Privacy Policy - TonyScott

We maintain an unwavering dedication to protecting and preserving all personal data provided by our website visitors and service users, implementing robust and comprehensive security measures throughout our services and operations.

This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. In this role, we are responsible for ensuring the proper handling, processing, and protection of all personal data submitted through our website.

We may process usage data (“usage data”), which comprehensively includes browser type, operating system, page views, navigation paths, timing and frequency of visits, device information, and interaction patterns. This information is collected through automated logging systems, cookies, and analytics tools and may include session duration, preferred content categories, and download activities. The source of this data is our analytics tracking system, user devices, and browser interactions. We process this information for several important purposes, including improving website performance, analyzing user behavior, optimizing content delivery, and enhancing user experience, which enables us to provide personalized services, improve navigation, and optimize our content strategy. The legal basis for this processing is our legitimate interests in monitoring and improving our website services.

We may process account data (“account data”), which comprehensively includes email address, username, password hash, account preferences, notification settings, and authentication details. This information is collected through registration forms, account updates, and user preferences and may include communication preferences, subscription status, and account security settings. The source of this data is direct user input during account creation and management. We process this information for several important purposes, including account authentication, service delivery, security monitoring, and communication management, which enables us to provide secure access, maintain account integrity, and deliver personalized services. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.

We may process profile data (“profile data”), which comprehensively includes name, professional title, company affiliation, industry sector, areas of interest, and professional background. This information is collected through profile completion forms, user submissions, and periodic updates and may include professional achievements, expertise areas, and industry connections. The source of this data is direct user input and profile management activities. We process this information for several important purposes, including personalizing content delivery, facilitating networking opportunities, enabling relevant recommendations, and improving user experience, which enables us to provide targeted resources, relevant connections, and customized content. The legal basis for this processing is our legitimate interests in providing personalized services and maintaining a professional network platform.

You have the right to access your personal data, which means you can obtain confirmation about whether we process your personal data and receive a copy of that data in a structured format. This includes the ability to view all personal data we hold about you, understand how we use it, and verify its accuracy. To exercise this right, you can submit a formal data access request through our dedicated privacy portal or contact our data protection officer directly. We will respond within 30 days and may require government-issued identification, proof of address, and account verification to verify your identity.

You have the right to rectification, which means you can request the correction of inaccurate personal data or complete any incomplete personal data we hold about you. This includes the ability to update profile information, correct account details, and modify contact information. To exercise this right, you can use our account settings interface or submit a formal correction request through our support system. We will respond within 15 days and may require account verification, supporting documentation, and specific detail about the information to be corrected.

You have the right to erasure, also known as the right to be forgotten, which means you can request the deletion of your personal data when there is no compelling reason for its continued processing. This includes the ability to delete your account, remove specific data points, and withdraw processing consent. To exercise this right, you can initiate account deletion through our privacy settings or submit a formal erasure request. We will respond within 30 days and may require password confirmation, written confirmation of intent, and identity verification.

You have the right to restrict processing, which means you can limit the way we use your personal data when you have particular concerns about its accuracy or use. This includes the ability to pause data processing, limit data usage, and temporarily block specific processing activities. To exercise this right, you can adjust your privacy preferences or submit a formal restriction request. We will respond within 15 days and may require account authentication, specific processing concerns, and verification of restriction scope.

You have the right to data portability, which means you can obtain and reuse your personal data across different services for your own purposes. This includes the ability to download your data, transfer information to another platform, and receive data in a machine-readable format. To exercise this right, you can use our data export tool or submit a formal portability request. We will respond within 30 days and may require account verification, format specifications, and destination details.Data Collection and Processing

Service Data Processing
We process service data which includes user profiles, account settings, preferences, and interaction history with our platform. This processing involves automated collection, storage, and analysis, enabling us to deliver personalized content and service improvements. For example, in the context of film-tv, this includes viewing histories, content ratings, and genre preferences. The legal basis for this processing is legitimate interests and contractual necessity, specifically to provide and improve our services based on user engagement patterns and stated preferences.

Technical Data Processing
We process technical data which includes device information, IP addresses, browser types, and system logs. This processing involves automated collection through cookies and similar technologies, enabling us to ensure optimal platform performance and security. For example, in the context of film-tv, this includes streaming quality optimization and device compatibility tracking. The legal basis for this processing is legitimate interests, specifically to maintain service reliability and security while improving user experience.

Communication Data Processing
We process communication data which includes emails, support tickets, and forum interactions. This processing involves storage, analysis, and response management, enabling us to provide effective customer support and community engagement. For example, in the context of film-tv, this includes discussion forum posts and content feedback. The legal basis for this processing is legitimate interests and consent, specifically to facilitate user communication and community building.

Transaction Data Processing
We process transaction data which includes purchase histories, subscription details, and payment information. This processing involves secure storage and analysis, enabling us to manage subscriptions and process payments effectively. For example, in the context of film-tv, this includes premium content access and subscription renewals. The legal basis for this processing is contractual necessity and legal obligations, specifically to fulfill our service agreements and comply with financial regulations.

Preference Data Processing
We process preference data which includes content preferences, notification settings, and personalization choices. This processing involves analysis and application of user choices, enabling us to deliver customized experiences. For example, in the context of film-tv, this includes content recommendations and viewing preferences. The legal basis for this processing is consent and legitimate interests, specifically to provide personalized services based on stated preferences.

Security Measures

Our comprehensive encryption protocols ensure end-to-end protection of your data, incorporating industry-standard algorithms and regular security updates to maintain data integrity. This includes regular security assessments and penetration testing by qualified professionals.

We implement multi-layered security infrastructure, including advanced firewalls and intrusion detection systems that continuously monitor for and prevent unauthorized access attempts. This infrastructure undergoes regular updates and enhancements.

Access to personal data is strictly controlled through role-based permissions, multi-factor authentication, and detailed access logs. We maintain comprehensive audit trails of all data access and modifications.

Our continuous monitoring systems provide real-time threat detection and automated response protocols, ensuring immediate action against potential security threats.

We maintain comprehensive backup procedures with encrypted offsite storage and regular recovery testing, ensuring data availability and integrity.

All staff undergo regular security awareness training and must comply with detailed data protection protocols, including specific training for handling sensitive data.

International Transfers

Transfer Mechanisms
We may transfer your personal data to countries outside your jurisdiction. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses, Binding Corporate Rules, and approved certification mechanisms. Each international transfer is conducted under strict protocols that ensure:
– Adequate data protection standards
– Compliant processing procedures
– Enforceable data subject rights
– Effective legal remedies

Data Protection Standards
International transfers are protected by EU Standard Contractual Clauses, Privacy Shield Framework, and ISO 27001 certification, ensuring compliance with GDPR and local data protection laws. We implement additional measures including:
– Regular compliance audits
– Data protection impact assessments
– Documented transfer mechanisms
– Continuous monitoring procedures

User Rights for Transfers
Regarding international transfers, you maintain specific rights including:
– Right to information about transfers
– Right to object to transfers
– Right to withdraw consent
– Right to data protection guarantees

Data Retention

We maintain specific retention periods for different data categories:

Retention Periods:
– Account Information: 7 years after account closure for legal compliance
– Usage Data: 2 years from collection for service improvement
– Transaction Records: 7 years for financial regulations
– Communication History: 3 years for support reference
– Technical Logs: 1 year for security monitoring

These retention periods are determined by:
– Legal requirements
– Business purposes
– Technical necessities
– User preferences

Special circumstances affecting retention:
– Legal obligations
– Dispute resolution
– Security investigationsCookie Policy for TonyScott.org

Essential cookies serve fundamental functions for basic website operations and security. They process authentication tokens, session identifiers, and security parameters to enable core functionality. For example, in our film-tv context, these cookies maintain secure access to exclusive industry content, screening rooms, and professional directories.

Functional cookies enhance your browsing experience by remembering your preferences. They process user-selected options and environmental variables to enable personalized content delivery. In practice, these cookies remember your preferred video quality settings, content categories, and industry-specific display preferences.

Analytics cookies help us understand how visitors interact with our content. They process navigation data, interaction metrics, and usage patterns to enable service improvements. For example, these cookies track which film analysis articles, industry insights, and production resources receive the most engagement.

Performance cookies assess and optimize website operation. They process technical performance metrics and system response data to enable optimal content delivery. These cookies specifically monitor video streaming performance, media loading times, and interactive feature responsiveness.

Cookie Management

You can control cookie preferences through your browser settings, our site’s cookie consent tool, privacy preferences center, and account settings. We respect your right to modify these choices at any time.

GDPR Compliance

For EU residents, we maintain strict data protection standards through explicit consent mechanisms, data minimization practices, purpose limitation protocols, defined storage limitations, and complete processing transparency.

CCPA Compliance

California residents are entitled to know about personal information collected, request data deletion, opt-out of data sales, receive non-discriminatory service, and access collected information.

COPPA Compliance

For users under 13, we implement strict age verification requirements, require parental consent, limit data collection, maintain special protection measures, and provide parental access rights.

Updates and Changes

Our policy maintenance includes regular review procedures, user notifications for significant changes, consent renewal requirements, clear change documentation, and continuous compliance monitoring.

Contact Information

For privacy-related inquiries:
Primary Contact: [email protected]
Response Time: Within 48 hours
Verification Required: For data-related requests
Available Support: Privacy concerns, data requests, rights exercise

This policy was created specifically for tonyscott.org and covers all associated services within the film-tv industry.