SHALDON FESTIVAL PRIVACY NOTICE

(General Data Protection Regulation) - November 2018


You can download this policy using the link: Shaldon Festival Privacy Notice download

The Shaldon Festival Trustees have adopted the following Privacy Notice in respect of personal data held and processed by the Trust. It is in two parts, (a) for marketing purposes and (b) for contractual purposes (ticket and choral workshop bookings and the Festival's Patrons scheme).

(a) For marketing purposes


The types of personal data we collect and use
When you join the postal or email list we record the following personal data so far as you provide it to us: Name, Address, Telephone Numbers, Email Address. We enter these details into our relevant database, so that we can provide you with the best service possible and to protect your information.
If you are enrolling on our email list, you will be sent a username and password so that you can view and amend your data record.
We may already hold personal data relating to you provided in respect of years prior to May 2018 (the GDPR operative date) We will retain and use such data consistent with this statement.

Using your personal data: the legal basis and purposes
We will only use this data:
      1. To send you marketing communications relating to the Festival's activities, respond to communications or to   answer your queries. You are free to change your mind and withdraw your consent at any time;
      2. As necessary for our own legitimate interests; namely:
          a) For good governance, managing and auditing our operations
          b) Subject to anonymisation so far as practicable, for our own market research and analysis and for archiving;
      3. As necessary to comply with a legal obligation namely:
          a) When you exercise your rights and make requests under GDPR:
          b) For compliance with legal and regulatory requirements and related disclosures;
          c) For establishment and defence of legal rights.

Sharing of your personal data
We do not share your personal data with any third party except where we have your consent or, exceptionally, if required by law.

Retention of Data
For email lists, we rely on you either to unsubscribe or make your email address unavailable. Unless you give further consent, for postal lists your data is held for 6 years.

Your Rights - Under the GDPR, you have certain rights regarding your personal data:
      • You have the right to ask us for a copy of any data we hold about you and about how we process it.
      • You have a right to have any data that is incorrect, corrected.
      • You have the right to object to the use of your data.
      • You have the right to have your data provided to you to take elsewhere in a suitable format.
      • You have the right to have your data deleted in certain circumstances.
      • You have the right to lodge a complaint about the use of your data with the Information Commissioner. You have the right to complain to the Information Commissioner's Office which has enforcement powers and can investigate compliance with data protection law. Details on the Information Commissioner's website at www.ico.org.uk.

For all communications to Shaldon Festival under the GDPR, please write to Mrs. Anita Harper, the Secretary of the Trustees, 42 Woodway Road, Teignmouth TQ14 8PZ or Email: secretary@shaldonfestival.co.uk.

(b) For contractual purposes

      (ticket and choral workshop bookings and the Patrons scheme)


The types of personal data we collect and use
When you purchase or request tickets from us or make donations to us, we record the following personal data in so far as you provide it to us:

      • Name
      • Address
      • Telephone Numbers
      • Email Address (optional except for online purchases)
      • Payment details
      • Records of purchases, bookings or donations you have made

We tell you if providing any personal data is optional, including if we ask for your consent to process it. We enter these details into our relevant databases so that we can provide you with the best service possible and to protect your information.
We may already hold personal data relating to you provided in respect of years prior to May 2018 (the GDPR operative date) We will retain and use such data consistent with this statement.

Using your personal data: the legal basis and purposes
We will only use this data to answer your queries, respond to your communications or to further our contract with you.
      1. We will process your personal data as necessary to perform our contract with you for any of our services you request:
          a) To take steps at your request prior to entering into it;
          b) To decide whether to enter into it:
          c) To manage and perform that contract;
          d) To update our records; and
          e) To trace your whereabouts to contact you about your contract and recover debt.
      2. As necessary for our own legitimate interests; namely:
          a) For good governance, accounting, and managing and auditing our operations;
          b) Subject to anonymisation so far as practicable, for our own market research and analysis and for archiving;
      3. As necessary to comply with a legal obligation namely:
          a) When you exercise your rights and make requests under GDPR;
          b) For compliance with legal and regulatory requirements and related disclosures;
          c) For establishment and defence of legal rights.

Sharing of your personal data
We do not share your personal data with any third party except where we have your consent or as required by law (eg Patrons Gift Aid Tax reclaims).

Retention of Data
Data relating to ticket sales, choral workshop bookings & patron donations is retained for 6 years from the Festival year to which it relates for accounting, legal and regulatory purposes.

Your Rights - Under the GDPR, you have certain rights regarding your personal data:
      • You have the right to ask us for a copy of any data we hold about you and about how we process it.
      • You have a right to have any data that is incorrect, corrected.
      • You have the right to object to the use of your data.
      • You have the right to have your data provided to you to take elsewhere in a suitable format.
      • You have the right to have your data deleted in certain circumstances.
      • You have the right to lodge a complaint about the use of your data with the Information Commissioner. You have the right to complain to the Information Commissioner's Office which has enforcement powers and can investigate compliance with data protection law. Details on the Information Commissioner's website at www.ico.org.uk.

For all communications to Shaldon Festival under the GDPR, please write to Mrs. Anita Harper, the Secretary of the Trustees, 42 Woodway Road, Teignmouth TQ14 8PZ or Email: secretary@shaldonfestival.co.uk.