BACKBONE PRIVACY STATEMENT

Backbone International B.V. (from now on: “Backbone”, “we”, “our” or “us”) is a supporting partner for clients. Backbone is active in the field of providing services and personnel for producing (including technical production, overlay production, production management, and technical drawings) and supervising concerts, (music) performances, and events, whether or not organized by third parties, as well as purchasing and hiring services and personnel for the benefit of aforementioned concerts, (music) performances and event production.

Backbone International consists of the entities Backbone Europe, Backbone Asia, and Backbone North America. Each branch operates locally. If you enter into an agreement with Backbone, it is consistently contracted locally.  

If you use our website, we process your personal data. We believe it is important to treat your personal data with care. In this privacy statement, we would like to explain which of your data is processed when you use the website, for what purpose, and what rights you have with regard to the processing of your personal data. Backbone, therefore, advises you to read this privacy statement carefully. 

This privacy statement may be amended from time to time. The most recent version of the privacy statement can always be found on our website.

1          HOW CAN YOU CONTACT BACKBONE?

The party responsible for processing your personal data is Backbone, a private company with limited liability, with its registered office and registered office at (1507 CC) Zaandam, at Ronde Tocht 11, (34390063).

Questions about the processing of your personal data can be addressed to privacy@backbone-international.com or by regular mail to Ronde Tocht 11, 1507 CC Zaandam. 

2         TO WHOM DOES THIS PRIVACY STATEMENT APPLY?

This privacy statement is relevant to you if you:

•           visit our website;

•           contact us;

•           apply to us.

HOW DOES BACKBONE PROCESS YOUR PERSONAL DATA?

Below you can read which of your personal data we process and for what purposes we do so. In doing so, we indicate the valid reason (also called “basis”) we have to process your data. We need this basis on the basis of privacy legislation in order to be able to process your data. We also explain how long we keep your personal data. 

To keep things organized, we have grouped everything by type of data flow.

Website

When you visit our website, we collect technical information to make the website function optimally and display information in the desired way. We collect, among other things, the date and time of your visit, your IP address, the MAC address or other unique number, the browser used, the web pages you visit on our website, and other log information (such as the URL referrer and the country of the IP address). The processing of these personal data is necessary to pursue our legitimate interest, which consists of making the Website function optimally. We store this personal data for 1 month after your last visit to our website.

We also collect information about your website visit by means of cookies. More information about the personal data that Backbone processes when you visit our website can be found in the Cookie Statement.

Working at Backbone 

If you apply for a job with us, we process your personal data (including contact details, CV and motivation letter) solely to determine whether you are eligible for the vacancy you have applied for or, in the case of an open application, to determine whether you are eligible for a position within Backbone. These processing operations are necessary for the representation of our legitimate interests. That interest in this case is to recruit suitable new staff. 

We store the personal data of applicants during the recruitment and selection procedure. Your application data will be deleted by us (in the event of a rejection) no later than four weeks after the end or completion of the application procedure. With your consent, we may retain your data for a maximum of one year after the end of the application process in order to be able to contact you if a potentially suitable position becomes available at a later date. 

Direct marketing

If you purchase our services, we may use your e-mail address to send you invitations to various events. This is possible if you are a new customer only on the basis of your consent pursuant to Article 11.7 of the Telecommunications Act.

We process this data that we process after permission in subsequent newsletters that we send to existing customers for the representation of our legitimate interest in direct marketing. You can unsubscribe from our emails at any time. In that case, we will delete your personal data.

Under the Telecommunications Act, you have the right to object to the use of your data for digital direct marketing. If you have done this, Backbone may no longer send you digital direct marketing. In article 7 of this privacy statement, you can read how you can exercise your rights.

Contact

You can contact us in different ways: by e-mail, or by telephone. We only use the information we obtain from you for this contact (such as name, e-mail address and/or telephone number) to answer your question and to be of service to you. The processing of your personal data is necessary for the representation of our legitimate interest in being able to answer your question properly. We do not store your data longer than necessary to be of service to you. 

3               WHICH THIRD PARTIES DOES BACKBONE SHARE YOUR PERSONAL DATA WITH?

The following third parties may have access to your personal data:

  • Entities – We may share personal data with other entities within our group in the context of the coordination and performance of the services we provide and for purposes such as cooperation and transparency. Our entities outside the EEA are Backbone North America and Backbone Asia, including Backbone Indonesia.
  • Processors – We engage parties that process personal data on our behalf (processors), for example to host the website and to store and manage personal data.
  • Authorities and legal aid providers – We may also share personal data with third parties if Backbone is required by law and regulation to provide personal data, such as police and government institutions. Backbone may also provide personal data on the basis of a court order, a court decision or if you have given permission for this.

4               PHOTOS 

Backbone shares photos of productions. Since people are depicted in the photos, the sharing of photos can be regarded as the processing of personal data. The basis for these processing operations is the consent of the person portrayed and also the representation of our legitimate interest. That interest, in this case, consists of the commercial interest of Backbone.

We take into account the privacy of the person(s) portrayed. We will publish as few photos as possible where people are recognizable. Our photo policy is also extra careful in the case of specific target groups, private productions or productions with a sensitive theme. 

You have the possibility to object to this processing of your personal data at any time. You can do this by sending a message to privacy@backbone-international.com or by regular mail to Ronde Tocht 11, 1507 CC Zaandam. 

If you object to the processing of your personal data, we will, in principle, no longer process your personal data. This may be different if we demonstrate that there are compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms or that are related to the establishment, exercise, or defense of legal claims.

Where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing before it has been withdrawn.

5               TRANSFER OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)?

Your personal data may also be shared with other entities within our group in the context of the coordination and performance of the services we provide and for purposes such as cooperation and transparency. Our entities outside the EEA are Backbone North America and Backbone Asia, including Backbone Indonesia. 

When personal data is transferred outside the EEA, Backbone will take appropriate safeguards to protect your personal data.

This means, inter alia, providing a level of protection for personal data that is essentially equivalent to that guaranteed in the EEA (e.g., by making proper arrangements with the recipient of the personal data and implementing appropriate security). You can request a copy of the relevant safeguards that have been put in place at any time via the contact details included in article 1 of this Privacy Statement.

6               WHAT ARE YOUR RIGHTS?

Under the privacy legislation, you have a number of rights with regard to your data and its processing:

  • Right of access – You have the right to obtain information from us about whether or not your personal data is being processed and, if so, to obtain access to that personal data and additional information about the processing of your personal data.
  • Right to rectification  – You have the right to obtain rectification of inaccurate or incomplete personal data. If possible, you can provide additional personal data in order to complete the collection of personal data.
  • Right to be forgotten – You have the right to request the erasure of your personal data. We will then check whether we are obliged to delete your personal data, for example, if your personal data is no longer necessary for the purposes for which it was collected.
  • Right to restriction – In some cases, you have the right to request that we restrict the use of your personal data. For example, you can request restriction if the data may be incorrect or if it is no longer necessary for the purpose we collected it. If we comply with your request, we will not further process the personal data concerned during the period of the restriction unless this is permitted on the basis of privacy legislation.
  • Right to data portability – If we have based the processing of your personal data on your consent or on the performance of a contract, you have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format. You have the right to forward this data to another controller, for example another provider of the same service. You can also ask us to do that for you. 
  • Right to object – You have the right to object to processing your personal data in two situations if we have based that processing on our legitimate interests. 

When we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. In that case, we will no longer process your personal data for those purposes. You can also object to our processing of your personal data if your specific situation gives you reason to do so. 

If you object to the processing of your personal data, we will, in principle, no longer process your personal data. This may be different if we demonstrate that there are compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms or that are related to the establishment, exercise, or defense of legal claims.

  • Withdrawal of consent  – Where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing before it has been withdrawn.

7               USING YOUR RIGHTS

If you wish to exercise your rights, you can submit a request to us via

privacy@backbone-international.com. We will answer your request as soon as possible, but in any case, within one month of receipt of the request. This period may be extended by two months if necessary, depending on the complexity of the requests and the number thereof. We will inform you within one month of receipt of the request if such an extension will take place, stating the reason for the delay. If we do not take action on your request, we will inform you as soon as possible, but in any case, no later than one month after receipt of the request of the reason for not taking action. 

8               DO YOU HAVE ANY QUESTIONS OR COMPLAINTS?

If you have a question about this privacy statement if you have a complaint, or if you suspect that privacy legislation (GDPR) has been violated, you can contact us using the contact details in this privacy statement. You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority.