Privacy Notice
Who we are
This privacy notice applies to humanprovenance.film, a website operated by The Mise En Scène Company (MSC), a company registered in England and Wales. MSC is the data controller for personal data collected through this site.
If you have questions about how we handle your data, contact us at contact@humanprovenance.film.
What data we collect and why
We collect personal data through one mechanism on this site: the register-interest form. When you submit the form, we collect:
- Your name
- Your organisation
- Your role or job title
- Your work email address
- The date and time of submission
We collect this data so we can notify you when v1.0 of the standard is published, and send you a confirmation of receipt. We do not use this data for marketing, profiling, or any purpose other than managing the interest you have registered.
We do not use cookies, analytics tools, or tracking pixels on this site. We do not collect any data from visitors who do not submit the form.
Why we process your data
We process your data under legitimate interests (Article 6(1)(f) of UK GDPR and EU GDPR). Our legitimate interest is managing a professional register of people who have asked to be notified about an industry standard. The data is professional in nature, submitted in a professional context, and the processing is directly related to the action you are taking. We have assessed that this interest is not overridden by your rights and freedoms.
You have the right to object to processing on the grounds of legitimate interests at any time. See "Your rights" below.
Who we share data with
We store register-interest submissions in Google Sheets, operated by Google LLC, acting as a data processor on our behalf. Google processes data under a Data Processing Amendment that includes Standard Contractual Clauses and the UK International Data Transfer Addendum, covering transfers of data to the United States.
We do not sell, rent, or otherwise share your personal data with any third party for their own purposes. We do not share data with any other service, platform, or organisation.
How long we keep your data
We keep your data while your interest is registered. After you withdraw, or after HPF governance transfers to an independent industry body, we delete your data within two years. If you ask us to delete your data earlier, we will do so within 30 days. The only exception is data we are legally required to retain.
International transfers
Your data is processed in the UK and may be stored on servers in the United States (Google infrastructure). This transfer is covered by Google's Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum. If you are based outside the UK or EEA, your data will be handled under these same safeguards.
Your rights
You have the following rights in relation to your personal data:
- Access: you can ask us for a copy of the data we hold about you
- Rectification: you can ask us to correct inaccurate data
- Erasure: you can ask us to delete your data
- Restriction: you can ask us to limit how we use your data while a dispute is resolved
- Portability: you can ask us to provide your data in a machine-readable format
- Objection: you can object to processing based on legitimate interests; we will stop unless we have compelling legitimate grounds that override your interests
To exercise any of these rights, email contact@humanprovenance.film. We will respond within 30 days. We do not charge for exercising your rights.
If you are in the UK, you have the right to complain to the Information Commissioner's Office (ICO). If you are in the EU, you have the right to complain to your national data protection supervisory authority. You can find your authority using the EDPB authority directory. If you are outside the UK or EU, you may have the right to complain to a data protection authority in your own jurisdiction.
Security
Access to the register-interest spreadsheet is restricted to MSC personnel who need it to manage these records. The site is served over HTTPS. We review access controls when personnel change. In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay.
Changes to this notice
We will update this notice if our data practices change. The "last updated" date at the top of the page will reflect any revision. If we make a material change that affects how we use your data, we will notify the people who have registered interest by email.
Contact
The Mise En Scène Company
Registered in England and Wales as The Mis En Scene Company Ltd (company number: 12536378)
Registered office: The Old Workshop, 1 Ecclesall Road South, Sheffield, England, S11 9PA