PARAMOUNT WORKPLACE PRIVACY NOTICE

Last Modified: December 29, 2022

Paramount is a leading global media and entertainment company that employs and engages workers worldwide. We collect information on individuals who are currently or formerly a part of our workforce — such as employees, officers and directors, interns, contractors, and other individuals who perform work for us, whether employed by us or not, and their dependents, beneficiaries, and emergency contacts. We also collect information on individuals who we have contracted to work for us or on our third parties’ productions. We refer to this broader group of individuals as ‘workers’ for ease.

Nothing in this notice is intended to create an employment relationship between Paramount and any non-employee and it does not create any contractual rights or obligations. While this notice is global in nature, our goal is to meet the requirements in each country where our workforce is located.

Third parties involved in a production may independently collect your personal information directly from you and may use it in accordance with their own privacy policies, with which you should familiarize yourself. Additional notices about our information practices and choices, such as for certain production activities, may apply to you, and will be made available to you depending on the context of your relationship with us. We invite you to read this notice together with any other applicable privacy notices.

This notice does not apply to information collected when you interact with our services as a consumer or visitor to Paramount products and services. To learn about our information practices when you are a consumer, you can review our privacy policies available on Paramount branded properties.

Trust is a cornerstone of our mission at Paramount. We are committed to gaining and maintaining your trust by following a core set of privacy principles: 

What Personal Information We Collect About You & Why We Use It

Paramount collects a variety of information about you, which we use to support our human resources and other legitimate business and commercial purposes, including establishing, maintaining, and terminating your employment or other service relationship. For purposes of this notice, we refer to this information as “personal information” or “personal data” (each as defined under applicable law). Below, we list categories of the personal information we may collect and the purposes for which we may use it.

In the course of employment, you may be required to provide us with information for other purposes such as sick pay and family rights (e.g. parental leave and pay) or in order to carry out your job role (such as for credentialing purposes).  If you do not provide information that you are required by law or contract to give us, you may lose benefits or we may decide not to employ you or end your contract, subject to applicable law or the terms of such contract.  If you have concerns about this in a particular context, you should speak to HR or your Paramount business contact.

We may also use your information for other legitimate business purposes, such as: assessing or executing mergers, acquisitions, divestitures, or business transfers, and managing potential and actual claims, disputes, disciplinary proceedings and other investigations. 

Where the Personal Information Comes From

We collect information about you in a variety of ways. Your information comes from you or your representatives, third parties (such as job references, business partners, professional organizations, staffing agencies, insurance companies), public internet sources (such as public social media profile), public records, service providers, your manager or other colleagues, affiliated or acquired companies, or our IT systems or through automated technologies on our electronic resources, surveillance/recording technologies (such as video surveillance, voicemail technologies and audio recording technologies with consent to the extent required by law), collective bargaining processes, and government or administrative agencies.

Retaining Your Personal Information

We retain your personal information for the time period necessary to achieve the purposes described in this notice, unless a longer retention period is required or permitted by applicable law, taking into account applicable statutes of limitation and our records retention requirements and policies. In general, we will keep your information for the duration of your employment and for a period afterwards.

Who We Share Your Personal Information With & Why

We may share your personal information within the Paramount family of companies.  We may share your information with the Paramount family of companies and Paramount personnel for the purposes described in this notice. This includes to your managers, HR and other administrators for employment, administrative and management purposes as mentioned herein.

We may share your personal information in connection with a corporate transaction.  As noted above, we may disclose or transfer your personal information as part of, or during negotiations for, any purchase, sale, lease, merger, or any other type of acquisition, disposal, or financing involving a Paramount entity or brand. Any sharing of personal information in connection with a corporate transaction will always be subject to a customary confidentiality agreement between the parties. 

We may share your personal information with service providers and contractors who perform services on our behalf or that are necessary for our business purposes.  We may share your personal information with service providers and contractors that provide us with professional advice, business support, perform services on our behalf or in connection with carrying out our business— such as payroll and benefit service providers; insurers; vendors; information technology providers;  professional advisors such as lawyers and accountants; occupational health and medical service providers; background check providers; and  in connection with productions, production companies and their staff; marketing partners and campaigns; and to provide you with appropriate credit.  These service providers and contractors are allowed to use your information to help in connection with your employment or service for us and not for any other purpose.

We sometimes share your personal information with business partners or other third parties. We may disclose your information to a business partner, such as a distribution partner of a new product or service with which you will be working, or other third parties, such as a professional organization for award recognition.

We may share your information with government or administrative agencies. We may disclose your information to government or administrative agencies as required or permitted by law. For example, we may provide your information to labor agencies to respond to unemployment or disability insurance claims.

In some cases, we may disclose your information to the public. We disclose information to the public in accordance with industry practice and applicable law. For example, credits for a production are publicly posted.

We may share your information with labor unions. We may disclose your information to a union or other similar organization that collectively represents workers if it represents you or with your consent.

We may share your information if we think we have to in order to comply with the law or to protect ourselves. For example, we will share your information when it is necessary for us to comply with applicable law or legal process, to respond to legal claims, or to protect our rights or the property or personal safety of our workers, users or the public. 

We may share your information for reasons not described in this notice. We will tell you before we do this if reasonably practicable. 

Protecting Your Information

We use reasonable security measures. We have adopted commercially reasonable technical, administrative, and physical security procedures to help protect your information from loss, misuse, unauthorized access, and alteration.  

Changes to this Notice

From time to time, we may change this notice to accommodate new technologies, industry practices, regulatory requirements, or for other purposes. We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. Notice may be by email to you at the last email address you provided us, by posting notice of such changes on our intranet, or by other means, consistent with applicable law. 

Contact Us 

If you have any questions about this notice, you may contact us by visiting the Privacy Rights Center, completing the relevant form and selecting ‘General Privacy Request’.

ADDITIONAL INFORMATION FOR WORKERS WHO ARE CALIFORNIA RESIDENTS

If you are a resident of California, the following additional information applies to you.

Personal Information Collected About California Residents

The following are categories of personal information that we may collect (and may have collected during the 12-month period prior to the Last Modified date of this notice) about you, your dependents or beneficiaries, or your emergency contacts, as well as examples of the types of personal information that may be collected (or may have been collected):

Identifiers, including:

  • Names and Aliases

  • Physical Address

  • Phone Number

  • E-Mail Address

  • Postal address

  • Signature

  • Social Security number

  • Driver’s License

  • State identification card

  • Passport number

Legally Protected Characteristics, including

  • Gender identity

  • Age

  • Race/Ethnicity/National Origin

  • Disability

  • Veteran status

  • Medical condition

  • Pregnancy / childbirth / breastfeeding and related medical conditions (as necessary to comply with applicable leave laws and accommodation)

  • Marital and familial status

  • Sexual Orientation

  • Religion

Commercial Information, including:

  • Business travel

  • Expense records

Financial Information

  • Bank account number

Health Information, including:

  • Vaccination status

  • Health screenings

  • On-the-job injuries

  • Leave-related information

Preferences, including:

  • Information such as your hobbies or membership in charitable or public organizations.

  • Information related to your preferences regarding work tools, travel, hours, or food choices.

Geolocation, including:

  • Information related to your location, including your IP address

Professional/Employment Related Information, including:

  • Professional experience and education (including university degrees, academic records, professional licenses, memberships and certifications, awards and achievements, and current and previous employment details

  • Union representation

  • Compensation

  • Benefits enrollment, including information regarding beneficiaries and dependents

  • Non-public educational information

Internet/ Electronic Activity, including:

  • IP Address

  • Information collected through tracking tools, such as browser cookies and web beacons

  • Publicly available social media activity

  • Passwords

  • Login credentials

  • Device attributes

Sensory/Audio/Visual Information, including:

  • Photos

  • Voicemails

  • Video conference recordings

  • Footage from security cameras

Information described under § 1798.80, including:

  • Insurance policy number

We may have collected data from the following sources:

We may use your personal information for the purposes described in “What Information We Collect About You & Why We Use It” section of this notice.

 

Personal Information Disclosed for a Business Purpose to Third Parties

The categories of personal information listed above may be disclosed for a business purpose to the categories of third parties listed above in the section titled “Who We Share Your Information With & Why”.

Retention

We retain your personal information as described in “Retaining Your Information” section of this notice.

Your Privacy Rights And How To Exercise Them

If you are a resident of California, you have certain rights regarding your personal information, which include: 

Sensitive Personal Information. We use sensitive personal information as necessary for the direct purposes relating to your employment or other service relationship, as applicable. We do not collect or process sensitive personal information for purposes of inferring characteristics about individuals.

Sale and Sharing of Personal Information. We do not sell your personal information nor disclose your personal information for cross-context behavioral advertising.

Deidentified Information. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

How to Exercise Your Rights. You or your authorized agent may submit a request to exercise any of the above rights by visiting our Privacy Rights Center and completing the form relevant to your request or by calling us at +1(888)300-2638. If you are currently a member of our workforce with access to Paramount corporate applications, you may have self-service tools available to you to exercise any of the above rights.

How We Will Verify Your Request. We may require additional information to verify your identity or to verify that your authorized agent has the authority to make the request on your behalf.  The verification process may differ depending on the nature and type of request that is submitted. If we cannot verify your identity or your authorized agent’s authority to a sufficient level of certainty to respond to your request, we will let you know promptly and explain why we cannot complete your request.

ADDITIONAL INFORMATION FOR WORKERS LOCATED OUTSIDE OF THE UNITED STATES

If you are located outside the US, including in the European Economic Area (EEA), United Kingdom (the UK), and Switzerland, the following additional information applies to you, except as otherwise noted in the INTERNATIONAL SUPPLEMENTS.   

Who is the Data Controller of Your Personal Data 

The entity set out in the International Supplement for your jurisdiction will be a data controller of your personal data (as defined under applicable law). In many cases our US and UK entities (including Paramount Inc.) will also be data controllers of your personal data, as well as other Paramount entities with whom your personal data is shared from time to time, and as set out in this notice.   

Legal Grounds for Processing Personal Data 

Under applicable data protection law, there are various grounds on which we can rely when processing your personal data.  In some contexts, more than one ground applies.  The grounds for processing are as follows: 

Where this test is not met, we do not rely on legitimate interest. This notice serves as a record of our legitimate interest assessment. 

Additional legal bases may apply in your jurisdiction.   

Processing Special Personal Data 

Where necessary in your jurisdiction, if we process special personal data about you (for example, storing your health records to assist us in ensuring that we provide you with a healthy and safe workplace, or processing personal data relating to diversity monitoring) we will also make sure that one or more of the grounds for processing special personal data applies. Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sexual orientation, sex life, trade union membership and genetic and biometric data are subject to special protection and considered by certain privacy law, including EU and UK privacy law, to be “special” or “sensitive” personal data. Data relating to criminal records or offences is treated in a similar way and, for purposes of this notice, included in this definition.  In some jurisdictions a different term may be used to describe data warranting special protection. However, the remainder of this notice uses the term “special” personal data for ease.   

 In outline, these additional grounds for processing include:   

Further Information on the Personal Data We Process and Our Purposes 

Examples of the personal data and the grounds on which we process your personal data are described in the table below. Although these examples represent a comprehensive description of the processing we engage in, this list is not exhaustive.  

Purpose Examples of personal data that may be processed Grounds for processing 
Recruitment 

Standard personal data related to your identity (e.g. your name, address, email address, ID information and documents, telephone numbers, place of birth, nationality, contact details, professional experience and education (including university degrees, academic records, professional licenses, memberships and certifications, awards and achievements, and current and previous employment details), financial information (including current salary information, provided permitted by applicable law), language skills, and any other personal data that you present us with as part of your application related to the fulfilment of the role. 

We may also collect and process information concerning your application and our assessment of it including any background checks we may make to verify information provided and any information connected with your right to work. This may include as necessary for your role (and subject to legislation in your jurisdiction) checks verifying your job history, qualifications and previous renumeration as well as credit, criminal record, social media and adverse media checks.  Such data processing will be subject to applicable local law.    

If necessary, we will also process information concerning your health, any disability and any proposed adjustments to the recruitment process or working arrangements. 

  • Contract 

  • Legal obligation 

  • Legitimate interest: recruitment and the fair promotion of our employees 

Your employment contract including entering it, performing it and changing it 

Information on your terms of employment including your hours and working patterns, your pay and benefits such as your participation in pension arrangements, any life and medical insurance, and any bonus or share schemes.  

 

  • Contract 

  • Legal obligation 

  • Legitimate interest: to have an accurate record of your employment contract for its performance and variation 

Contacting you and/or others on your behalf Your address, email address and phone number, emergency contact information and information on your next of kin. 
  • Contract 

  • Legitimate interest: the ability to contact you, and others on your behalf in an emergency 

Payroll & benefits administration Information on your bank account, pension contributions (if relevant) and on tax and social insurance, including tax contribution rate; your social insurance number or other government issued identifier; information on attendance, holiday and other leave and sickness absence; name and date of birth for compliance check purposes. 
  • Contract 

  • Legal obligation 

  • Legitimate interest: the ability to carry out payroll, general HR and business administration in an efficient manner, and to plan around your absence where necessary 

Financial planning and budgeting  Information such as your salary and (if applicable) bonus levels. 
  • Legitimate interest: the ability to carry out effective financial planning and budgeting for our business 

Supporting and managing your work and performance and any health concerns Information connected with your work, anything you do at work and your performance including records of documents and emails created by or relating to you and information on your use of our systems including computers, laptops or other devices (and any related monitoring will always be undertaken in a proportionate and as minimally invasive manner as possible); performance management information regarding you, including notes of meetings and appraisal records, and information you or our managers enter onto our training or appraisal platforms; information relating to your compliance with company policies; information concerning disciplinary allegations, investigations and processes and relating to grievances or complaints in which you are or may be directly or indirectly involved; information concerning your health, including medical or doctors’ notes, return to work plans, and medical and occupational health reports. 
  • Contract 

  • Legal obligation 

  • Legitimate interest: the ability to support our workforce and help career development, ensure compliance with our policies, and the investigation of grievances or disciplinary concerns where this becomes necessary. 

Meeting our duty of care and health and safety responsibilities in relation to Covid-19 (or similar health pandemic) 

We have a duty of care to ensure a safe place of work, as well as a duty of care to employees. For this reason, where reasonable and necessary, we may do one or more of the following in relation to Covid-19 (or similar health pandemic): 

  • request information about whether you have had symptoms of the virus, close contact with confirmed cases or travelled to high risk areas, whether you would be considered clinically vulnerable or clinically extremely vulnerable, and whether you have been vaccinated; 

  • conduct temperature checks before allowing entrance to our premises; and 

  • ask you to be PCR or Antibody tested before allowing entrance to our premises.  

Such data processing will be subject to applicable local law. 

  • Consent

  • Legal obligation 

  • Legitimate interest: to ensure a safe place of work and the safety of our employees 

Changing or ending your working arrangements Information connected with anything that may affect your continuing employment or the terms on which you work including any proposal to promote you, to change your pay or benefits, to change your working arrangements or to end your employment. 
  • Contract 

  • Legitimate interest: the ability to change or end your working arrangements 

Physical and worksite security 

CCTV images; in limited cases, output of facial recognition technology or fingerprint identification for entry; records of use of swipe and similar entry cards.  

In exceptional circumstances, we may monitor covertly (i.e., without notice) for other purposes.  This will normally only be in circumstances where we reasonably believe covert monitoring is necessary for the detection of criminal or other sufficiently serious activity and which is consistent with the monitoring described in any existing privacy impact assessment. In the event covert monitoring beyond the scope of our privacy impact assessment is required, we will normally conduct an additional assessment. In addition, prior authorisation will normally be sought from the Privacy Office. 

Such monitoring will be subject to applicable local law. 

  • Legal obligation 

  • Legitimate interest: the ability to keep our locations secure, and provide a safe environment for our personnel; pursuant to any potential disciplinary actions or grievances, or any potential legal and/or insurance claims 

 

Monitoring use of our IT systems 

We may monitor and log access to our IT systems including computers, phones and other devices and passwords.  We may also monitor, access, examine, capture or otherwise intercept (by human or automated means where permitted by applicable law) communications or personal data transmitted through our systems. This may take place for several reasons, including to: 

  • maintain the security of our systems;  

  • identify and deter system security threats;  

  • protect personal data; 

  • locate deleted messages or messages lost due to system failure; 

  • manage and redistribute the work on an absent employee as needed. 

In exceptional circumstances, we may monitor covertly (i.e., without notice) for other purposes.  This will normally only be in circumstances where we reasonably believe covert monitoring is necessary for the detection of criminal or other sufficiently serious activity and which is consistent with the monitoring described in any existing privacy impact assessment. In the event covert monitoring beyond the scope of our privacy impact assessment is required, we will normally conduct an additional assessment. In addition, prior authorization will normally be sought from the Privacy Office. 

Such monitoring will be subject to applicable local law. 

Legitimate interest: to maintain the security and integrity of our systems, enable work continuity, and to monitor compliance with our policies 

Assisting you with remote work, and improving efficiency of IT, business systems and device use 

 

This includes records of your use of IT and business systems and company devices; live and/or recorded video or photographic images of you or your voice; details about participations in and use of video conferencing tools.  

We will where necessary and as set out in this notice also contract with third parties so you can use third party applications on your company devices which may assist with your work (for example an application allowing ‘one-click’ dial in to conference calls or applications for video conferencing). Such applications will process your personal data. The third-party privacy notices will make clear precisely what information will be collected.  

We may be provided with information on the usage of such applications, for example for the purpose of troubleshooting or assessing overall usage and whether to continue to provide them. For example, we may collect information on the number of minutes and amount of personal data used on company mobile phones to ensure employees are on the most cost-effective tariff for their usage. 

We may also process your personal address and/or personal contact information to facilitate delivery of work-related items to your residence. 

Legitimate interest: to facilitate effective home and remote working; to ensure and improve efficiency of IT, business systems and device use  
Providing references in connection with your finding new employment Information on your working for us and on your performance.  
  • Consent 

  • Legitimate interest: to provide references where requested.  

Monitoring of diversity and equal opportunities 

 

Information on your nationality, racial and ethnic origin, gender, sexual orientation, religion, disability and age as part of diversity monitoring initiatives, including by way of employee engagement surveys. Such personal data will, where possible, be aggregated and used for equality of opportunity monitoring purposes. Please note we may share aggregated and anonymised diversity statistics with regulators if formally required / requested.  

Such monitoring will be subject to applicable local law. 

More information would typically be provided at the start of the diversity monitoring exercise in question.  

  • Legal obligation 

  • Legitimate interest: to promote diversity and inclusion 

 

Monitoring and investigating suspicions of misconduct, compliance with policies and rules – both generally and specifically – but always in a proportionate and as minimally invasive manner as possible 

We expect our employees and workers to comply with our policies and rules and may monitor our systems to check compliance (e.g., rules on accessing pornography at work).  We will where necessary and as set out in this notice check system and other personal data to investigate those concerns (e.g. log-in records, records of usage and emails and documents, CCTV images).  In appropriate cases, if we have suspicions of serious wrongdoing, we may make targeted records (e.g., video or sound) in connection with an investigation.  

In exceptional circumstances, we may monitor covertly (i.e., without notice) for other purposes.  This will normally only be in circumstances where we reasonably believe covert monitoring is necessary for the detection of criminal or other sufficiently serious activity and which is consistent with the monitoring described in any existing privacy impact assessment. In the event covert monitoring beyond the scope of our privacy impact assessment is required, we will normally conduct an additional assessment. In addition, prior authorisation will normally be sought from the Privacy Office. 

Such monitoring will be subject to applicable local law. 

Legitimate interest: to ensure that our employees comply with our policies and rules 
Disputes and legal proceedings Any information relevant or potentially relevant to a potential or actual dispute or legal proceeding affecting us  
  • Legal obligation 

  • Legitimate interest: the ability to respond to and defend against legal claims 

Legal, regulatory and compliance purposes Information we process for legal or regulatory purposes (including upholding your data rights under privacy legislation). 
  • Legal obligation 

  • Legitimate interest: the ability to comply with relevant law and regulatory guidance 

Trade union check off arrangements and Works Council administration 

Where applicable, details of trade union membership and deductions of contributions made at source; information relating to Works Council (or similar body) participation, including any communication you send to us if acting for the Works Council (if applicable). 

 

  • Contract 

  • Legal Obligation  

Day to day business operations including marketing and customer/client relations and travel on our behalf Information relating to the work you do for us, your role and contact details including relations with current or potential customers or clients.  This may include a picture of you for internal or external use; information regarding your travel arrangements and location.  Legitimate interests: to allow the effective operation of day to day business, marketing and investor relations and travel 
Maintaining appropriate business records during and after your employment  Information relating to your work, anything you do at work and your performance relevant to such records.   
  • Contract 

  • Legal obligation 

  • Legitimate interest: to maintain appropriate business records during and after your employment 

 

Other processing activities that apply to cast, crew, production, talent and other production service providers 
Purpose Examples of personal data that may be processed Grounds for processing 
Enabling the creation, sale and distribution / broadcast of a production you are working on including, but not limited to, marketing purposes 

Information connected with your role including (if applicable) records of documents and emails created by or relating to you and information on your use of our systems including computers, laptops or other device.   

If you have an on-screen or voiceover role this will likely involve processing images / video / audio of you. 

  • Contract 

  • Legal obligation 

  • Legitimate interest: allowing the creation, sale and distribution / broadcast of a production  

Sharing Your Personal Data Outside the Group Companies 

We will only disclose your personal data outside our group companies if disclosure is consistent with a ground for processing on which we rely and doing so is lawful and fair to you.   

We will disclose your personal data if it is necessary for our legitimate interests as an organization or the interests of a third party (but we will not do this if these interests are over-ridden by your interests and rights in particular to privacy).  We may will also disclose your personal data if you consent, where we are required to do so by law and in connection with criminal or regulatory investigations.   

Access to Your Personal Data and Other Rights 

You may have certain rights regarding your personal data, which may include: 

To make a request, complete the relevant form on our Privacy Rights Center. If you are currently a member of our workforce with access to Paramount corporate applications, you may have the ability to use self-service tools in those applications to exercise some of your privacy rights when available in your jurisdiction. The regulator in your jurisdiction may have produced forms to assist you in making a request – where this is the case you can attach these to your request.   We may require you to provide information from which we can confirm your identity. Please note that, while we will carefully assess every request we receive, your rights may differ according to your place of residence and we may not always be required to comply. If we do not comply with your request, we will explain why. 

If you have any unresolved privacy concerns that we have not addressed satisfactorily after contacting us, you may have the right to contact your local data protection authority.  

Journalistic Exemption (in relation to cast, crew, production, and talent) 

Please note that as a result of the nature of the work that you do for us (i.e. working on our or third parties’ productions), on some occasions Paramount and our group companies or third parties will rely on exemptions to data protection rules in relation to journalistic freedom, the right to artistic expression or more generally, the right to freedom of expression (as mentioned in Article 85 of the General Data Protection Regulation and in various jurisdictions’ data protection rules). This can mean that certain parts of the GDPR (including data subjects’ rights) do not apply.  We will rely on similar provisions where applicable in other jurisdictions.  

International Transfers 

In connection with our business and for employment, administrative, management and legal purposes, we will where necessary transfer your personal data across country borders in accordance with applicable law. Such transfers include to members of our group of companies and third-party service providers, including in the US and in other jurisdictions in which we are established. For example, some of the systems that we use in connection with our business and your employment (such as our HR Information system) are hosted in the US.  We will ensure that any transfer is lawful, including putting in place legal safeguards and ensuring that there are appropriate security arrangements. More specifically, (i) for transfers outside the EEA / UK, this includes entering into the relevant official European or UK Standard Contractual Clauses for transfers to third countries with Paramount group entities and third parties located outside the EEA / UK and, where necessary, implementing further measures to ensure the information is subject to equivalent local protection; (ii) for transfers outside of Argentina, we will enter into the applicable official Argentina Model Clauses with Paramount group entities and third parties located outside Argentina when necessary; and (iii) for transfers outside of certain other jurisdictions, where required by applicable law, we apply the substantive requirements of the official European or UK Standard Contractual Clauses.  

If you want further details of any of these safeguards or agreements, please contact us at the email address listed in the “Contact Us” section.  

 

Argentina

If you are employed, engaged, or reside in Argentina, the following additional information applies.

The local regulator is the Public Information Access Agency (A.A.I.P.)

The local Data Controllers are the entities listed below and their affiliates:Address:
MTV Networks Argentina S.R.L.Matheu 1558, Buenos Aires, C1249AAH, Argentina
Televisión Federal S.A.Prilidiano Pueyrredón 2989 Piso 2, Martinez, Buenos Aires, B1640ILA, Argentina

In addition:

In accordance with Act No. 25,326 (Personal Data law) and Act No. 20,744 (Labor Contract law) we can transfer your personal data without your consent in these specified cases:

Australia

If you are employed, engaged, or reside in Australia or are in Australia when your personal data is collected by us, or, regardless of your location, and if your personal data is collected by any of the local Data Controllers listed below, the following additional information applies.

The local regulator is the Office of the Australian Information Commissioner (OAIC).

The local Data Controllers are the entities listed below and their affiliates:Address:
CBS International Television Australia Pty Limited1-31 Saunders Street, Pyrmont, New South Wales 2009, Australia
Network Ten Pty Ltd.
Nickelodeon Australia Management Pty Ltd.1 Saunders St, Pyrmont, New South Wales 2009, Australia
Paramount Home Entertainment (Australasia) Pty LimitedLevel 1, 65 Pirrama Road, Pyrmont, New South Wales 2009, Australia
Paramount Pictures Australia Pty.
Simon & Schuster (Australia) Pty LimitedSuite 2 14-16 Suakin Street, Pymble, New South Wales 02073 Australia
VIMN Australia Pty Ltd1 Saunders St, Pyrmont, New South Wales 2009, Australia

Workplace surveillance

Paramount gives notice of the following surveillance which will be carried out in the workplace:

Kind of surveillance to be carried out:

Monitoring use of our IT systems - see “ADDITIONAL INFORMATION FOR WORKERS LOCATED OUTSIDE OF THE UNITED STATES” for more detail.

“Monitoring and investigating suspicions of misconduct, compliance with policies and rules – both generally and specifically – but always in a proportionate and as minimally invasive manner as possible.”

How the surveillance will be carried out:More information is set out in “ADDITIONAL INFORMATION FOR WORKERS LOCATED OUTSIDE OF THE UNITED STATES”.
When the surveillance will start:This will normally be an ongoing basis, but we may also investigate specific concerns.
Who will regularly or ordinarily be the subject of the surveillance:Our employees, workers, contractors, freelancers, and talent.

Workers in the Australian Capital Territory may consult with Paramount about the conduct of surveillance.

Special personal data

Not all of the grounds for processing special personal data described in the section of this Notice entitled “PROCESSING SPECIAL PERSONAL DATA” apply to your special personal data. As such, we will only process your special personal data as permitted by law, for example where we have received your consent to do so or the collection is required by law.

Journalistic exemption

The section “Journalistic exemption” does not apply.

Complaints

If we receive a complaint from you in relation to our processing of your personal data, we will investigate the complaint and determine whether a breach of this Notice or the Privacy Act has occurred and what action, if any, to take. Paramount will take any privacy complaint seriously and will aim to resolve any such complaint in a timely and efficient manner, and our target response time is one month unless your query is complex. Paramount expects our procedures will deal fairly and promptly with your complaint. However, if you remain dissatisfied, you can also make a formal complaint with the OAIC:

Office of the Australian Information Commissioner (OAIC)
1300 363 992
Director of Compliance
Office of the Australian
Information Commissioner
GPO Box 5218
Sydney NSW 2001

www.oaic.gov.au

Complaints to the OAIC must be made in writing.

Belgium

If you are employed, engaged, or reside in Belgium, the following additional information applies.

The local regulator is the Data Protection Authority (in Dutch: ‘Gegevensbeschermingsautoriteit’ / in French: ‘l'Autorité de protection des données’).

The local Data Controller is the entity listed below and its affiliates:Address:
VIMN Belgium BvbAHavenlaan 86C bus 204, 1000 Brussels

In addition:

Brazil

If you are employed, engaged, or reside in Brazil, the following additional information applies.

The local regulator is the National Data Protection Authority (in Portuguese: Autoridade Nacional de Proteção de Dados – ANPD), as created by the Law No. 13,709/2018 (LGPD).

The local Data Controllers are the entities listed below and their affiliates:Address:
Paramount Pictures Brasil Distribuidora de Filmes LtdaAv. Rio Branco 311, 11th Floor, Centro, Rio de Janeiro, 20046 900
Porta dos Fundos Produtora e Distribuidora Audiovisual S.A.Rua Assunção, No. 49, Botafogo, Rio de Janeiro, CEP22251-030
Viacom Networks Brasil Programacao Televisiva E Publicidade Ltda.Rua Dr. Renato Paes de Barros, 1017, sala 132, Itaim Bibi, Sao Paulo, CEP 04530-001

In addition:

Canada

If you are employed, engaged, or reside in Canada, the following additional information applies.

The statutory regulator in British Columbia is the Information and Privacy Commissioner.

The local Data Controllers are the entities listed below and their affiliates:Address:
CBS Broadcast International of Canada Limited2 Bloor Street West, Ste. 2601, Toronto, Ontario, M4W 3E2
CBS Canada Holdings Co.Suite 300, 166 King Street East, Toronto, Ontario, M5A 1J3
MTV Networks Canada, ULC26 Duncan Street, Suite 400, Toronto, Ontario, M5V2B9
Paramount Pictures Entertainment Canada ULC26 Duncan Street, Suite 400, Toronto, Ontario, M5V 2B9

In addition:

If you send us a request (to the email address provided in this Notice) to access or correct your personal data, we will contact you within 30 days (although it may take us longer to fully respond to your request).

China

If you are employed, engaged, or reside in the People’s Republic of China, the following additional information applies.

The local regulators are the Cyberspace Administration of China (CAC), Industry and Information Technology Department Bureau and Public Security Bureau.

The local Data Controllers are the entities listed below and their affiliates:Address:
Beijing Yalian Online Network Technology Co. Ltd.Shang 8 Advertising Center E-101 A, 3A Xiadian, Chaoyang District, Beijing
Paramount Movie and TV Program Planning (Beijing) Co., Ltd.02,03,05,06,07 within 401 located at No. 77 Jianguo Road, Chaoyang District, Beijing
Viacom Asia (Beijing) Advertising and Media Co. Ltd.Shang 8 Advertising Center E-101 A, 3A Xiadian, Chaoyang District, Beijing

In addition:

Colombia

If you are employed, engaged, or reside in Colombia, the following additional information applies.

The statutory regulator in Colombia is the Superintendencia de Industria y Comercio (SIC).

The local Data Controllers are the entities listed below and their affiliates:Address:
TIS Productions Colombia S.A.SAK 50 No. 17 - 77, Bogotá, Colombia

Czech Republic

If you are employed, engaged, or reside in the Czech Republic, the following additional information applies.

The local regulator is Úřad pro ochranu osobních údajů.

The local Data Controller is the entity listed below and its affiliates:Address:
Paramount Networks International Czech s.r.o.Perlová 371/5, Prague 1, Prague, 110 00

In addition:

The following examples of the personal data that we process and our grounds for processing them differ from those provided in the Notice above:

(a) pregnancy;

(b) family and property situation;

(c) sexual orientation;

(d) national/ethnic origin;

(e) trade union organization membership;

(f) membership of political parties or movements;

(g) religion or confession; or

(h) criminal records.

However, with the exception of (c), (d), (e), (f) and (g), we may process the above in rare cases where there is an objective reason for doing so relating to your role (for example if you are pregnant in relation to your parental leave or if you are responsible for large amounts of money, information about your criminal record may be requested). We may also process such personal data in cases where we are legally required to do so.

Denmark

If you are employed, engaged, or reside in Denmark, the following additional information applies.

The local regulator is the Datatilsynet (the Danish Data Protection Agency).

https://www.datatilsynet.dk/

The local Data Controller is the entity listed below and its affiliates:Address:
VIMN Nordic AB, filial af VIMN Nordic ABFlæsketorvet 26-28, 1, DK-1711 København V

In addition:

Finland

If you are employed, engaged, or reside in Finland, the following additional information applies.

The local regulator is Tietosuojavaltuutettu (the Data Protection Ombudsman) (https://tietosuoja.fi/en/home)

The local Data Controller is the entity listed below and its affiliates:Address:
VIMN Nordic AB, filial i FinlandMannerheiminaukio 1, 00100, Helsinki, Uusimaa

In addition:

France

If you are employed, engaged, or reside in France, the following additional information applies.

The local regulator is the Commission Nationale de l’Informatique et des Libertés (CNIL).

The Data Controllers are the entities listed below and their affiliates:Address:
Game One SAS 345922 rue Jacques Dulud, 92521 Neuilly Sur Seine
MTV Networks SARL 3454
Paramount Pictures France SARL20-24, rue Jacques Ibert 92300 Levallois-Perret
Worldwide Enterprises (France) SARL13, rue du 4 Septembre, 75002 Paris

In addition:

Germany

If you are employed, engaged, or reside in Germany, the following additional information applies.

The local regulator is:

Baden-WuerttembergDer Landesbeauftragte für den Datenschutz in Baden-Württemberghttps://www.baden-wuerttemberg.datenschutz.de
BavariaBayerisches Landesamt für Datenschutzaufsichthttps://www.datenschutz-bayern.de
BerlinBerliner Beauftragter für Datenschutz und Informationsfreiheithttps://www.datenschutz-berlin.de
BrandenburgDie Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsichthttps://www.lda.brandenburg.de/lda/de/
BremenDie Landesbeauftragte für Datenschutz und Informationsfreiheithttps://www.datenschutz.bremen.de
HamburgDer Hamburgische Beauftragte für Datenschutz und Informationsfreiheithttp://www.datenschutz-hamburg.de
HessenDer Hessische Datenschutzbeauftragtehttp://www.datenschutz.hessen.de
NiedersachsenDie Landesbeauftragte für den Datenschutz Niedersachsenhttps://www.lfd.niedersachsen.de
Mecklenburg-VorpommernDer Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommernhttps://www.datenschutz-mv.de
Nordrhein-WestfalenLandesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalenhttps://www.ldi.nrw.de
Rheinland-PfalzDer Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalzhttps://www.datenschutz.rlp.de
SaarlandLandesbeauftragte für Datenschutz und Informationsfreiheithttp://www.datenschutz.saarland.de
SaxonyDer Sächsische Datenschutzbeauftragtehttps://www.saechsdsb.de
Saxony-AnhaltLandesbeauftragter für den Datenschutz Sachsen-Anhalthttps://www.sachsen.de/datenschutz.html
Schleswig-HolsteinUnabhängiges Landeszentrum für Datenschutz Schleswig-Holsteinhttps://www.datenschutzzentrum.de
ThüringenThüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheithttp://www.tlfdi.de
The local Data Controllers are the entities listed below and their affiliates:Address:
CBS International GmbHMunchen Geschaftsanschritt, Prinzregentenstrabe 72, 81675 Munich
Paramount Pictures Germany GmbHBetastrasse 10c, D-85774, Unterföhring
Pluto TV Europe GmbhBoxhagener Strasse 80, 10245, Berlin
VIMN Germany GmbH

In addition:

In Germany, personal data will be processed where necessary under Section 26 of the Federal Data Protection Act ("Bundesdatenschutzgesetz") and on the following legal bases:

Hungary

If you are employed, engaged, or reside in Hungary, the following additional information applies.

The local regulator is the National Data Protection and Freedom of Information Authority (http://www.naih.hu/).

The local Data Controller is the entity listed below and its affiliates:Address:
Viacom International Hungary Kft.Bocskai road 134-146, Dorottya udvar 1113 Budapest

In addition:

The following examples of the personal data that we process and grounds for processing differ than as provided in this Notice:

Ireland

If you are employed, engaged, or reside in Ireland, the following additional information applies.

The local regulator is the Data Protection Commission (www.dataprotection.ie).

The local Data Controller is the entity listed below and its affiliates:Address:
Paramount Pictures Services UK2nd Floor Morrison Chambers, 32 Nassau Street, Dublin

In addition:

Italy

If you are employed, engaged, or reside in Italy, the following additional information applies.

The local regulator is Autorità Garante della Privacy.

The local Data Controllers are the entities listed below and their affiliates:Address:
CBS International Television Italia S.r.l.Via Vittorio Veneto N.54/B c/o Spaces Veneto - centre n. 5076
Paramount Home Entertainment (Italy) S.r.l.Via Matteo Bandello N.5, 20123, Milan
Viacom International Media Networks Italia SRLCorso Europa N.5, 20122, Milan

In addition:

Italian data protection legislation does not include any specific provisions on processing personal data for equality and diversity purposes. Therefore, we will generally only process personal data, including special personal data, for these purposes where we have a legal obligation – e.g. in relation to gender and disability reporting – we have your consent; or we do so on an anonymous basis.

Mexico

If you are employed, engaged, or reside in Mexico, the following additional information applies.

The statutory regulator is the National Institute for Transparency, Access to Information and Personal Data Protection (‘INAI’).

The local Data Controllers are the entities listed below and their affiliates:Address:
MTV Networks de Mexico, S. de R.L. de C.V.Paseo de los Tamarindos No. 400A, Seccion Poniente, Piso 29, Colonia Bosques de las Lomas, Mexico, D.F., 05120
Paramount Pictures Mexico S. de R.L. de C.V.Av. Paseo de las palmas No. 425, piso 9, Torre Optima 3, Col. Lomas de Chapultepec, Mexico, D.F., 11000
TIS Productions México, S. de R.L. de C.V.,Alfonso Reyes 100, Ciudad De Mexico, C.P. 06170, Mexico

In addition:

In terms of the Federal Law on the Protection of Personal Data in the Possession of Private Parties and its Regulations, note that in the event we refuse to respond to an request regarding your personal data rights, or in the case that you disagree with our response, you may file before the National Institute of Transparency, Access to Information and Personal Data Protection the corresponding Application for the Protection of Rights within the deadlines and terms established by chapter VII and other related chapters, as well as the ones relevant from the Regulations to the Law.

Netherlands

If you are employed, engaged, or reside in the Netherlands, the following additional information applies.

The local regulator is Autoriteit Persoonsgegevens. Mailbox 93374, 2509 AJ THE HAGUE. Phone: (+31) – (9)70 88 85 00.

The local Data Controllers are the entities listed below and their affiliates:Address:
CBS International (Netherlands) B.V.Gerrit van der Veenstraat 11, 1077 DM, Amsterdam
Paramount International (Netherlands) B.V.Atlas Arena, Asia Building, 2nd Floor, Hoogoorddreef 5 1101 BA, Amsterdam
VIMN Netherlands B.V.NDSM-plein 6, 1033 WB, Amsterdam

In addition:

Poland

If you are employed, engaged, or reside in Poland, the following additional information applies.

The local regulator is the Prezes Urzędu Ochrony Danych Osobowych (The President of the Personal Data Protection Office), Stawki 2, 00-193 Warsaw, Poland.

The local Data Controllers are the entities listed below and their affiliates:Address:
VIMN Poland Sp. z o.o.ul. Mokotowska 19, 00-560 Warsaw
Paramount Poland sp. z. o.o.

In addition:

Portugal

If you are employed, engaged, or reside in Portugal, the following additional information applies.

The local regulator is Comissão Nacional de Protecção de Dados (CNPD).

The local Data Controller is the entity listed below and its affiliates:Address:
MTV Networks Unipessoal LdaAvenida da Liberdade, 245, 4.ºA, 1250-143, Lisbon

In addition:

Russia

If you are employed, engaged, or reside in Russia, the following additional information applies.

The local regulator is the Russian Federal Service for Supervision of Communications, Information Technology, and Mass Media (Roskomnadzor).

The local Data Controllers are the entities listed below and their affiliates:Address:
OOO MTV Networks Entertainment VostokVarshavskoe shosse 9, Building 1B, 117105, Moscow
OOO MTV Networks Music Vostok
OOO MTV Networks Nick Vostok
OOO MTV Networks Vostok
OOO VIMN Holdings Vostok
OOO VIMN Media Vostok

Legal grounds for processing personal data

In most scenarios described in the “FURTHER INFORMATION ON THE PERSONAL DATA WE PROCESS AND OUR PURPOSES” section of this Notice we will request your explicit consent to the processing of your personal data for the respective purposes. Moreover, where we are required to do so by Russian law, we will request your consent. Grounds for the data processing described in said section of this Notice apply together with your consent and will further apply in case you revoke your consent.

Further information on the data we process and our purposes

Subject to certain statutory exceptions, we will not process personal data relating to your criminal convictions. In general, we will process your special personal data and biometric data only to an extent we need to do so as per Russian law and subject to your consent.

Who gets to see your data?

We will keep records of the third parties who may access your personal data or otherwise may be involved in its processing. If you want to learn more about such third parties, please contact us at EmployeePrivacy@viacomcbs.com.

Retaining your personal data

As per Russian tax, accounting, and archive laws, we are required to retain certain documents containing your personal data. For example, we may need to retain your personnel files and employment contracts for up to 50 years. We put in place all appropriate safeguards to ensure that such documents are retained in a secure manner and destroyed upon expiration of the prescribed statutory terms.

International transfers

Although we may transfer your personal data outside Russia, we will in any case make sure that we comply with applicable local requirements on the initial processing of your personal data in Russia (e.g. data localization requirements).

How we process your personal data

In most cases, we process your personal data with the use of automated means, however in some cases we also need to do so without such means (manually).

We may process your personal data by way of any operations to the extent required to fulfil our stated processing purposes. In particular, such operations may include collection, recording, systematization, accumulation, storage, specification (update, modification), retrieval, use, transfer (provision, access, dissemination), depersonalization, blockage, deletion, or destruction of personal data.

Singapore

If you are employed, engaged, or reside in Singapore, the following additional information applies.

The local regulator is the Personal Data Protection Commission (“the PDPC”).

The local Data Controllers are the entities listed below and their affiliates:Address:
MTV Asia151 Lorong Chuan #03-08 New Tech Park (Lobby H) Singapore 556741
Nickelodeon Asia Holdings Pte Ltd

The Personal Data Protection Act 2012 establishes a general data protection law in Singapore which governs the collection, use and disclosure of individuals’ personal data by organizations. “Organizations” include any company formed or recognized in Singapore or having an office or a place of business in Singapore.

South Africa

If you are employed, engaged, or reside in South Africa, the following additional information applies.

The local regulator is the Information Regulator.

The local Data Controllers are the entities listed below and their affiliates:Address:
CBS News Inc.

18 Bompas Road, Dunkeld West,

Johannesburg 2196

Viacom International Media Networks Africa (Pty) Ltd2 Bruton Road, Bryanston, Sandton, Johannesburg, 2191

Your rights under the laws of South Africa

If you are a resident of South Africa, you have certain additional rights under South African law:

In addition:

When processing personal data and special personal data for diversity and inclusion purposes, we will typically rely on the legal obligations imposed on us under the Employment Equity Act 55 of 1998 in respect of employment equity planning. Where, however, certain personal data is not legally required (for example sexual orientation or LGBTQ status), this personal data will be processed on the basis of specific and explicit consent.

Spain

If you are employed, engaged, or reside in Spain, the following additional information applies.

The local regulator is the Spanish Data Protection Authority (www.aepd.es).

The local Data Controllers are the entities listed below and their affiliates:Address:
Paramount Spain S.L.U.Albacete 3, 1a Planta, 28027, Madrid
Viacom International Media Networks España, S.L.

Paseo de Recoletos 33, 1a Planta, 28004

Madrid

In addition:

We will generally not process health data and will only receive limited information – i.e. whether an employee is fit for the job from a health perspective. Notwithstanding this, as stated in the Notice, personal data may be collected as necessary to maintain the safety and health of employees in relation to COVID 19 or other pandemics..

Sweden

If you are employed, engaged, or reside in Sweden, the following additional information applies.

The local regulator is Integritetsskyddsmyndigheten.

The local Data Controllers are the entities listed below and their affiliates:Address:
Paramount Sweden ABLumaparksvagen 7, 12031, Stockholm
VIMN Nordic ABKungsbro Strand 31, 112 26, Stockholm

In addition:

We will not process special personal data for diversity and equal opportunities purposes or will do so on an anonymous basis only.


Switzerland

If you are employed, engaged, or reside in Switzerland, the following additional information applies.

The local regulator is the Federal Data Protection and Information Commissioner.

The local Data Controller is the entity listed below and its affiliates:Address:
CBS Interactive GmbHBruder-Klausen-Weg 3, 6072 Sachsein

In addition:

United Kingdom

If you are employed, engaged, or reside in the United Kingdom, the following additional information applies.

The local regulator is the Information Commissioner’s Office (ICO).

The local Data Controllers are the entities listed below and their affiliates:Address:
Channel 5 Broadcasting Limited17-29 Hawley Crescent, London, NW1 8TT
CBS Broadcast Services LimitedCannon Place, 78 Cannon Street, London EC4N 6AF
CBS Interactive LimitedThe Warehouse, The Bower 207-211 Old Street, London EC1V 9NR
CBS News UK branch (a division of CBS Broadcasting Inc.)Broadcast Centre Europe, First Floor, Building 10, Chiswick Park, 556 Chiswick High Road, London W4 5XS
Last FM LimitedThe Warehouse, The Bower 207-211 Old Street, London EC1V 9NR
Nickelodeon U.K. Limited17-29 Hawley Crescent, London, NW1 8TT
Paramount Pictures International LimitedBuilding 5 566 Chiswick High Road, W4 5YF
Paramount Pictures UK
Simon & Schuster (UK) LimitedCannon Place, 78 Cannon Street, London EC4N 6AF
The Paramount UK Partner17-29 Hawley Crescent, London, NW1 8TT
Viacom Camden Lock Limited
Viacom Global Limited
Viacom International Media Networks U.K. Limited
VIMN CP Services (UK) Limited

In addition:

  1. For the purposes of this Notice, “Paramount”, “we”, “us” and “our” refer to (i) Paramount Inc., (ii) for U.S. based employees, the Paramount subsidiary that employs you or to which you provide services, and/or, (iii) for employees based outside the U.S., the local Data Controller(s) set out in the International Supplements, and other group companies with whom the data is shared (as outlined in this Notice).