1. INTRODUCTION
Who are we?
We are Stink Digital Limited (t/a “Stink Studios”), a company registered under company number 07141790 and registered office at 64-66 Redchurch Street London E2 7DP. When we decide the means or purpose of processing your personal data, we are the data "controller."
What’s this policy about?
"This policy explains how we process your personal data as a data controller, relating to:
individuals who visit this website or any of our other websites (“Website Visitors”);
individuals who apply for jobs via this website (“Job Applicants”); and
suppliers or freelancers who we engage to deliver services to us or on our behalf, or who we communicate with in relation to them prospectively delivering any such services to us or on our behalf (“Suppliers”),
and “you” and “your” shall refer to any or all of the above, as applicable.
We update this policy from time to time so please check back in. Please note that other websites/services not mentioned here are not operated by us, and you should refer to the privacy policies on those sites to understand how your data is used.”
How do you contact us?
If you have questions about this policy or to exercise your rights, write to us: privacy@stink.co. If we can’t resolve your issue, you can also get in touch with the Information Commissioner’s Office in the UK at: https://ico.org.uk/concerns (or if you live outside the UK in a European country, you can submit a complaint to the supervisory authority in your country).
Alternatively, if you are based in the European Economic Area, you can contact our EU Representative, which is Stink Films in Czechia. You can write to Stink Films in Czechia at: klara.kralickova@stinkfilms.com.
What are your rights?
You have the following rights, although these rights may be limited in some circumstances:
Ask us to send a copy of data to you or someone else. Ask us to restrict, stop processing, or delete your data
Object to our processing of your data
Object to use of your personal data for direct marketing
Ask us to correct inaccuracies
If we rely on consent to process data, or send direct marketing, you can withdraw consent by contacting us via the link above.
2. YOUR PERSONAL DATA AND HOW WE USE IT
Where explicit retention periods are not described below, we hold data for as long as necessary bearing in mind the purpose for which it was collected. At the end of the retention period, we assess whether it is necessary to continue to retain information to achieve the purposes for which it was collected. To determine appropriate retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of unauthorised access, and legal requirements.
Enquiry data
Information we receive when Website Visitors get in touch with questions or when working with us.
Your data:
Name
Contact details
Other personal data Website Visitors send to us as part of enquiries or instructions.
How long we keep it:
6 years from when our relationship with a Website Visitor ends.
How we use it:
We process this information to respond to Website Visitors’ enquiries.
Legal basis:
We may process this information in accordance with the terms of our contract with each Website Visitor (where we need this information to provide services to Website Visitors) or to take steps at a Website Visitor’s request prior to entering into a contract. We also use this to pursue our legitimate interests in responding to enquiries, and in order to understand Website Visitors and improve our website and services.
More information:
Website Visitors may be required to provide us with certain information in order for us to respond to their enquiries.
Sources:
We collect this information from Website Visitors.
Recipients:
We may store this information with Amazon Web Services.
II. Application/Interview Data
Information provided by Job Applicants through our website job application forms, including:
Name, contact details, current employer, LinkedIn profile.
Personal data included in a Job Applicant’s resume/CV or covering letter.
Details of a Job Applicant’s website, portfolio, show-reels or other experience, and Job Applicants’ references.
Education, employment and professional accreditation history.
Voluntary information (gender, race/ethnicity, veteran status, disability information).
How long we keep it:
If unsuccessful, application data is typically deleted after 12 months. Otherwise, it will be transferred to the Job Applicant’s employee file & retained in accordance with internal staff privacy policies.
How we use it:
We use this information to decide whether to recruit a Job Applicant.
Legal basis:
Our legitimate interests in deciding whether a Job Applicant is a suitable candidate and whether to appoint a Job Applicant.
Entering, performing, or taking steps preparatory to entering, contracts with a Job Applicant.
Complying with our legal obligations.
Where a Job Applicant provides voluntary information which includes special category data such as relating to ethnic origin or health, we process that with the Job Applicant’s consent for the purposes displayed to the Job Applicant when it is submitted.
More information:
Job Applicants are required to provide most of this information in order to apply for roles with us.
Sources:
We collect this data from Job Applicants directly through forms on our website. Those forms are hosted for us by Greenhouse Software, Inc. in the United States.
Recipients:
We share this information with other members of our group.
III. Marketing Data
We process the following information about you in order to provide information, and make suggestions and recommendations to Website Visitors about: (i) news and updates relating to us, our partners, products, services and content; (ii) content, goods and services that may interest Website Visitors; and (iii) other promotional activity and events we think may be of interest:
Full name
Contact information (such as email address)
Other information collected and clearly identifiable to Website Visitors at the point of your signing up to our marketing communications.
How long we keep it:
Until a Website Visitor has opted-out of marketing communications.
How we use it:
We process this information to send Website Visitors marketing communications.
Legal basis:
We process Website Visitors’ personal data in order to send marketing communications on the basis of our legitimate interests, being our legitimate business interests in marketing our activities and promoting the success of our business and our website, apps, content, products and services. If the information is not of interest for a Website Visitors, it can opt-out at any time by letting us know, including by emailing us.
Sources:
We collect this personal data from Website Visitors.
Recipients:
We may use Mailchimp to manage our email marketing.
IV: Creep Fake - Halloween AI Experience
If a Website Visitor uses our Halloween experience, we process its photograph, and the words it speaks, to provide that experience.
How long we keep it:
None of the material is stored for longer than an hour after the Website Visitor has finished with the experience.
How we use it:
The Website Visitor’s photograph is used to create an “evil twin” image and the words you type are used to generate chat responses which are fed back to you.
Legal basis:
We process this personal data only if the Website Visitor has given its consent when trying out the experience. Website Visitors can withdraw consent at any time by email to privacy@stink.co.
Sources:
We collect this personal data from Website Visitors.
Recipients:
We use OpenAI to generate responses, Replicate.com to create images, Google for face detection and transcription, and ElevenLabs to generate audio from text.
V. Supplier data
Information we collect from Suppliers:
Name
Contact details
Whether you have signed a non-disclosure agreement with us.
How long we keep it:
[Until you are no longer engaged to undertake work on our behalf, and we no longer intend to engage you to undertake work for us in future].
How we use it:
We process this information to manage our relationship with you and to maintain a database of suppliers and freelancers.
Legal basis:
We may process this information in accordance with the terms of our contract with you (where we need this information to receive services to you) or to take steps at your request prior to entering into a contract. We also use this to pursue our legitimate interests in promoting the success of our business and our website, apps, content, products and services.
Sources:
We collect this information from you, your website or third party social media platforms (such as LinkedIn).
Recipients:
We may store this information with Amazon Web Services.
3. STORAGE, TRANSFERS, AND DISCLOSURE
Storage & Transfers:
Save where indicated otherwise in this policy, your personal data is securely stored in the UK. Where we use data processors outside the UK and European Economic Area, and transfer personal data to a country which does not provide an adequate level of protection, we use contracts which give personal data the same protection it has in Europe and the UK. For more information drop us a line using the contact details at the start of this policy.
Disclosure:
Other than as set out above, we may disclose your personal data:
Where required by law, government, competent authorities or the courts or to establish, exercise or defend our legal rights, and for the purposes of preventing crime and fraud (for example, we may share personal data with our professional advisors, investigators, or credit reference agencies).
With members of our corporate group, insurers, advisers, suppliers and subcontractors, as necessary for the purposes set out in this policy.
If involved in an investment, merger, acquisition, or sale of our organisation or assets, personal data we hold may be shared on the basis of the legitimate interests of us, our shareholders, customers and other parties to a transaction, unless those interests are outweighed by prejudicial impacts upon you.