Data Privacy Framework Notice

Effective Date: December 13, 2024

This Entertainment Partners Data Privacy Framework Self Certification Notice (“DPF Notice”) applies in combination with any Entertainment Partners privacy notice (“Privacy Notice”) that expressly links to it or that otherwise expressly incorporates it by reference.⁠

Entertainment Partners LLC and its U.S. affiliates and subsidiaries listed below (“EP”) comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) and the UK Extension to the EUU.S. DPF (“UK Extension”) as set forth by the U.S. Department of Commerce.

Entertainment Partners LLC’s U.S. affiliates and subsidiaries that comply with the EU-U.S. DPF and UK Extension are :

• EP Global Production Solutions LLC
• Entertainment Partners LLC
• GEP Administrative Services, LLC
• GEP Cast, LLC
• GEP Cencast, LLC
• GEP Cenex, LLC
• EP Casting Technologies, LLC
• EP Casting Tech Holdco, LLC
• EP Casting Services LLC
  

EP has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal information received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this DPF Notice or the Privacy Notice and the EUU.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

EP’s Privacy Notice sets out:

• the types of individuals about whom EP collects personal information,
• the types of personal information EP collects,
• the purposes for which EP processes personal information,
• the types or identities of third parties to which EP discloses personal information, and the purposes for which it does so (see the section “Information Sharing and Disclosures“ in our Privacy Notice),
• the privacy rights available to individuals, including the right of individuals to access their personal information, and how to exercise them (see the section "Your Rights" in our Privacy Notice),
• the choices and means that EP offers individuals for limiting the use and disclosure of their personal information, (see section “Your Rights“ in our Privacy Notice) and
• how EP can be contacted

For more information, please refer to EP’s Privacy Notice at https://www.ep.com/legal/privacy-notice/ or any other EP Privacy Notice that otherwise expressly incorporates this DPF Notice by reference.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, EP commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals with inquiries or complaints regarding our handling of personal information received in reliance on the EU-U.S. DPF and the UK Extension to the EUU.S. DPF should first contact EP at: privacy@ep.com.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, EP commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of personal information (including human resource data) received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF in the context of the employment relationship.

You have the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other mechanisms set out in this DPF Notice or our Privacy Notice. For more information, please see here.

The Federal Trade Commission has jurisdiction over EP’s compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.

EP may, from time to time, be required to disclose personal information it receives under the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. DPF in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

EP is liable for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf. EP shall remain liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless EP proves that it is not responsible for the event giving rise to the damage.