Privacy Policy
Tämä tietosuojaseloste on saatavilla suomeksi täältä.
Summary of Yellow Film & TV Oy’s ("Yellow Film" or "we") privacy practices:
Yellow Film processes your personal data in accordance with applicable law and good data protection practices.
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.
We collect personal data from you and from other sources, including our clients and collaboration partners (such as broadcasters and distributors).
We process personal data for our business needs, including recruitment and employment, managing customer and other contractual relationships, distributing our catalogue and newsletter, communications and direct marketing.
This Privacy Policy describes how personal data is collected, processed and protected in the business of Yellow Film. It applies when you:
• use our website,
• participate in our productions or events,
• are our client, subcontractor or collaboration partner, or an employee of the same,
• are our employee or an applicant for an open position.
Please read this Privacy Policy before participating in our activities or providing personal data to us. If you do not provide data required for a particular service or activity, you may be unable to use that service or participate in that activity.
DATA CONTROLLERS
The company covered by this Privacy Policy is Yellow Film & TV Oy.
Recipient: Data Protection Officer, Yellow Film TV Oy
Address: Hermannin rantatie 10, 00580 Helsinki, Finland
Email: privacy(at)yellowfilm.fi
As a general rule, each company of the Reinvent Yellow group acts as a separate and independent controller for personal data it processes for its own purposes and activities.
In limited circumstances, two or more Reinvent Yellow Group companies may jointly determine the purposes and means of processing and act as joint controllers. This may apply, for example, to the whistleblowing channel and certain other centrally organised Group functions or processing activities.
WHERE DO WE COLLECT PERSONAL DATA FROM?
We collect personal data directly from you, for example when you are our employee, use our recruitment channel, submit a job application, sign up as audience to a production, subscribe to our programme catalogue, or participate in a social-media competition or prize draw. We may also receive data from our clients and collaboration partners and, where permitted by law, other Group employees. Data may also be collected through technical means such as cookies.
WHAT PERSONAL DATA WE COLLECT?
The personal data we process depends on your relationship with us and the purpose of processing. It may include:
• Name and contact details, such as first and last name, address, email address, phone number and possible other contact details.
• Production information, such as name of the production (to which you have participated in), name of the event (to which you have participated in), and similar.
• Company information, such as your position in the company or other entity you represent, and name and contact information of the said entity.
• Campaign information, such as data you provide in connection to a marketing campaign, prize draw or competition, and the information of participation to the same.
• Data we collect in connection to market and opinion surveys, through which we may develop our productions.
• Points of interest, which we may receive either from you or deduct based on other data collected by us, for example based on the events or productions you have earlier participated in.
• Marketing information, such as marketing permissions and prohibitions.
• Reaction information, such as comments and other reactions on our website or in our social media channels, and other picture or video material (e.g. photos, videos, etc.) which you may provide us with when e.g. participating to a competition.
If you apply for a job with us, we may in addition collect the following personal data:
• Age, date of birth
• Gender
• Language skills
• Information regarding prior employments and education (such as resume, job application, job certificates, school certificates)
• If you apply for a performing role, information regarding appearance and performance, such as height, hair colour and length, colour of eyes, clothing and shoe size, face and full body shot, showreel, specific features regarding appearance such as piercings, tattoos, and so forth
• If you apply for a role requiring driving skills, your driver’s license information
If you are our employee, we may in addition collect the following personal data:
• Information regarding both the employment relationship and handling employer obligations, such as salary payment information, occupational health information, travelling and representing the employer, numbers of the employer’s petrol and wholesale cards, key identification numbers and other similar information relating to the employment obligations, as well as details of the employment relationship.
• Information regarding employment benefits, such as sport and lunch benefit.
• Data collected for HR management and organizational development purposes, such as development and feedback conversations, performance reviews, and data from job satisfaction surveys
If you participate into making our production(s) as an employee, representative of a subcontractor, intern, extra or in another role or position, we may also collect the following:
• Information about the assignment of intellectual property rights
Further, when using our website, we may collect the following technical data about you:
• Information regarding your equipment, such as IP address, operating system, browser version and model of the equipment
• Type and language settings of your browser
• Other information, which have been saved via the use of our website or social media channels
We may collect information about use of our online services through cookies. A cookie is a small file stored by your browser that provides information to the website administrator when you revisit the site. You can disable cookies in your browser settings.
Some information in our recruitment channel is mandatory. If you do not provide the information marked as mandatory, you cannot submit an application through the channel, but you may send an open application to the controller’s postal address.
WHAT PURPOSE DO WE USE PERSONAL DATA FOR AND WHAT IS THE LEGAL BASIS FOR THE PROCESSING?
We process personal data where necessary to comply with legal obligations, including employer obligations and applicable recruitment requirements.
We also process personal data where necessary to perform a contract or take related steps, including employment contracts, recruitment, catalogue or newsletter delivery and other contracts.
We may process personal data based on our legitimate interests where these are not overridden by your interests or fundamental rights and freedoms. We assess this by considering our relationship with you, the nature and purposes of the processing and applicable safeguards. Our legitimate interests include development, financing and producing programmes and films, managing and exploiting intellectual property rights, communications, direct marketing, market and opinion surveys, maintaining lists of extras and audiences, data analysis, statistics and business development.
Where appropriate, we may also process personal data based on your consent.
HOW LONG DO WE RETAIN YOUR DATA?
We retain personal data only as long as necessary for the purposes described in this Privacy Policy and to comply with legal obligations, including employment and bookkeeping requirements. Retention depends on the context and purpose for which the data was collected.
In particular:
• In case you submit us an open job application, via the recruitment channel on our website or otherwise, we will retain the application data for 24 months from the receipt of the application.
• In case you apply for a certain position, we will retain the data relating to your application during the recruitment process and for a reasonable time after that, unless you have given us a right to use your application data for other similar positions also after the recruitment process, in which case we can retain your application data for 24 months from the receipt of the application.
• If you work in a company which is our client or collaboration partner, we will retain your information, at most, as long as the client or other appropriate relationship between your employer and us continues, and for a reasonable time after that.
• If you subscribe to our catalogue or newsletter, we process your personal data for this purpose until you unsubscribe. As such, you may influence the retention period yourself.
• If you give us a marketing permission, we will process your data as long as the permission is in force, and for a reasonable time after that. In case you object to direct marketing, we will retain information of said objection as long as needed for ensuring that we will not send you direct marketing.
• In case you participate to our production as a member of audience, we will retain your information for a reasonable time and not longer than 24 months after that, and we may use the information, for example, to request you for similar tasks in our other productions.
• If you participate to a prize draw, competition or an event, and you have no other relationship to us, we will delete your data after a reasonable time after the competition or event has ended, unless we are able to retain your data for marketing purposes.
• Our employees’ data is retained in accordance with current employment legislation.
• Data of persons participating to our productions (interns, extras, employees, contact persons of subcontractors) is retained as long and to the extent necessary for us to retain personal data regarding assignment and transfer of intellectual property rights for the purpose of exploiting the productions and defending said rights.
Mandatory law may require us to retain certain data longer than the periods described above. In that case, we retain the relevant data only as required to comply with that obligation.
WHO MAY PROCESS YOUR DATA AND DO WE TRANSFER THEM TO THIRD PARTIES?
Personal data may be processed within Yellow Film and disclosed where necessary to authorities as required by law. Production-related data may also be disclosed to clients and collaboration partners, including broadcasters, distributors, third-party format owners, financiers, sponsors and commercial partners. In connection with a sale of business or other corporate transaction, data may be disclosed to the buyer or other relevant parties. In limited cases, data may also be shared with other Reinvent Yellow Group companies.
We use service providers and other processors to process personal data on our behalf. They are contractually required to process personal data only for the purposes and according to the instructions defined by us, to protect it appropriately and to comply with applicable data protection law.
DO WE TRANSFER YOUR DATA OUTSIDE EU OR EEA?
We primarily process personal data within the EU/EEA.
Where personal data is transferred outside the EU/EEA, we ensure that the transfer complies with the GDPR and that an applicable transfer mechanism or safeguard is used, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.
HOW MAY I INFLUENCE THE PROCESSING OF MY PERSONAL DATA?
Subject to the conditions and limitations of applicable data protection law, you have the following rights:
• Right of access. You have the right to obtain confirmation whether we process your personal data and, where applicable, access to that data. We may need to verify your identity before responding.
• Right to rectification. You have the right to have inaccurate personal data corrected and incomplete data completed.
• Right to restriction. In certain circumstances, you have the right to request restriction of processing, for example while we verify the accuracy of contested data.
• Right to object. You may object at any time to processing for direct marketing. Where processing is based on legitimate interests, you may also object on grounds relating to your particular situation. You may object to direct marketing through the link in our marketing emails or, where applicable, through your recruitment account.
• Right to erasure. In certain circumstances, you may request deletion of your personal data, for example where it is no longer necessary for the purpose for which it was collected or you withdraw consent and no other legal basis applies. We may retain data where processing remains necessary, including to comply with legal obligations or to record a direct-marketing objection.
• Right to data portability. Where applicable, you have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.
• Cookies. You may disable cookies in your browser settings, although this may affect the functionality of our services.
• Right to lodge a complaint. You have the right to lodge a complaint with the competent supervisory authority, including the Finnish Data Protection Ombudsman. We encourage you to contact us first so that we can seek to resolve the matter.
You can manage information submitted through our recruitment channel by logging in to your account.
To exercise your rights, contact privacy(at)yellowfilm.fi or use the postal address stated above.
HOW DO WE PROTECT YOUR PERSONAL DATA?
Access to personal data is limited to personnel who need it for their work and is controlled through appropriate user identification and access rights.
We use appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, loss and other unlawful processing. Measures include firewalls, secure equipment spaces, access controls and access management, encryption where appropriate, personnel guidance and training, and careful selection of service providers.
Our servers are appropriately protected, and our agreements with relevant service providers require confidential, secure and legally compliant processing of personal data.
CAN WE AMEND THIS PRIVACY POLICY?
We may update this Privacy Policy as our services, practices, legislation or its interpretation change.
The current Privacy Policy is available on our website. Where appropriate, we may also notify you of material changes using the contact details you have provided.
WHO MAY I CONTACT REGARDING PRIVACY MATTERS?
For questions about this Privacy Policy or our processing of personal data, contact privacy(at)yellowfilm.fi or write to the postal address above.
WHISTLEBLOWING
If you wish to report certain breaches of EU and/or national legislation, please find Yellow Film’s dedicated whistleblowing channel with further instructions here. Please note that currently the channel is only available in Finnish.
LAST UPDATED
5.10.2026