Privacy Policy for Talent, Crew, and Other Payees

Extreme Reach, Inc.; Extreme Reach Talent, Inc; Extreme Reach Services Group, LLC; CMC Crew Services, Inc; and Extreme Reach Payroll Solutions, Inc.; Slate and Extreme Reach UK Limited (collectively “Extreme Reach”) are committed to respecting and protecting your privacy.

This Privacy Policy describes how we collect, use, disclose, store and otherwise process information collected for Talent and Crew payroll services. For information related to other Services, please see the relevant privacy policy link above.

Information We Collect

In order to process Talent and Crew payroll, residuals, and other relevant payments, Extreme Reach collects and creates a variety of information, including tax forms, session reports, time sheets, talent and crew contracts, payroll stubs, and other wage related information. This information may be collected directly from talent, crew, and other payees, or may be passed along to us by our clients and business partners. Any emails or other communications addressed to Extreme Reach may also be collected and retained, per our records retention policies.

How Collected Data Is Used

Information collected and created for Talent and Crew payroll services is used solely to process payments to payees, to provide required reports to applicable unions, pension funds, tax authorities, and governmental entities, and to perform associated legally required duties.

We never use your payroll information for marketing purposes, nor do we share such information with any third-parties, except those listed below.

Information Disclosed to Outside Parties

We provide information as required to applicable unions and guilds including their applicable benefits plans, tax authorities, governmental entities, the relevant agencies and advertisers who engage us to process your payroll, and those courts and legal authorities exercising jurisdiction over wage garnishments or other relevant legal proceedings.

Extreme Reach may also disclose personal information to our third-party vendors and service providers that work with us. We will only share personal information to these vendors and service providers to help us provide a product or service to you or our clients.

We do not otherwise sell, trade, or transfer collected information to outside parties, unless we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.

How We Protect Your Information

Security of all information is of the utmost importance for Extreme Reach. We use technical and physical safeguards to protect the security of your personal information from unauthorized disclosure. We also make all attempts to ensure that only necessary people and third parties have access to personal and confidential information.

We require that our third party service providers (1) use confidential information only to perform their obligations, and (2) otherwise maintain the confidentiality of such information. These third party service providers and channel partners are expected to maintain privacy and security protections that are consistent with Extreme Reach’s privacy and information security policies.

GDPR

Extreme Reach is committed to protecting your data in compliance with the General Data Protection Regulations (GDPR). For purposes of retaining your payment information, we may sometimes be the data controller. However, in other contexts, Extreme Reach may be a data processor, with the company that engaged you for services acting as the data controller.

LEGAL BASIS FOR PROCESSING DATA

If you are an individual from the European Economic Area (EEA), our legal basis for collecting and/or processing the personal information will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where: (a) we have your consent to do so, (b) where we need the personal information to perform a contract with you, or (c) where the processing is in our legitimate interests (and not overridden by your data protection interests or fundamental rights and freedoms). In some cases, we may also have a legal obligation to collect personal information from you, or may otherwise need the personal information to protect your vital interests or those of another person.

Where we rely on your consent to process the personal information, you have the right to withdraw or decline your consent at any time. Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal. Withdrawing consent may limit, delay, or prevent our ability to process payments owed to you.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

Should you have any issues with how we handle your data, we request that you contact us first so that we can make every effort to address your concerns. You also have the right to lodge a complaint with a supervisory authority. We rely on standard contractual clauses to authorize any necessary international data transfers.

International Transfers

We receive data from customers wherever they sign in to our application globally. We store and process data in the United States, Canada and the UK, depending on customer location. Data accessed by customers internationally may be transferred by such customers.

Privacy Shield Compliance

Extreme Reach complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. Extreme Reach has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

In compliance with the Privacy Shield Principles, Extreme Reach commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Extreme Reach at privacy@extremereach.com.

Extreme Reach has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU in the context of the employment relationship.

Extreme Reach is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) with respect to its use of your data. Under certain conditions, you may have the right to invoke binding arbitration regarding your privacy rights. If Extreme Reach wrongly transfers your private data to third parties, it may be liable to you for damages.

For more information on how we comply with Privacy Shield, see our Privacy Shield Supplemental Policy.

Children

Extreme Reach recognizes the importance of protecting the privacy and safety of children. Our website and services are primarily directed towards the advertising industry and are not directed towards children. We may, however, process information about children under the age of 13 for the purposes of delivering Talent payroll services for them.

Data Retention

We retain data we collect for Talent and Crew payroll processing. We may be obligated to retain data for contractual or regulatory reasons. Due to our legal obligations related to wage and tax payment, we are not able to delete your wage related information for seven (7) years following completion of the applicable payments.

Changes to This Policy

Extreme Reach reserves the right to change, modify, add or remove portions of this Privacy Policy at any time without notice (except when legally obligated to provide notice). Any changes to this Privacy Policy will become effective when we post the revised version on our website.

Opt-out

Extreme Reach does not use your information for any marketing purposes, so there is no need to opt-out of receiving such communications.

CCPA

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/privacy-laws. To further define how the California Consumer Privacy Act of 2018 (“CCPA”) impacts CPLLC, we have the following Supplemental Privacy Statement for California Consumers under CCPA.

INTRODUCTION

The California Consumer Privacy Act (“CCPA”) of 2018, as amended, imposes new privacy obligations on certain businesses that collect and use California residents’ personal information. This Supplemental Privacy Policy for California explains rights that California consumers may have under the California Consumer Privacy Act of 2018 (“CCPA”).

When we use the term “personal information” in this supplement, we are using that term as CCPA defines it, which CCPA generally defines “personal information” to mean information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. However, personal information does not include publicly available, deidentified, or aggregate consumer information (which are all defined in CCPA). Notably, the definition of “personal information” also does not apply to the collection of personal information from job applicants, employees – whether you are our employee or any employee of the entity arranging access to our Services for you, business owners, directors, officers, medical staff, or contractors.

Where we act as a “business” under CCPA (meaning we determine the manner and reasons for why we process your personal information), we may be required to disclose the categories of personal information we collect, the sources where we obtain that information, the purposes for why we collect that information, and who we share that information – all of which depends on the specific Service.

For talent and crew payees, we obtain the following categories of personal information from directly from talent, crew, and other payees, or as may be passed along to us by our clients and business partners: identifiers, Personal
information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), protected classification characteristics under California or federal law, commercial information, professional or employment-related information. Information is collected for the purposes described in the How Collected Data Is Used section above. We use and share personal information as described in the Information Disclosed to Outside Parties section above. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

YOUR CCPA PRIVACY RIGHTS

The CCPA provides California residents (consumers) with specific rights regarding their personal information. If you are a resident of California and are not a job applicant, employee, or employee of another company interacting with us in your job role, you have the right to request what the specific pieces and categories of personal information we collect, use, and disclose. You may also request that we delete your personal information. You may also request the sources of personal information collected about you and the purpose for collecting the personal information.

The CCPA also gives California residents the right to stop the “sale” of their personal information through a mechanism called “Do Not Sell My Personal Information.” To exercise any rights under CCPA, click here.

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

  • Deny you goods or services;
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
  • Provide you a different level or quality of goods or services;
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Contact Information

If you wish to change any personal information, such as your address where you receive payroll or tax documents, please send an email to performer@extremereach.com or call (800) 233-0278.

You can contact privacy@extremereach.com or 1-800-324-5672 if you have questions about this privacy policy, or for requests related to your privacy rights.

Last updated: July 2020 to include Privacy Shield Compliance information