Privacy Policy

Midnight Hill AS provides production services to film, television and commercial productions. This policy explains what personal data we collect, why, and what you can do about it.

We are a Norwegian company. This policy follows the GDPR as it applies in Norway through the EEA agreement, and the Norwegian Personal Data Act (personopplysningsloven).

Who is responsible

Midnight Hill AS is the data controller for the personal data described here.

Midnight Hill AS Lyngneskroken 16 4018 Stavanger Norway Organisation number NO 835 934 292 MVA

This policy covers our website and the online tools we operate, including the Norway production check.

What we collect

Details you give us. Your name, email address, company, and anything else you choose to write when you contact us or complete a form.

Production details you give us. When you contact us about a production, or use the Norway production check, you may tell us about it — format, dates, locations, scale and similar. We treat this as commercially sensitive.

Technical and usage data. Pages visited, how far through a form people get, and approximate location at country and region level. We do not collect city-level location.

Contract and billing records. If we work together, the records that come with that.

We do not buy personal data, and we do not collect special categories of personal data.

Why we process it, and on what basis

To respond to a production enquiry. When you contact us about a production, or use the Norway production check, we process your data to take steps at your request before entering into a contract. GDPR Art. 6(1)(b).

To deliver services we have agreed. Performance of a contract. Art. 6(1)(b).

To follow up about a possible engagement. We rely on our legitimate interest in developing our business. You can object at any time and we will stop. Art. 6(1)(f).

To keep our website and tools working, secure and free of automated abuse. Legitimate interests. Art. 6(1)(f).

To understand how our site and tools are used. Consent where a cookie is involved; legitimate interests for statistics collected without cookies. Art. 6(1)(a) and 6(1)(f).

To meet legal obligations, including Norwegian accounting law. Art. 6(1)(c).

Who we share it with

We do not sell your data and we do not share it for advertising.

We use a small number of service providers who process personal data on our instructions and for no other purpose. They fall into these categories:

• a customer relationship management and marketing platform, which stores our contact records

• website and application hosting, security and abuse prevention

• email delivery

• tools that help us read and respond to the enquiries you send us

• analytics and usage measurement

Each provider is engaged under a data processing agreement. We also share data with our accountants and professional advisers where necessary, and with public authorities where the law requires it.

We can tell you which providers we use for a specific purpose if you ask.

Transfers outside the EEA

We keep processing within the EEA wherever we can arrange it. Our customer records are stored within the European Union.

Some of the providers we use are established outside the EEA, mainly in the United States, so some data is transferred out of the EEA. Where that happens we rely on the safeguards permitted under Chapter V of the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

You can ask us which safeguard applies to a particular transfer.

The Norway production check

The Norway production check is an online tool we operate. It gives you an immediate read on what a shoot in Norway is likely to require.

You can complete it and read the assessment on screen without giving us your name or anything else that identifies you. We only collect your contact details if you ask us for a copy of your results.

Project details you enter are treated as confidential. We do not share them outside Midnight Hill other than with the providers described above, and we do not reference your project publicly without your agreement.

The tool does not make any decision that produces a legal effect for you, or that similarly significantly affects you. A person reads anything you send us.

The tool carries its own notice explaining in detail how it handles what you enter.

How long we keep it

Cookies

We use necessary cookies to make the site work, and optional analytics cookies only where you have consented.

You were shown a consent banner when you arrived, and you can reopen it at any time through the Cookie Settings link on the site. You can also manage cookies in your browser. Some of the measurement we use does not set cookies at all.

Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse. Access to enquiry data is limited to the people at Midnight Hill who need it.

Your rights

Under the GDPR you have the right to:

• ask for a copy of the personal data we hold about you

• have inaccurate data corrected

• have data deleted

• restrict how we process it

• object to processing based on legitimate interests, including follow-up contact

• receive your data in a portable format

• withdraw consent at any time, where processing is based on consent

How to make a request. To ask for a copy of your data, or to have it deleted, use our data privacy request form, which is hosted for us by HubSpot. For anything else — correction, restriction, objection or portability — write to us at the postal address above.

We will respond within 30 days. We may need to confirm your identity before acting on a request.

If you are not satisfied with how we have handled your data, you can complain to Datatilsynet, the Norwegian Data Protection Authority, at datatilsynet.no.

Changes to this policy

We review this policy whenever we change how our site or our tools handle data. The date at the top tells you when it was last updated.