Legal · Data Protection in Processing
Data Processing Agreement (DPA)
When we process personal data on behalf of a client, a Data Processing Agreement is the proper approach. This page explains when a DPA is necessary, what it regulates, and what the process looks like. It applies to production activities such as interview recordings and voice recordings, as well as the management of associated data.
Kastanienallee 42, 10435 Berlin · Interview recordings · TV productions · GDPR-compliant processing
When a DPA is necessary
A DPA is necessary when we process personal data on behalf of a client. This does not apply to every booking. A pure voice recording without any reference to a person generally does not fall under this. As soon as names, voices, topics, or releases of individuals are documented or stored, the DPA is the appropriate framework.
Pure voice recording
No reference to a person, no stored information about speakers: In these cases, a DPA is generally not used.
Interview with personal reference
As soon as voices, names, discussion topics, or release forms are documented or kept for production, the DPA serves as the framework for processing.
TV production with material management
Multi-part shoots involve raw material, edits, and agreements with participants. This project management also falls under the Data Processing Agreement.
Uncertainty
If you are unsure whether your project is affected, we will clarify this before booking. We are transparent if no DPA is required.
What the contract regulates
The contract regulates which data is processed, for what purpose, how long it remains stored, and who has access. It also regulates obligations regarding confidentiality, deletion at the end of the project, and the question of whether sub-processors are used. The contract also contains requirements for technical and organizational measures.
- Data types and purpose
- Recordings, releases, and project data are described according to their intended use.
- Storage duration and deletion
- Retention periods are specified in the contract, as is the time at which material is deleted.
- Access and confidentiality
- Access is granted only to persons involved in the project, bound by a confidentiality obligation.
- Sub-processors
- The contract specifies whether third parties are involved and under what conditions.
What the process is
You request the DPA when booking or before the project begins. We coordinate the details of the project, such as data types, purpose, and storage duration. For clients with their own contractual requirements, we check whether the specifications align. The signed contract is in place before the first file is created.
-
Submit request
State the project type, planned shoot days, and whether your company has its own contractual requirements. That is enough to get started.
-
Coordinate details
We go through data types, purpose, storage duration, and potential sub-processors and enter them into the draft.
-
Check requirements
If your company has its own DPA draft or specific clauses, we compare them and suggest additions.
-
Sign before the first take
The signed contract is in place before the first file is created. For short-notice appointments, we address the DPA directly during booking.
Technical and organizational measures
Measures include restricted access to recordings for project participants, separate storage of project data, and regulated deletion after the project ends. Recordings are not stored on publicly accessible storage. If transfer to third parties is necessary for a production, this only happens after coordination with the client.
- Access restriction Only persons involved in the project are granted access to the recordings.
- Separate storage Project data is stored separately, not in a shared, open storage system.
- Regulated deletion After the project ends, the material is deleted according to the period agreed upon in the contract.
- Transfer to third parties Only takes place after explicit coordination with the client.
Rights of guests and interview partners
Individuals appearing in a production have rights regarding their data. This includes access, rectification, and deletion, provided that legal obligations do not prevent it. For interviews with releases, we clarify with the client how these rights are practically implemented. If an interviewee has a question about their data, they can contact the client or us directly.
For questions from involved parties, you can reach us at +49 30 12345678 or via email at cadendunnvfoc@hotmail.com – Monday to Friday from 09:00 to 18:00.
What the DPA does not replace
The DPA (Data Processing Agreement) does not replace the client's own responsibility under data protection law. It regulates processing on behalf of the client, not the client's purposes. If your project requires a data protection impact assessment or separate consent, that remains the client's responsibility. We provide the information necessary for these steps.
Request for a DPA
Send us a brief request including the project type, data types, and planned storage duration. Let us know if your company has its own contract requirements. We will get back to you with the appropriate draft or follow-up questions. The contract is concluded before the project begins, not during production.
What to include in the request: project type (interview, voice recording, TV production), data types, planned storage duration, and – if available – your own contract draft.
Frequently asked questions about the DPA
Is a DPA necessary for every studio appointment?
No. The DPA concerns cases where personal data is processed on behalf of a client. It is generally not used for pure voice recordings without personal reference. If you are unsure, please clarify this in your request.
Can we use our own DPA draft?
Often, yes. If your draft contains the required points and fits the project, we will review it and work with it. If points are missing or unclear, we will suggest additions before the contract is finalized.
When must the DPA be signed?
Before the first processing, i.e., before the first recording or data collection. We finalize it before any material is created. If a project starts on short notice, please mention the DPA when booking to avoid delays.
Further pages:Studio & Technology,Production WorkflowandDisclaimer.