Privacy Policy (GDPR)

Adria Nordic Talent Management 

Last updated: 2026-02-16

1. Introduction

Adria Nordic Talent Management processes personal data with the utmost respect for personal privacy and in accordance with the EU General Data Protection Regulation (GDPR), the Data Protection Act (2018:218) and guidelines from the Swedish Data Protection Authority (IMY).

2. Data controller

Company name: Adria Nordic Talent Management 

Email: office@adrianordictalent.se

Phone: +46 760 30 34 24

3. Processing of personal data of children and young people under the age of 18

Adria Nordic Casting processes personal data concerning children and young people under the age of 18 with particular care, in accordance with GDPR Article 8 and IMY’s guidelines.

  • For children under 13 years of age, the express consent of guardians is required before personal data is processed.

  • For children and young people between the ages of 13 and 17, parental consent is required for registration, submission of material and participation in casting assignments.

  • Consent must be documented and can be revoked at any time.

We only process data that is necessary for casting and placement purposes and never share children’s personal data without a valid legal basis.

4. What personal data is processed?

We may process the following categories of personal data:

  • Identity information (name, date of birth)

  • Contact information for the individual and/or guardian

  • Image, video and audio material

  • Experience, education and relevant skills

  • Communication and consents

  • Technical data when using the website

5. Purpose and legal basis (according to IMY practice)

Personal data is only processed for clearly stated and legitimate purposes, such as:

  • Casting, role placement and assignment matching

  • Communication with talents, guardians and clients

  • Contract administration and legal obligations

  • Ensuring correct handling of consents

Legal basis:

  • Consent (GDPR art. 6.1 a and art. 8)

  • Agreement (GDPR art. 6.1 b)

  • Legal obligation (GDPR art. 6.1 c)

  • Legitimate interest (GDPR art. 6.1 f), where the best interests of the child are always taken into account

6. Consent management

Consents:

  • Obtained in writing or digitally

  • Documented and stored securely

  • Can be revoked at any time without negative impact

If consent is withdrawn, processing will cease unless there is another legal basis.

7. Storage and thinning

In accordance with IMY requirements, we store personal data only for as long as necessary:

  • Casting profiles: max 24 months after last activity

  • Children’s tasks: regular review and early thinning

  • Contractual information: according to accounting and archiving requirements

Data is deleted or anonymized when the purpose ceases.

8. Sharing and recipients

Personal data may be shared with:

  • Production companies and clients

  • Directors and casting directors

  • Technical service providers (data processors)

All recipients are covered by personal data processing agreements (PUB agreements) according to IMY’s practices.

9. Transfer to third countries

In the event of any transfer of personal data outside the EU/EEA, the following applies:

  • EU Standard Contractual Clauses (SCC)

  • Other approved safeguards under GDPR Chapter V

10. Data subject rights (IMY standard)

The data subject has the right to:

  • Obtain information about the processing (Articles 13-14 GDPR)

  • Request a registry extract

  • Request correction or deletion

  • Request restriction of processing

  • Object to processing

  • Request data portability

  • Submit a complaint to the Swedish Data Protection Authority (IMY)

11. Safety measures

We apply the appropriate:

  • Technical security measures (access controls, passwords, encryption)

  • Organizational routines (authority control, confidentiality)

to protect personal data according to GDPR Article 32.

12. Cookies

Our website uses cookies in accordance with the Electronic Communications Act. Consent can be managed via browser settings or cookie banner.

13. Incident management (IMY requirements)

In the event of a personal data incident:

  • Investigate the incident immediately

  • Notify IMY within 72 hours if there is a risk

  • Registrants are informed in case of high risk

14. Changes to the policy

This privacy policy is updated as necessary. The current version is published on our website.

15. Contact

For questions about data protection or exercising rights:

office@adrianordictalent.se

+46 760 30 34 24