Exposure Labs is a film and impact production company. We believe in the transformative power of storytelling to change our world. Our work includes the production of original documentary films, the development of impact campaigns to support these films, and field-building efforts to support other storytellers and movement-builders in using film as a more effective tool for action and advocacy.
This policy does not address our other personal data processing operations. Additional policies and procedures are in place to address those operations and we provide relevant information to data subjects and the point of data collection, or as required by law.
This Policy is subject to regular review. Subsequent updates and amendments will be documented below and communicated to data subjects where required.
The data controller for data collected and processed in accordance with this Policy is Exposure Labs:
Boulder, CO 80308
Any questions regarding this Policy or any other data protection issue should be submitted via email to [email protected]
WHAT WE PROCESS & WHY
MAILING LIST & EMAILS
We send out newsletters to keep our network informed of our work and productions. On the basis of your consent, we collect your name and email address from you for this purpose. You can withdraw your consent at any time by unsubscribing to the mailing list through the link provided in our newsletters.
On the basis of our legitimate interest, we may also share your name and email with our email provider in order to send you communications about events you sign up to, if you make a donation to us, or where you engage with us, for example by making a pledge or offering to host a screening. You can opt-out of these emails at any time by unsubscribing through the link provided.
We organise events from time to time, using SplashThat and other trusted platforms to manage RSVPs and ticketing. When you sign up for one of our events, we will direct you to the platform where, on the basis of your consent, we will collect your name and email address in order to issue you with a ticket.
For those looking to screen one of our films or host an event in conjunction with our impact campaigns, we collect names, contact and event details on the basis of consent. We use Gravity Forms to collect this information and to register these events.
If you sign up to our Environmental Voter Project, we collect your name, email, street address and phone number on the basis of your consent. We partner with the Environmental Voter Project (EVP) to collect this information. EVP updates us on new users who have taken this pledge, this is purely for impact analysis purposes and does not include any personally identifiable information.
We occasionally advertise through social media platforms like Facebook, but we do not use any information about individuals to target them.
In general, data will be retained for as long as is necessary to fulfil the purpose for which it was collected. Where data is collected on the basis of consent, we retain it until you withdraw your consent or otherwise when the data becomes no longer relevant for the purpose for which it was collected. Some data is retained in line with legal obligations on us, for example tax record keeping connected with making a donation, and it will be deleted at the end of the relevant period required by law.
Exposure Labs does not collect any sensitive data within the definition of EU data protection laws. As described above, we partner with EVP and collect data that indicates an individual prioritises the environment when voting, but this data only relates to US-based individuals and does not reveal political affiliations or opinions.
These cookies are necessary for the website to function and cannot be switched off or opted-out of.
|Determines whether the user has accepted the cookie consent box.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our websites. They help us understand which pages are most or least engaged with and see how visitors move around the websites.
|_ga, _gat, _gid
|Google cookies used to register a unique ID that is used to generate statistical data on how the visitor uses the website and to throttle request rates.
|Used to send data to Google Analytics about the visitor’s device and behaviour. Tracks the visitor across devices and marketing channels.
These cookies are set through our site by our advertising partners and may be used to build a profile of your interests and show you relevant ads on other sites. They don’t store directly personal information but they are based on uniquely identifying your browser and internet device.
|Used by Google DoubleClick to register and report the website user’s actions after viewing or clicking on advertiser’s ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user. Used to check if the user’s browser supports cookies.
|visitor_info1_live, YSC, yt-remote-cast-installed, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name
|We embed trailers through YouTube links. YouTube then sets cookies through our site that it us to estimate user bandwidth on pages with integrated videos, register a unique ID to keep statistics of what videos from YouTube the user has seen and store the user’s video player preferences using embedded YouTube video.
Opting in and out of cookies
When you visit our websites for the first time, a cookie consent box appears allowing you to provide your consent to non-essential cookies (opting-in) or to reject the cookies (opting-out). By default, non-essential cookies are disabled. You can access this box and opt-in or out at any time – it appears at the bottom of the page.
We take all reasonable steps to ensure that personal data is processed securely and treated in accordance with this Policy. The technical and organisational measures to prevent unauthorised access to personal data include limiting staff and third party access to personal data in accordance with specific job responsibilities or contractual obligations, the encryption of data where possible, the institution of security protocols and staff training. Although we do our best to protect personal data, information transmitted over the internet remains vulnerable to interception – for this reason, the transmission of any personal data to our websites or via email to us is therefore at the data subjects’ own risk.
Data sharing, processors and international transfers of data
We work with certain carefully-selected third party providers who process data on our behalf. These include MailChimp, Gravity Forms, SplashThat, Wild Foundation, Denver Film Society, Streak, Zapier, WordPress and others who provide content management systems and services that allow us to deliver our websites. We share data with these providers on the basis of our legitimate interests in delivering our productions and operating our websites, mailing lists and events. These providers have safeguards in place to ensure that data is protected and treated in compliance with international data protection laws and standards, including in relation to the international transfer of data.
Where EU data protection laws apply to individuals whose personal data is processed by Exposure Labs, the following rights are available:
- The right to be informed as to whether Exposure Labs holds data about them;
- The right of access to that information;
- The right to have inaccurate data corrected;
- The right to have their data deleted;
- The right to opt-out of particular data processing operations;
- The right to receive their data in a form that makes it “portable”;
- The right to object to data processing;
- The right to receive an explanation about any automated decision making and/or profiling, and to challenge those decisions where appropriate.
To make a request or complaint related to the processing of your personal data contact [email protected]
Individuals covered by EU data protection laws may also be entitled to lodge complaints in regard to data processing or the handling of subject access requests with data protection supervisory authority in their country of residence. Relevant supervisory authority names and contact details are listed here.
CHANGES & REVISIONS
This Policy may be updated from time to time. The date and nature of changes made will be listed below.
Policy published 11 September 2020.