems and tools, mobile devices in use, peripheral IT devices, Firewalls and web-based resources.
“Legal Basis” means the enlisted lawful grounds that a company has to entice personal data Treatment” activities under GDPR, namely (but not limited to) having documented: the data subject Explicit Consent towards personal data Treatment activities; the company Legitimate Interest in proceeding with “personal data Treatment” activities; accessory legal obligations that the company must observe and which entitled it to proceed with personal data processing activities within the limits of such ruling and inherent obligations; other as per defined under GDPR.
“Personal data processing activities” means any operation or set of operations which is performed upon personal data, whether or not by automated means, such as collection/ retrieval; accessing (consultation, use); processing (organization, structuring, adaptation or alteration); storage (recording, erasure or destruction); sharing (disclosure by transmission, dissemination or otherwise making available, publishing).
“Personal data Breach” means any event or incident (as per ITIL definition) which enables the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data.
“Processor” means the entity which proceeds with authorized personal data processing activities (under this DPA and the Agreement) on behalf of the Controller.
“Service Catalog” means the set of Services rendered by Recycledmoviecostumes.com that requires personal data processing activities.
“Sub-processor” means any Processor engaged by any of the Parties which performs complimentary personal data processing activities within the scope of the Services.
CONTACT US
If you have any questions or complaints about this Policy, please contact us at [email protected].
Last updated on November 16, 2022.
Costume Commentary
*Conchita Closson