Privacy Policy

1. Data controller

Platform Acting is the data controller responsible for your personal data. We are establishing operations in the Netherlands. For any privacy matter, you can reach us at privacy@platformacting.nl. Our full legal entity details and, where required, our Data Protection Officer contact, are set out in our terms.

2. Personal data we collect

We collect the data you provide and the data generated while you use the Service:

• Account data — name, email address, role (actor, employer or coach), password (stored hashed) and language preference.
• Profile data — for actors: stage name, biography, location, age range, languages, skills, headshot and gallery images; for employers: company name, description and logo.
• Performance media — video files or links (e.g. YouTube/Vimeo), scripts, monologue text and notes you upload for assessment. This may include your image, voice and likeness.
• Assessment & certification data — AI-generated scores and written feedback, expert coach review notes, certification levels and publicly verifiable credential codes.
• Casting data — casting calls, applications, shortlisting/selection status and related messages.
• Technical data — limited technical information needed to operate the Service securely (e.g. session and CSRF data). See our Cookie Policy.

3. How we use your data and our lawful bases

We process personal data only where we have a lawful basis under Article 6 GDPR:

• To perform our contract with you (Art. 6(1)(b)) — creating and managing your account, running AI assessments, enabling expert certification, matching actors to casting calls and processing applications.
• Your consent (Art. 6(1)(a)) — where you upload performance media for assessment and certification, and for any optional communications. You may withdraw consent at any time.
• Our legitimate interests (Art. 6(1)(f)) — securing the platform, preventing abuse, and improving the Service, balanced against your rights and freedoms.
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose data to comply with the law.

Where performance media reveals data that could be considered special category data, we rely on your explicit consent (Art. 9(2)(a)) and process it solely to deliver assessment and certification.

4. Automated processing (AI assessment)

When you submit a performance, it is processed by an automated assessment service that produces draft scores and written feedback across tone, expression, body language and emotional delivery. This automated output is a draft only and is always reviewed by a human acting coach before any certification is issued — it does not produce legal or similarly significant effects on you without human involvement. You can ask for human review and contest any assessment by contacting us.

5. Who we share data with (processors & recipients)

We do not sell your personal data. We share it only as needed to run the Service:

• Acting coaches who review and certify skills — limited to the material relevant to that review.
• Employers — when you apply to a casting call, the employer sees your relevant profile, certified skills and application.
• Service providers (processors) acting on our instructions, such as cloud hosting, storage, email delivery and the AI assessment provider. Each is bound by a data processing agreement.
• Authorities where required by law.

Verifiable certification credentials are designed to be publicly verifiable: a credential code confirms the skill, level and issuing status. You control which performances you submit for certification.

6. International transfers

We aim to host and process data within the European Economic Area (EEA). Where a processor transfers data outside the EEA, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses. You can request details of the safeguards in place.

7. Data retention

We keep personal data for as long as your account is active or as needed to provide the Service. Performance media and assessments are retained to maintain your portfolio and certifications until you delete them or close your account. After account closure we delete or anonymise data within a reasonable period, unless we must retain it to comply with legal obligations or resolve disputes.

8. Your rights under the GDPR

Subject to conditions, you have the right to: access your data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority. To exercise any right, contact privacy@platformacting.nl.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and the principle of least privilege. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to children under 16. If you believe a minor has provided us personal data without appropriate consent, please contact us and we will take appropriate steps.

11. Changes to this policy

We may update this policy as the Service evolves. We will post the updated version here and revise the "last updated" date. Material changes will be communicated where appropriate.

12. Contact

For privacy questions or requests, email privacy@platformacting.nl.