top of page

Data Protection Policy

​

BlackVault Studio is committed to handling personal data responsibly and implementing appropriate measures to protect personal information processed as part of our business and production activities.

Our data-protection practices are designed to comply with applicable data-protection legislation, including the EU General Data Protection Regulation (GDPR), where applicable.

​

Personal Data

Depending on the nature of our relationship with a client, collaborator or service provider, we may process information such as:

  • Name and professional contact details

  • Email address and telephone number

  • Company or professional information

  • Project-related information

  • Invoicing and business information

  • Voice recordings and other performance-related materials

  • Correspondence relating to projects and services

The information processed depends on the services provided and the specific relationship with the individual or organization.

 

Purpose of Processing

Personal data is processed only for legitimate and relevant business purposes, which may include:

  • Providing requested services

  • Managing projects and production workflows

  • Communicating with clients and collaborators

  • Preparing quotations and invoices

  • Fulfilling contractual or legal obligations

  • Maintaining business records

  • Protecting our systems and services

 

Data Minimization

We aim to collect and process only information that is relevant and reasonably necessary for the applicable purpose.

Personal information is not intentionally collected for unrelated purposes.

 

Data Security

Personal data is handled using appropriate technical and organizational measures designed to reduce the risk of unauthorized access, accidental loss, disclosure or alteration.

Access to personal information is limited to individuals who require it for legitimate business purposes.

 

Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, for contractual or business requirements, or where retention is required by applicable law.

Different types of information may therefore be retained for different periods.

 

Third-Party Services

Where third-party services are used as part of our business or production workflows, information may be processed by those providers where necessary for the provision of the relevant service.

We seek to use appropriate and reputable service providers and take reasonable steps to ensure that personal information is handled appropriately.

 

Data Subject Rights

Where applicable under GDPR and other relevant legislation, individuals may have rights concerning their personal data, including rights to:

  • Request access to personal information.

  • Request correction of inaccurate information.

  • Request deletion where applicable.

  • Restrict or object to certain processing.

  • Request data portability where applicable.

Requests concerning personal data can be submitted through our official contact channels.

 

Data Protection Incidents

If we become aware of a personal-data breach or other incident affecting personal information, we will assess and respond to the incident in accordance with applicable legal and regulatory requirements.

 

Policy Review

Data-protection requirements and business practices may evolve over time.

We therefore review our data-protection practices periodically and update them where necessary to reflect changes in legislation, technology and our services.

bottom of page