Privacy Policy for Talent, Crew, and Other Payees

Extreme Reach, Inc.; Extreme Reach Talent, Inc; Extreme Reach Services Group, LLC; CMC Crew Services, Inc; and Extreme Reach Payroll Solutions, Inc.; Slate and Extreme Reach UK Limited (collectively “Extreme Reach”) are committed to respecting and protecting your privacy.

This Privacy Policy describes how we collect, use, disclose, store and otherwise process information collected for Payroll Services. For information related to other Services, please see the relevant privacy policy link above.

Information We Collect

In order to process payroll, residuals, and other relevant payments for Talent, Crew or other payees (collectively “Payees”), Extreme Reach receives, collects, and creates a variety of information, including tax forms, session reports, time sheets, Payee contracts, payroll stubs, and other wage related information. The  categories of information include name, address, contact information, employment information, tax and payment information, union membership (for instance, if we are making union contributions in association your payroll) and, potentially, medical information (only if you are injured and make a workers’ compensation claim). This information is most often collected by our clients (or their agents) who are your common law employer, and provided to us in order to process payroll, but may also be collected by Extreme Reach directly from Payees (this mostly only occurs if you contact us directly to update your information). Any emails or other communications addressed to Extreme Reach may also be collected and retained, per our records retention policies.  

How Collected Data Is Used

Information collected and created for Payroll Services is used solely to process payments to Payees, to provide required reports to your employer (our client), applicable unions, pension funds, tax authorities, and governmental entities, and to perform associated legally required duties.

We never use your payroll information for marketing purposes, nor do we share such information with any third-parties, except those listed below, as required by law or in order to provide the Payroll Services.

Information Disclosed to Outside Parties

We provide information as required to applicable unions and guilds including their applicable benefits plans, tax authorities, governmental entities, the relevant agencies and advertisers who engage us to process your payroll, and those courts and legal authorities exercising jurisdiction over wage garnishments or other relevant legal proceedings.

Extreme Reach may also disclose personal information to our third-party vendors and service providers that work with us, solely to the extent necessary to provide the Payroll Services.  This would include third-party check printers, mail carriers, etc. 

We do not otherwise sell, trade, or transfer collected information to outside parties, unless we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.

Payroll data is processed in the United States, Canada, and the United Kingdom.

How We Protect Your Information

Security of all information is of the utmost importance for Extreme Reach. We use technical and physical safeguards to protect the security of your personal information from unauthorized disclosure. We also make all attempts to ensure that only necessary people and third parties have access to personal and confidential information.

We require that our third party service providers (1) use confidential information only to perform their obligations, and (2) otherwise maintain the confidentiality of such information. These third party service providers and channel partners are expected to maintain privacy and security protections that are consistent with Extreme Reach’s privacy and information security policies.

Your Rights

You have a variety of rights you may exercise with respect to your personal information.  While legislation only requires that we honor certain requests from people who live in certain jurisdictions, we believe in your privacy rights regardless of where you live and, therefore, allow anyone from anywhere to exercise any of those same rights, and we will not discriminate in any way against anyone for doing so.  

As such, you can exercise the following rights with respect to your PII that we have: (1) access your information, (2) correct or update your information, (3) delete your information, (4) Do Not Sell directive (unnecessary because we do not ever sell applicant information), (5) receive, transfer or port your information to someone else, (6) find out who we’ve disclosed your information to, and (7) unsubscribe or opt-out. To exercise any of these rights, please click here.  However, due to the nature of the data (wage payment related), there are some requests we may not be able to comply with due to our legal obligations.

GDPR

Extreme Reach is committed to protecting your data in compliance with the General Data Protection Regulations (GDPR). For Payees who perform services in the United States, Extreme Reach is almost always a dual or joint Controller (along with your actual employer) of your data. In other circumstances, we are almost always a Processor (with your employer or their agents being the Controller). Should you have any issues with how we handle your data, we request that you contact us first so that we can make every effort to address your concerns. You also have the right to lodge a complaint with a local data supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at http://ico.org.uk/concerns/ or telephone: +44303-123-1113.

For further information on your rights under GDPR, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.

CCPA

If you are a California resident, California law provides you with particular rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/privacy-laws. To exercise any such rights, please click the link above within the “Your Rights” section.

Legal Basis For Processing Data

Our legal basis for processing the personal information will depend on the personal information concerned and the specific context in which we process it. However, we will normally process personal information from you only where: (a) we have your consent to do so, (b) where we have a legal obligation to do so, or (c) where the processing is in the legitimate interest of you and/or your employer (and not overridden by your data protection interests or fundamental rights and freedoms) in order to pay you money that is owed by our client. 

Where we rely on your consent to process the personal information, you have the right to withdraw or decline your consent at any time. Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal. Withdrawing consent may limit, delay, or prevent our ability to process payments owed to you.

Should you have any issues with how we handle your data, we request that you contact us first so that we can make every effort to address your concerns. You also have the right to lodge a complaint with a supervisory authority. We rely on standard contractual clauses to authorize any necessary international data transfers.

International Transfers

We receive data from customers wherever they sign in to our application globally. We store and process data in the United States, Canada and the UK, depending on customer and payee location and payroll needs. Data accessed by customers internationally may be transferred by such customers. In most cases, transfers are governed by Standard Contractual Clauses.

Privacy Shield Compliance

Extreme Reach complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. Extreme Reach has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

In compliance with the Privacy Shield Principles, Extreme Reach commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Extreme Reach at [email protected].

Extreme Reach has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU in the context of the employment relationship.

Extreme Reach is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) with respect to its use of your data. Under certain conditions, you may have the right to invoke binding arbitration regarding your privacy rights. If Extreme Reach wrongly transfers your private data to third parties, it may be liable to you for damages.

For more information on how we comply with Privacy Shield, see our Privacy Shield Supplemental Policy.

Children

Extreme Reach recognizes the importance of protecting the privacy and safety of children. Our services are primarily directed towards the advertising industry and are not directed towards children. We may, however, process information about children under the age of 13 for the purposes of paying children who are hired by our clients. We will never use any such information for any purpose other than to provide the payroll services.

Data Retention

We retain data we collect for Payroll processing strictly for the purpose of providing the Payroll Services. We may be obligated to retain data for contractual or regulatory reasons. Due to our legal obligations related to wage and tax payment, we are not able to delete your wage related information for seven (7) years following completion of the applicable payments.

Changes to This Policy

Extreme Reach reserves the right to change, modify, add or remove portions of this Privacy Policy at any time without notice (except when legally obligated to provide notice). Any changes to this Privacy Policy will become effective when we post the revised version on our website.

Contact Information

If you wish to change any personal information, such as your address where you receive payroll or tax documents, please send an email to [email protected] or call (800) 233-0278.

You can contact [email protected] or 1-800-324-5672 if you have questions about this privacy policy, or for requests related to your privacy rights.

Last updated: April 14, 2021 to update Your Rights and expand explanations throughout