Understanding Your GDPR Responsibilities for Marketing and Promotional Emails
Cast It Reach enables its users to quickly and easily send mass email communications directly to Applicants. The majority of these communications are related to a specific casting - such as an audition confirmation or a request for more information. But it is also possible to send marketing or promotional emails to users - about new series airing, or new shows that are casting, for example.
Sending Marketing/Promotional Emails
It is important to note that any emails that fall under these categories are subject to strict data protection and privacy rules - and it is the responsibility of Cast It Reach users (Production Company personnel) to ensure such communications meet these requirements as the Data Controller.
Below, we have outlined some of the basic requirements for using the platform to send these types of emails.
***Please note that this is a guide, and should not be considered legal advice.
Please consult your relevant Legal/Business Affairs teams about your Company’s
approach to marketing/promotional emails***
GDPR Guidelines and responsibilities
If you are a company operating in or targeting customers within the European Union (EU), it is crucial to understand and comply with the General Data Protection Regulation (GDPR) and other European data protection and privacy laws and regulations such as the Privacy and Electronic Communications (EC Directive) Regulations 2003.
These laws set stringent guidelines for the collection, use, and protection of personal data, and how to legally and compliantly communicate to individuals such as through email.
When it comes to marketing/promotional emails, here are some of your key responsibilities:
Obtain Clear Consent
Before sending marketing emails, you must obtain explicit consent from the recipients. This consent should be freely given, specific, informed, and unambiguous. A way to achieve this can be a checkbox that an individual has to select. Pre-ticked boxes or any form of assumed consent are not compliant. Always provide a clear option for individuals to opt-in to your marketing communications.
Cast It Reach would suggest you do this as part of your registration process for new applicants.
Be Transparent
When asking for consent, be transparent about who you are (the data controller), why you need their data (purpose of data processing), and what you intend to do with it (such as sending promotional offers). Provide a clear privacy disclaimer that provides the first layer of information, and then link to a more detailed privacy statement detailing these aspects and how they can withdraw consent if they choose to.
Maintain Records of Consent
Keep a record of when and how you obtained consent from each individual. This includes the information they were presented with at the time of consent and the method used to obtain it.
By presenting the option to opt-in to these communications at the registration page, you can be certain when they checked the box to do so.
Respect Data Subject Rights
Under GDPR, individuals have the right to access their data, have inaccuracies corrected, have their data erased, object to direct marketing, and more. Make sure you have processes in place to honour these rights without undue delay.
Facilitate Easy Opt-Out
Provide a clear way for recipients to opt-out or unsubscribe from your marketing emails in every message you send. Opt-out requests should be processed promptly, and no further marketing emails should be sent to those individuals after they have unsubscribed.
Because Cast It Reach allows you to send emails to communicate with Applicants for specific, casting related purposes, we do not have a default global ‘opt-out’. As a minimum, you should provide an email address where they can contact you to request they be removed from these specific types of emails.
It is possible to create a custom Additional Questionnaire to assist with management of user preferences. Please speak to your Customer Success or Technical Account Manager for more information.
Train Your Team
Ensure that your casting team is trained on GDPR requirements and understands the importance of data protection, particularly in the context of marketing communications.
For further guidance or specific legal advice regarding GDPR compliance for your marketing activities, consider consulting with a data protection officer or legal expert in this field.
Useful links:
Information Commissioner's Office (ICO)
UK Government Data Protection Website