Privacy policy

This policy sets out which data we collect, for what purpose, who is involved in processing it and what rights you have over it.

Data controller

IZZ Media Group
contact@izzmediagroup.com

Data collection

We collect the information you send voluntarily through the application form, the talent request form or the contact form: name, email, phone, profile details and any photos you choose to attach. We also record your IP address, solely to limit bursts of submissions. If you have an account, we also note the date and time of your last visit while signed in: only the latest one, with no history. Only the agency looks at it, to know which accounts are still active, and it is deleted when the account is erased. Photos are stored outside the public area of the site, are never published, and their metadata, including the location phones add, is stripped on arrival. If you join the roster, we also collect an image of your identity document, through the procedure described below.

Identity document and age verification

Before a profile is put to a producer, we check that the person is over 18. For that we ask for an image of the identity document or the passport, plus a photo of the person holding that document — without it the document does not prove whose it is — both uploaded from this site itself through a personal link that expires: never by email or messaging app, which are not secure channels. The legal basis is compliance with the protection-of-minors obligations that govern this industry, and the legitimate interest in being able to evidence that check to producers. The file is encrypted on arrival and stored outside the public area of the site; the image is reprocessed to strip its metadata, including location. It is never passed on to a producer or to any other third party: what they receive is the confirmation that the check has been done. Once the age has been verified, the image is deleted and only the date of the check and the type of document are kept. If you do not end up joining the roster, or once we no longer represent you, the image is deleted just the same. For an ID card both sides are requested; the back may show the home address, which is not used and is deleted with the rest. You can ask for it to be erased at any time.

Photos used to promote the agency

With your consent, given photo by photo from your account, we may show a photo from your book on the site's public pages or on our social media, with your stage name if you choose and never with your real name or contact details. Without that consent, your book is only seen by productions with catalogue access. You can withdraw it at any time from your account: we stop showing the photo and delete our posts, although we cannot delete what others shared before. The legal basis is your consent (Art. 6(1)(a) GDPR).

Production companies' documents

Before opening the catalogue to a production company, we check that the person opening the account is who they say they are and is over 18, and, before confirming their first booking, that their business is officially registered. To do so we ask for an image of their identity document with a photo of that person holding it, and a document proving the business: the company's deed or registry entry, a self-employed registration, or its equivalent in another country. They are uploaded from their space on this site, never by email. The legal basis is our legitimate interest in protecting the models we represent, who only receive proposals from identified production companies, and in not acting as intermediary for a business that does not exist. The files are encrypted on receipt, stored outside the public part of the site, consulted only by the agency, and never shared with any model or third party. As soon as they are checked or rejected, they are deleted: only the date of the check and the type of document are kept.

Photography and video

If you sign up to shoot photos or video, we process your account data (first and last name, professional name, email, city), your bio, your rate and the work you upload to your portfolio, in order to validate your account, offer you shoots and jobs, and keep track of commissions. The legal basis is the relationship you accept when signing up. Your portfolio, professional name, city and rate are seen by the agency and by production companies whose access we have opened, and, if you shoot photos, by the talents it represents; your real name and email are shown to nobody. When a talent chooses a shoot with you, they see your professional name, and you see their stage name, the date and the place. Your identity document follows the same rules as those of talents and production companies: it is encrypted, only the agency views it, and it is deleted as soon as it has been checked. The document proving your registered business, which we ask for before your first paid job, follows the same rules.

Shooting locations

If you offer a shooting space, we process your account data (first and last name, email and, if you give it, phone) and the space's data (name, city, district, address, description and photos) to validate it, show it and pass requests on to it. The legal basis is the relationship you accept when signing up. The space's name, city, district and cover photo are public; the other photos are seen by registered accounts. Only the agency sees the address, to verify the space. When you accept a request, whoever sent it sees your name, your email and your phone if you gave one; likewise, if you request a space and its holder accepts, they see your name (or stage name), your email and, if you are a production, your phone. Your identity document and the owner's authorisation are encrypted, consulted only by the agency and deleted as soon as they are checked.

Job applications

If you apply for a position at IZZ, we process your name, email, phone, the link to your work and your message to review your application and reply. The legal basis is taking steps at your request before entering into a contract. Only the agency sees them, they open no account, and they are deleted 12 months after your application.

Use of data

We use your data to handle your application or your request, to reply to you and to verify that access is restricted to adults aged 18 or over. A talent's profile is only shown to production companies whose access we have reviewed and to validated photographers, with the authorisation given when signing up, which can be withdrawn at any time with immediate effect; it is never published or passed on in any other way. We do not sell your data or share it for commercial purposes. The technical providers listed below are involved, without which the site cannot run.

Providers involved

The site is hosted with Hostinger. Emails are sent through a mail provider. Technical errors are logged with Sentry, which processes the IP address on the server side so a fault can be reproduced. Google Analytics measures visits, and only if you have accepted it: without consent it is not loaded. Typefaces and the interface library are served from this same server, so no third party receives your IP address when the page opens. Hosting, mail and error logging stay within the European Union. The only transfer outside the Union is Google Analytics, and only if you have accepted it.

Security

We apply technical and organisational measures to protect your data against unauthorised access, alteration or disclosure. That said, no transmission over the internet is ever entirely secure.

Data retention

We keep applications for 12 months from the last contact, unless the law requires longer. Contact messages follow the same period. The IP address only serves to limit submissions and is erased after 24 hours. Attached photos are deleted along with the application, file included. When we remove a photo from a book, a small thumbnail of it is kept for 30 days, visible only in the space of the person who uploaded it, so they know which one it was; then it is deleted. The image of the identity document is deleted as soon as the check is done, and in any case when you leave the roster. If you join the agency roster, we keep your file for as long as the representation lasts and as long as the law requires us to. Producer requests are kept for as long as the business relationship makes sense. In every case you can object to the retention or ask for deletion at any time. Hosting backups are kept for up to 60 days and then overwritten: an erased record may persist in them for that long, unread, and disappears with them. A photography or video account is kept for as long as it is used, and the record of invoiced shoots and jobs for the period the law requires. For the emails we send you, we keep the date, the type and the subject, never the content, for as long as your account exists.

Your rights

You may access your data, correct it, erase it, restrict or object to its processing, and request its portability. Write to us through the contact form. You may also lodge a complaint with the Spanish Data Protection Agency. When we erase your data, all that remains is a record of the erasure itself — its date, its reason, and your address turned into a fingerprint that cannot be read back — so that we can prove we did it. If an account is erased because it presented a forged identity document, that fingerprint also serves to stop the same address from registering again: a measure against fraud, based on the legitimate interest of the agency and of the talents it represents. You can write to us directly at contact@izzmediagroup.com.

Contact

If you have questions about this privacy policy, write to us. You can write to us directly at contact@izzmediagroup.com.