Privacy Policy

Last updated: 2026

1. General Information

This Privacy Policy explains how REBEL EYE STORY, MB (hereinafter – “REBEL EYE STORY”, “we”, “us”, or “Data Controller”) processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Lithuanian legislation.

By using our website rebeleyestory.com, contacting us, purchasing services, participating in castings, searches, recruitment, or communicating with us via any channel, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with this Privacy Policy, please do not provide your personal data or use our services.

2. Data Controller

REBEL EYE STORY, MB
Registered address: Vaižganto g. 6-31, Lithuania
Email: hello@rebeleyestory.com

3. Definitions

• Personal Data – any information relating to an identified or identifiable natural person.

• Data Subject – a natural person whose personal data is processed.

• Processing – any operation performed on personal data (collection, storage, use, disclosure, deletion, etc.).

4. Categories of Data Subjects

We process personal data of:

• Clients and potential clients;

• Service providers and partners (natural persons);

• Website visitors;

• Social media followers and contacts;

• Individuals participating in castings, searches, or creative selections;

• Job applicants;

• Any person who contacts us voluntarily.

5. Categories of Personal Data

Depending on the purpose, we may process:

• Identification data (name, surname);

• Contact data (email address, phone number, address);

• Contractual and payment data;

• Communication content;

• CVs, portfolios, photos, videos (with consent);

• Technical data (IP address, browser type – if applicable).

We do not knowingly process special category data unless explicitly required and consented.

6. Purposes and Legal Bases of Processing

PurposeLegal Basis (GDPR Art. 6)Contract conclusion and performanceArt. 6(1)(b)Communication and inquiriesArt. 6(1)(b) or Art. 6(1)(f)Accounting and legal obligationsArt. 6(1)(c)Marketing communication (newsletters)Art. 6(1)(a)Castings, searches, recruitmentArt. 6(1)(a)Website administration and securityArt. 6(1)(f)

7. Data Retention Periods

We store personal data no longer than necessary, unless longer storage is required by law:

• Contracts and accounting documents – 10 years;

• Business correspondence – 3 years;

• CVs, casting/search data –

  • without extended consent: 5 working days after process end;

  • with consent: 1 year;

• Marketing consent data – until consent is withdrawn.

8. Social Media

Our social media accounts are managed by third-party platforms (e.g., Facebook, Instagram, LinkedIn).
We are not responsible for how these platforms process your data.

We recommend reviewing their privacy policies independently.

9. Disclosure of Personal Data

We may disclose personal data only when necessary and lawful, including to:

• Employees and contractors;

• IT, accounting, legal, and marketing service providers;

• Public authorities where required by law;

• Business transaction partners (only if necessary).

All processors act under confidentiality and data protection agreements.

10. Transfers Outside the EEA

If personal data is transferred outside the European Economic Area, we ensure appropriate safeguards, including:

• Adequacy decisions of the European Commission;

• Standard Contractual Clauses (SCCs);

• Explicit consent, where required.

11. Data Security

We apply appropriate technical and organizational measures to protect personal data against loss, unauthorized access, or disclosure.

In case of a personal data breach, we will notify the supervisory authority and affected data subjects as required by GDPR.

12. Your Rights as a Data Subject

You have the right to:

• Access your personal data;

• Rectify inaccurate data;

• Erase data (“right to be forgotten”);

• Restrict processing;

• Data portability;

• Object to processing;

• Withdraw consent at any time;

• Lodge a complaint with the supervisory authority.

To exercise your rights, contact us at:
📩 hello@rebeleyestory.com

We respond within 1 month.

13. Complaints

If you believe your rights have been violated, you may contact:

• REBEL EYE STORY, MB – hello@rebeleyestory.com

• State Data Protection Inspectorate (Lithuania)

14. Changes to the Privacy Policy

We may update this Privacy Policy at any time.
The current version is always available at rebeleyestory.com.