Privacy Notice

This privacy notice applies to humanprovenance.film, a website operated by The Mise En Scène Company (MSC), a company registered in England and Wales. MSC is the data controller for personal data collected through this site.

If you have questions about how we handle your data, contact us at contact@humanprovenance.film.

We collect personal data through one mechanism on this site: the register-interest form. When you submit the form, we collect:

• Your name
• Your organisation
• Your role or job title
• Your work email address
• Whether you have consented to receive email updates
• The date and time of submission

We use this data to send you updates about the standard, roughly monthly, including notifying you when v1.0 is published, and to send you a confirmation of receipt. We send these updates only if you tick the consent box, and you can unsubscribe at any time. We do not use your data for profiling, and we do not share it for anyone else's marketing.

We do not use cookies, analytics tools, or tracking pixels on this site. We do not collect any data from visitors who do not submit the form.

We rely on two lawful bases under UK GDPR and EU GDPR:

• Consent (Article 6(1)(a)) for sending you email updates about the standard. You give this consent by ticking the box on the form, and you can withdraw it at any time by unsubscribing or emailing us. Withdrawing consent does not affect updates already sent.
• Legitimate interests (Article 6(1)(f)) for holding your details as a record of the interest you have registered. The data is professional in nature, submitted in a professional context, and the processing is directly related to the action you took. We have assessed that this interest is not overridden by your rights and freedoms.

You can withdraw consent or object to legitimate-interests processing at any time. See "Your rights" below.

We use two service providers, acting as data processors on our behalf:

• Google LLC stores register-interest submissions in Google Sheets. Google processes data under a Data Processing Amendment that includes Standard Contractual Clauses and the UK International Data Transfer Addendum, covering transfers of data to the United States.
• MailerLite (MailerLite Limited) sends the email updates you have consented to receive. MailerLite processes data under a Data Processing Addendum and hosts data within the EU.

We do not sell or rent your personal data, and we do not share it with any third party for their own purposes.

We keep your data while your interest is registered. After you withdraw, or after HPF governance transfers to an independent industry body, we delete your data within two years. If you ask us to delete your data earlier, we will do so within 30 days. The only exception is data we are legally required to retain.

Your data is processed in the UK and by the processors named above. Register-interest records held in Google Sheets may be stored on servers in the United States; this transfer is covered by Google's Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum. Email updates are sent through MailerLite, which hosts data within the EU (Germany and the Netherlands), so that data is not transferred outside the EEA. If you are based outside the UK or EEA, your data is handled under these same safeguards.

You have the following rights in relation to your personal data:

• Access: you can ask us for a copy of the data we hold about you
• Rectification: you can ask us to correct inaccurate data
• Erasure: you can ask us to delete your data
• Restriction: you can ask us to limit how we use your data while a dispute is resolved
• Portability: you can ask us to provide your data in a machine-readable format
• Objection: you can object to processing based on legitimate interests; we will stop unless we have compelling legitimate grounds that override your interests

To exercise any of these rights, email contact@humanprovenance.film. We will respond within 30 days. We do not charge for exercising your rights.

If you are in the UK, you have the right to complain to the Information Commissioner's Office (ICO). If you are in the EU, you have the right to complain to your national data protection supervisory authority. You can find your authority using the EDPB authority directory. If you are outside the UK or EU, you may have the right to complain to a data protection authority in your own jurisdiction.

Access to the register-interest spreadsheet is restricted to MSC personnel who need it to manage these records. The site is served over HTTPS. We review access controls when personnel change. In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay.

We will update this notice if our data practices change. The "last updated" date at the top of the page will reflect any revision. If we make a material change that affects how we use your data, we will notify the people who have registered interest by email.

The Mise En Scène Company
Registered in England and Wales as The Mis En Scene Company Ltd (company number: 12536378)
Registered office: The Old Workshop, 1 Ecclesall Road South, Sheffield, England, S11 9PA