Privacy Policy & Data Protection Policy (GDPR)

Effective date: 2025/07/01
Controller: Owono Talents LDA, Apartado 103, 2560-999 Torres Vedras, Portugal
Contact: mails [at] owono [dot] de

1. Introduction

At Owono Talents, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

By visiting our website or working with us as a talent, client, or partner, you agree to this policy.

2. What Data We Collect

We may collect and process the following categories of personal data:

Identification & Contact Data: name, email, phone, address, nationality.
Professional Data: CVs, photos, videos, portfolios, social media links.
Financial Data: bank account details, invoices, tax IDs (for contracts and payments).
Technical Data: IP address, browser type, cookies (when you visit our website).

We do not collect sensitive data (e.g., religion, health) unless required by law or with explicit consent.

3. How We Use Your Data

We use your personal data only for legitimate purposes, including:

Managing talent profiles and representation.
Processing casting submissions and project participation.
Communicating with clients and partners.
Issuing contracts, payments, and invoices.
Meeting legal and tax obligations.
Improving our website and services.

We never sell your personal data to third parties.

4. Legal Basis for Processing

We process your data only when a legal basis applies, such as:

Performance of a contract (e.g., managing a talent agreement, project booking).
Legal obligation (e.g., tax/accounting compliance).
Legitimate interest (e.g., business communication, portfolio promotion).
Consent (e.g., showcasing your portfolio or sharing with casting directors).

5. Data Sharing

We may share your data with:

Clients, production companies, and casting directors (strictly for project-related purposes).
Accountants, payroll providers, and legal advisors (for financial and legal compliance).
Service providers (e.g., IT, cloud storage, website hosting).

If data is transferred outside the EEA, we apply GDPR safeguards such as Standard Contractual Clauses.

6. Data Retention

We retain personal data only as long as necessary:

Talent and client data: for the duration of representation or cooperation.
Financial and legal records: up to 10 years (as required by Portuguese law).
Casting/project data: up to 12 months after project completion unless legally required longer.

After retention periods, data is securely deleted.

7. Data Security

We apply appropriate technical and organizational measures to protect personal data, including:

Password-protected and encrypted storage systems.
Access restricted to authorized staff only.
Secure transfer methods for sensitive files.
Regular review of data protection practices.

8. Your Rights

Under GDPR, you have the right to:

Access your data.
Rectify inaccurate data.
Request deletion of your data (“right to be forgotten”).
Restrict or object to processing.
Data portability (receive your data in a machine-readable format).
Withdraw consent at any time.

To exercise your rights, contact us at mails [at] owono [dot] de. We respond within 30 days.

9. Cookies & Website Use

Our website may use cookies and analytics tools to improve performance and user experience.
You can adjust your browser settings to block cookies, but this may affect website functionality.

10. Data Breaches

In the event of a personal data breach, we will:

Take immediate steps to contain the breach.
Notify affected individuals without undue delay.
Inform the Portuguese Data Protection Authority (CNPD) within 72 hours if legally required.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on our website with a new effective date.

12. Supervisory Authority

If you believe your data has not been handled correctly, you have the right to lodge a complaint with:
Comissão Nacional de Proteção de Dados (CNPD) – Portugal’s Data Protection Authority.
Website: https://www.cnpd.pt