1. Introduction
Garne Villo ("we," "our," or "us"), located in Dubai, United Arab Emirates, is comUAEd to protecting your personal data in accordance with applicable privacy and data protection laws of the United Arab Emirates (UAE) and internationally recognized privacy standards. As a modeling agency, Garne Villo is comUAEd to ensuring the privacy and security of personal information provided by models, clients, partners, and website visitors.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, use our services, or interact with us in any capacity.
2. Data Controller
The data controller responsible for processing your personal data is:
Garne Villo
Dubai Media City, Loft Offices Building 1, Office 406 Entrance B, Dubai, UAE
Email: [email protected]
Phone: +971 4 455 3864
3. Data We Collect
3.1 Information You Provide Directly
- Contact Information: Name, email address, phone number, and postal address when you fill out our contact forms or apply for representation.
- Application Data: Photographs, measurements, portfolio materials, resume/CV, and other professional information subUAEd during the talent application process.
- Communication Data: Content of emails, messages, and other correspondence with us.
- Payment Information: Bank account details, billing address, and transaction history for contracted talent.
3.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device information, and screen resolution.
- Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, and navigation paths.
- Cookie Data: Information collected through cookies and similar tracking technologies (see our Cookie Policy).
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under applicable privacy and data protection laws:
- Consent: Where you have given explicit consent, such as submitting an application, contacting us, subscribing to newsletters, or accepting non-essential cookies.
- Contractual Necessity: Where processing is necessary for the performance of a contract, including model representation agreements, talent management, bookings, and cooperation with clients.
- Legal Obligation: Where we must comply with applicable legal and regulatory requirements, including tax, accounting, and business compliance obligations in the United Arab Emirates (UAE).
- Legitimate Interest: Where processing serves our legitimate business interests, such as improving our services, managing talent applications, communicating with clients and partners, and enhancing website functionality.
5. How We Use Your Data
- To process and respond to your inquiries and applications
- To provide talent management and representation services
- To submit your profile to clients for casting and booking opportunities
- To manage contractual relationships and process payments
- To send relevant industry information and agency updates (with consent)
- To improve our website, services, and user experience
- To comply with legal and regulatory obligations
- To protect our rights and prevent fraud
6. Data Sharing
We may share your personal data with the following categories of recipients:
- Clients and Brands: Your professional portfolio and relevant information may be shared with potential clients for casting and booking purposes.
- Partner Agencies: For international placements, your data may be shared with our partner agencies in other countries under appropriate data protection agreements.
- Service Providers: We use third-party service providers for website hosting, email communications, payment processing, and analytics, all bound by data processing agreements.
- Legal Authorities: Where required by law, court order, or governmental regulation.
7. International Data Transfers
Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including contractual protections and secure transfer mechanisms, or transfers to countries that provide an adequate level of data protection under applicable laws.
8. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected:
- Application Data: Retained for up to 6 months after the application process if not accepted; for the duration of the contract plus 3 years if accepted.
- Contract Data: Retained for the duration of the business relationship and for the period required under applicable commercial and tax laws in the United Arab Emirates (UAE), including record-keeping obligations.
- Website Analytics: Retained for up to 26 months.
- Marketing Consent: Until consent is withdrawn.
9. Your Rights Under GDPR
Under applicable data protection laws, you may have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
- Right to Erasure: You have the right to request deletion of your personal data.
- Right to Restriction: You have the right to request restriction of processing in certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption, secure server infrastructure, access controls, regular security audits, and employee training on data protection.
11. Children's Data
We do not knowingly collect personal data from children under 16 without parental consent. For talent under 16, we require written consent from a parent or legal guardian before processing any personal data.
12. Right to Lodge a Complaint
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Dubai Commissioner for Data Protection and Freedom of Information (Dubaier Beauftragte fuer Datenschutz und Informationsfreiheit) or any other competent supervisory authority.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.
14. Contact Us
For any questions or concerns regarding this Privacy Policy or our data practices, please contact us:
Garne Villo
Dubai Media City, Loft Offices Building 1, Office 406 Entrance B, Dubai, UAE
Email: [email protected]
Phone: +971 4 455 3864