В последнее время на почту со всех забугорных площадок просто лавиной сыплются сообщения об обновлении политики конфиденциальности и т.п.
Сегодня вот от гетти пришла портянка.
Кто-нибудь, переведите, что там за ужасами нам грозят?
И что с остальными стоками?
Нужно ли что-то делать? Вносить какие-то изменения? К чему готовиться и чем это чревато?
Если уже есть соответствующая тема, просьба ткнуть в нее ссылкой, не успеваю просматривать все сообшения, возможно пропустил обсуждение.
If you're having trouble viewing this email, read the online version.
Getty Images iStock
Woman reading book in park in large bubble
Important updates on Personal Data and the GDPR
The European Union (EU) is introducing a new data protection law on May 25, 2018, called the General Data Protection Regulation (GDPR). Click here to jump past the language links and read more in English.
Diese wichtige Mitteilung ist auf der Anbieter‑Community Webseite auf Deutsch. Sie können Ihre Sprachpräferenz ändern, indem Sie die Sprachauswahl auf der Seite oben rechts nutzen.
Esta comunicación importante está disponible en el sitio web de la Comunidad de colaboradores en español. Puedes cambiar tu preferencia de idioma utilizando el selector de idioma en el extremo superior derecho de la página.
Ce message important est disponible en français sur le site Web de la communauté des contributeurs. Vous pouvez changer la langue d’affichage via le sélecteur de langue en haut à droite de la page.
Questa comunicazione importante è disponibile sul sito web della Community dei contributor in italiano. Puoi modificare la tua lingua preferita utilizzando lo strumento di selezione delle lingue in alto a destra sulla pagina.
Dit belangrijke bericht is in het Nederlands beschikbaar op de Contributor Community‑website. U kunt uw taalvoorkeur wijzigen met de taalkeuzeknop rechtsboven op de pagina.
Ten ważny komunikat jest dostępny w witrynie internetowej społeczności autorów w języku polskim. Preferencje językowe można zmienić w menu wybory języka w prawym górnym rogu strony.
Este comunicado importante está disponível no sítio Web da Comunidade de contribuidores em português. Pode alterar a sua preferência de idioma usando o seletor de idioma na parte superior direita da página.
Esta importante comunicação está disponível no site Comunidade dos Colaboradores em português do Brasil. É possível alterar a sua preferência de idioma usando o seletor de idioma no canto superior direito da página.
Эта важная информация доступна на сайте Сообщества авторов на русском языке. Вы можете выбрать свой язык в меню выбора языка в правом верхнем углу страницы.
Denna viktiga information finns tillgänglig på Contributor Community‑webbplatsen på svenska. Du kan ändra språkinställningen med språkväljaren högst upp till höger på sidan.
이 중요한 알림사항은 자료 기고자 커뮤니티 웹 사이트에서 한국어 로 제공됩니다. 페이지의 오른쪽 상단에 있는 언어 선택기를 사용하여 언어 기본 설정을 변경하실 수 있습니다.
What is the General Data Protection Regulation?
The GDPR gives individuals in the EU more control over how their Personal Data is used and places certain obligations on businesses and individuals that use or ‘process’ that data. As a general rule, the GDPR applies to companies or individuals who are either based in the EU or are non‑EU based but offer goods and services to individuals in the EU or that track the behavior of people based in the EU.
What is Personal Data?
“Personal Data” is defined broadly to include all identifying information (for example, including but not limited to: email, physical address, phone information, password, user ids, etc., and also a person’s likeness captured in photos, illustrations and video and to a muscian’s IPI). Refer to Appendix A for a non‑exhaustive, but comprehensive list of Personal Data examples.
How does this affect contributors?
As a Getty Images contributor, there are two types of Personal Data relevant to you in relation to the GDPR:
(a) Personal Data from “data subjects” which you process when you capture their likeness, submit caption information which includes Personal Data and, for creative/commercial content, when you collect their data via model and property releases and supply it to us. Getty Images requires that any Personal Data of EU citizens provided by contributors has been collected in such a way as to be GDPR compliant (see below).
(b) Your individual Personal Data that you provide to us as part of your contributor relationship.
Our processing activities related to Personal Data supplied by contributors involve securely storing it and processing it as necessary to operate, support and maintain our media licensing business.
How can I comply with the GDPR when working with Getty Images?
Data subjects must be allowed access to their data, so you must supply a copy of any Personal Data you hold if requested by them, including for example a copy of the film or photograph (the “content” ) they feature in and, for creative/commercial content, a copy of the model or property release.
Data subjects also have a right to data portability, which can be achieved by offering them a copy of the data in spreadsheet format, if requested.
Data subjects must be able to have their data rectified by you if it is not correct. If a data subject informs you that their Personal Data needs to be rectified, you must inform us so that we can rectify it.
You should implement appropriate technical and organizational measures to provide a level of security appropriate to ensure the ongoing confidentiality/integrity/availability of Personal Data.
Specifically for creative/commercial content, recognizable data subjects should be informed that their Personal Data is being collected – this is usually done by the contractual agreement of their model and/or property release.
What do I do if a data subject asks me to remove their content?
Normally, data subjects must be able to have their data deleted, have the right to restrict processing of their data and the right to object to processing of their data. However, there are exceptions to this:
For creative/commercial content, when a model or property release is in force, the release is a signed contract which prevails over the GDPR (so, for example, a model cannot later change their mind to say that they do not want their likeness to be reproduced).
For editorial content, photographers/media organizations can contest a request for deletion under GDPR by relying on one of these exceptions: a legal obligation; archiving purposes in the public interest/historical/statistical purposes; or for the defense of legal claims. There is also an underlying right to freedom of expression and information for journalistic purposes and the purposes of academic, artistic, and literary expression.
If a data subject asserts any of these rights for content which we license, please contact us via the usual channels.
What are the penalties for not complying?
While we will find out in the coming months how this regulation will be administered and policed, the GDPR does set out some hefty penalties for breach for both individuals and companies, including fines:
Up to €10 million or 2% of global revenue of prior year (whichever is the highest) for certain processing breaches; or
Up to €20 million or 4% of global revenue of prior year (whichever is the highest) for certain breaches regarding processing, handling of data subject requests, and other enumerated acts.
It is worth noting that these fines are not applicable automatically and are to be imposed on a case by case basis.
Risk to your reputation.
How can I find out more?
If we receive general questions about the GDPR that are not addressed in this communication, we’ll add the answers to our list of GDPR FAQs on the Contributor Community Website. We’re unable to answer specific questions about the GDPR, but you can find out more on the official EU GDPR website and find a list of Data Protection Authorities in individual EU countries.
Best wishes
The Getty Images | iStock team
PLEASE NOTE THIS IS FOR INFORMATIONAL PURPOSES ONLY, AND JUST GIVES AN OVERVIEW OF SOME OF THE ISSUES SURROUNDING THE GDPR. IT IS NOT FOR THE PURPOSE OF PROVIDING LEGAL ADVICE.
YOU SHOULD CONTACT YOUR OWN LEGAL COUNSEL TO OBTAIN ADVICE WITH RESPECT TO COMPLIANCE REQUIREMENTS AND THE GDPR.
Note: As a Getty Images and iStock contributor, we're sometimes legally obligated to send you important information in 'Service Emails', like this one. To learn more, please visit your email preferences page.
Re: Important updates on Personal Data and the GDPR
Спасибо! Не ожидал найти столь важную тему в курилке
Как я понял, мы должны обеспечить доступность к хранящимся данным моделей, но можем посылать этих моделей лесом, если они вдруг передумают хотеть разрешить выложить их фотографии? Все правильно?
Re: Important updates on Personal Data and the GDPR
Немного непонятно толкование персональных данных, помогите понять:
Цитата:
What is Personal Data?
“Personal Data” is defined broadly to include all identifying information (for example, including but not limited to: email, physical address, phone information, password, user ids, etc., and also a person’s likeness captured in photos, illustrations and video and to a muscian’s IPI). Refer to Appendix A for a non‑exhaustive, but comprehensive list of Personal Data examples.
Правильно ли я понимаю, что перевести можно так:
....это идентификационная информация (например, включающая, но не достаточная, если больше нет другой информации емейл, телефон, физический адрес и т.д.)....
То есть, если имеется, скажем, отдельно емейл без физического адреса или телефона, то он не является личными данными? То же самое про телефон, пароль, и т.д. Я все верно понял?
А если есть имя и емейл? Это уже персональные данные?
Re: Important updates on Personal Data and the GDPR
Гетти заботливо для вас уже всё перевёл: "Эта важная информация доступна на сайте Сообщества авторов на русском языке. Вы можете выбрать свой язык в меню выбора языка в правом верхнем углу страницы."
Если одним словом - ничего не меняется. Будьте корректны и модели к вам потянутся) По эдиториалу мало что понятно, но пока ясно, что никто не меняет условий приемки.
Re: Important updates on Personal Data and the GDPR
Объясните - каким образом могут одновременно действовать правила ГДПР и правило Знай Своего Клиента. Первое требует удалять персональные данные - а второе хранить их и требовать от клиентов сканы паспортов.
Important updates on Personal Data and the GDPR
Линейный вид
