Film8 Privacy Policy

Last updated: 2 October 2026

Film8 AB ("Film8", "Film8 Studio", "we", "us" or "our") respects your privacy and is committed to handling personal data responsibly and in accordance with the EU General Data Protection Regulation ("GDPR") and applicable Swedish data protection law.

This Privacy Policy explains how we collect, use, store and share personal data when you:

· visit film8.se;

· contact us about a project or service;

· request or accept a quotation;

· make a booking;

· receive or pay an invoice;

· make a payment through a payment link;

· participate in a photography, video or other production;

· work with us as a client, supplier, freelancer or other business contact; or

· otherwise communicate or interact with Film8.

1. Who Is Responsible for Your Personal Data?

The data controller is:

Film8 AB

Organisation number: 559417-8393

Film8 Studio

Lilla Nygatan 19

111 28 Stockholm

Sweden

Email: info@film8.se

Website: film8.se

2. Personal Data We May Collect

Depending on how you interact with Film8, we may process the following categories of personal data.

Contact and identity information

· name;

· company or organisation;

· job title;

· email address;

· telephone number;

· postal or billing address; and

· other contact information you provide to us.

Project and communication information

· project enquiries;

· correspondence and emails;

· project briefs;

· quotation and booking information;

· production schedules;

· locations;

· delivery information;

· feedback and revision requests; and

· other information necessary to plan or carry out a project.

Billing and transaction information

· billing name and address;

· company details;

· organisation or VAT number;

· invoice information;

· payment status;

· transaction amount and currency;

· transaction reference;

· payment method; and

· other information required for accounting or payment administration.

Payment card information

Where you pay through a payment link or online payment service, card information is normally collected and processed directly by the relevant payment service provider.

Film8 does not normally receive or store your complete card number or card security code.

We may receive limited information from the payment provider, such as confirmation that a payment was successful, the transaction reference, amount, payment method and limited card-related information such as the card type or last digits where provided by the payment service.

Photography, video and audio

As part of our professional activities, we may create or process photographs, video recordings and audio recordings containing identifiable individuals.

Such material may therefore constitute personal data under applicable data protection law.

We process this material primarily for the production and delivery of the services requested by our clients and, where applicable, for legitimate business, archival or portfolio purposes in accordance with applicable law and contractual arrangements.

Website and technical information

When you use our website, we may receive technical information such as:

· IP address;

· browser and device information;

· operating system;

· approximate location derived from technical information;

· website usage information;

· referring pages;

· cookie identifiers; and

· similar technical data.

Some of this information may be collected through cookies or similar technologies.

3. How We Obtain Personal Data

We may obtain personal data:

· directly from you;

· from the organisation or client that you represent;

· from another person organising or participating in a production;

· from suppliers, production partners or subcontractors;

· through our website and contact forms;

· from payment service providers, banks or accounting systems;

· through publicly available professional sources where appropriate; or

· as part of photography, filming, recording or production activities.

4. Why We Process Personal Data and Our Legal Bases

We only process personal data where we have a lawful basis under applicable data protection law.

Enquiries and quotations

We process contact details, correspondence and project information to respond to enquiries, prepare quotations, discuss possible assignments and take steps before entering into an agreement.

Depending on the circumstances, our legal basis is taking steps at your request before entering into a contract or our legitimate interests in responding to business enquiries and developing our business.

Performing a contract

We process personal data where necessary to:

· manage bookings;

· organise productions;

· communicate with clients;

· provide photography, video and other services;

· arrange suppliers or crew;

· deliver completed work;

· handle revisions; and

· otherwise fulfil our contractual obligations.

Our legal basis is performance of a contract or steps necessary before entering into a contract, where applicable.

Invoicing and payments

We process identity, contact, billing and transaction information in order to:

· issue invoices;

· receive payments;

· send or administer payment links;

· reconcile transactions;

· follow up unpaid invoices;

· manage refunds where applicable; and

· maintain financial records.

Depending on the processing involved, our legal basis is performance of a contract, compliance with legal obligations, or our legitimate interests in administering and protecting our business.

Accounting, tax and legal requirements

We retain and process information where necessary to comply with accounting, tax and other legal obligations applicable to Film8.

Our legal basis is compliance with a legal obligation.

Photography, video and audio production

We may process images, video and audio containing identifiable individuals in order to perform commissioned productions and deliver content to our clients.

The applicable legal basis depends on the circumstances and may include performance of a contract, legitimate interests, consent where required, or another lawful basis available under applicable law.

Where Film8 acts solely on the documented instructions of a client in relation to particular personal data, the respective roles and responsibilities may instead be governed by the agreement between Film8 and that client.

Portfolio and promotion

We may display selected completed work in Film8's portfolio, website, showreel, social media, awards submissions or other promotional materials where this is permitted by our agreement with the client and applicable law.

We take into account confidentiality, agreed usage restrictions and the rights and interests of identifiable individuals.

Where consent is legally required for a particular use, we will rely on consent.

Business administration and legal claims

We may process relevant information to maintain business records, prevent fraud or misuse, establish or defend legal claims, manage insurance matters and protect Film8's legal and commercial interests.

The legal basis is generally our legitimate interests or compliance with a legal obligation, depending on the circumstances.

Website operation and analytics

We may process technical information necessary to provide, secure and maintain our website.

Essential processing may be based on our legitimate interests in operating a functional and secure website.

Where Swedish or EU law requires consent for non-essential cookies, analytics, advertising or similar technologies, we will request consent before using them.

5. Cookies

Our website may use cookies and similar technologies.

Some cookies are necessary for the website to function properly. Other cookies may be used for functionality, analytics or marketing purposes.

Where required by law, non-essential cookies will only be used after you have provided consent.

You can manage available cookie choices through the cookie settings provided on our website.

Because the cookies and third-party services used on our website may change over time, the cookie consent tool available on the website provides more specific and current information about the cookies in use.

6. Service Providers, Cloud Storage and File Transfers

Film8 uses digital services to operate its business and deliver projects efficiently.

Personal data, photographs, video, audio and project files may therefore be stored, processed or transferred using third-party service providers, including:

· cloud storage providers;

· file-transfer and online delivery platforms;

· backup services;

· email and communication providers;

· project management systems;

· editing and post-production services;

· accounting and invoicing systems; and

· other IT and production-related service providers.

Where these providers process personal data on Film8's behalf, we take reasonable steps to use appropriate providers and contractual or organisational safeguards as required by applicable data protection law.

Some providers may process information outside Sweden or outside the European Economic Area. Where required, Film8 uses an appropriate legal mechanism for international transfers of personal data.

Clients should avoid providing unnecessary sensitive personal information through project files or correspondence unless it is required for the project.

7. Artificial Intelligence and Automated Tools

Film8 may use artificial intelligence, machine-learning or automated software tools as part of its creative, administrative and production workflows.

Such tools may be used, for example, to:

· assist with image or video editing;

· remove noise, dust or unwanted technical artefacts;

· improve image or audio quality;

· assist with masking, selection, transcription or captioning;

· organise or search project material;

· assist with colour, retouching or post-production workflows;

· generate drafts, concepts or production materials;

· automate repetitive administrative tasks; or

· otherwise improve efficiency.

Where project files or personal data are processed using third-party AI or automated services, Film8 will take reasonable measures to select appropriate services and limit the information submitted to what is reasonably necessary for the relevant purpose.

Film8 does not intentionally use confidential client materials or identifiable client content to train publicly available AI models unless this has been specifically agreed with the client.

Where appropriate, Film8 may use AI tools operating locally or services configured so that submitted materials are not used for general model training.

The use of AI-assisted tools does not change Film8's responsibility for delivering the services agreed with the client.

If a project involves particularly confidential, embargoed or sensitive material and the client requires restrictions on the use of cloud or AI-based processing, the client should inform Film8 before the project begins so that appropriate arrangements can be agreed.

8. Photography, Video and Audio

As part of our professional activities, Film8 may create, receive, store and process photographs, video recordings and audio recordings containing identifiable individuals.

These files may be processed on Film8's own equipment or through professional third-party services used for storage, transfer, editing, post-production, backup or delivery.

Where appropriate, technical processing may include AI-assisted or automated tools as described in this Privacy Policy.

Film8 processes such material primarily for the production and delivery of services requested by our clients and, where applicable, for legitimate business, archival or portfolio purposes in accordance with applicable law and contractual arrangements.

9. Who We May Share Personal Data With

We do not sell personal data.

Where necessary for the purposes described in this Privacy Policy, we may share personal data with categories of recipients such as:

· payment service providers;

· banks and financial institutions;

· accounting and bookkeeping providers;

· invoicing and financial administration services;

· website hosting and IT providers;

· cloud storage and file-transfer providers;

· email and communication providers;

· production crew and subcontractors;

· photographers, videographers, editors and retouchers;

· production suppliers;

· studios, venues and rental companies;

· professional advisers, insurers or legal representatives; and

· public authorities where disclosure is required by law.

Service providers processing personal data on our behalf are required, where applicable, to process it in accordance with our instructions and applicable data protection requirements.

Some recipients may act as independent data controllers for their own processing, including certain banks, payment providers or authorities.

10. Payment Providers

When Film8 provides a payment link, the payment itself may be processed through a third-party payment service provider.

The payment provider may collect information directly from you, including payment card or banking information, and process that information under its own privacy policy and legal responsibilities.

Film8 normally receives only the information necessary to identify, confirm and administer the payment.

We recommend reviewing the privacy information presented by the relevant payment provider when completing a payment.

11. International Transfers

Some of the service providers used by Film8 may process or store personal data outside Sweden or outside the European Economic Area ("EEA").

Where personal data is transferred outside the EEA, we take appropriate measures where required by law, such as relying on an adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism.

You may contact us if you would like further information about safeguards relevant to a particular transfer.

12. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, taking into account contractual, operational, legal and accounting requirements.

For example:

· enquiry and correspondence information may be retained for as long as reasonably necessary to manage the enquiry, maintain business records or follow up a potential project;

· active client and project information may be retained during the business relationship and afterwards where necessary for administration, project history, rights management or legal claims;

· production files may be retained for a period appropriate to Film8's production and archival workflow but are not guaranteed to be stored indefinitely unless specifically agreed;

· accounting records, invoices and related transaction information are retained for the period required under Swedish accounting law; and

· information processed on the basis of consent will be reviewed when consent is withdrawn, subject to any other legal basis that requires or permits continued retention.

When personal data is no longer required, we will delete or anonymise it where reasonably practicable and where no legal requirement requires continued retention.

13. Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no internet transmission, digital storage system or electronic communication method can be guaranteed to be completely secure.

14. Your Rights

Subject to the conditions and exceptions in applicable data protection law, you may have the right to:

· request access to personal data we hold about you;

· request correction of inaccurate or incomplete information;

· request deletion of personal data;

· request restriction of processing;

· object to certain processing based on legitimate interests;

· receive certain personal data in a portable format;

· withdraw consent at any time where processing is based on consent; and

· lodge a complaint with a competent data protection authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Certain rights are not absolute. For example, we may be required to retain information contained in invoices or accounting records even if deletion is requested.

To exercise your rights, contact us at info@film8.se.

We may need to verify your identity before responding to a request.

15. Complaints

If you have concerns about how Film8 processes your personal data, you are welcome to contact us first at info@film8.se.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

16. Data Relating to Other People

If you provide Film8 with personal data relating to another person, for example an employee, production participant, client representative or supplier, you should ensure that you are authorised to provide that information and that the individual receives appropriate information about the processing where required.

For commissioned productions, the client remains responsible for its own obligations relating to personal data, participant notices, releases, permissions and other processing carried out for the client's purposes.

17. Third-Party Websites

Our website may contain links to external websites or services.

Film8 is not responsible for the privacy practices of independent third-party websites. We recommend reviewing their privacy information before providing personal data.

18. Changes to This Privacy Policy

We may update this Privacy Policy when our services, systems, service providers or legal requirements change.

The current version will be published on film8.se with the date of the latest update.

19. Contact