CHANGES TO DATA PROTECTION LEGISLATION
New data protection legislation will come into force on the 25th May 2018 and will replace the current UK Data Protection Act. The new General Data Protection Regulation provides a modernised, accountability-based compliance framework for data protection in Europe. It is intended to strengthen privacy rights in relation to personal information.
The new accountability principle in Article 5(2) of the GDPR requires data controllers to demonstrate that they comply with the good practice principles set out in the Regulation and states explicitly that this is their responsibility.
This Notice sets out most of your rights under the new laws. We'll update it again between now and 25 May 2018 when changes come into effect.
Further information about the new law can be found on the Information Commissioners website: https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/
Department or Service Area: Bradford Theatres
City of Bradford Metropolitan District Council (CBMDC) is registered with the information Commissioners Office (ICO) under the provisions of the Data Protection Act 1998. The Council takes its responsibilities under the Act very seriously. This notice provides details of how CBMDC collects and uses information about you. For more general information about how CBMDC uses your information, please refer to the general ‘Privacy Notice’ on CBMDC website. You can find this here: https://www.bradford.gov.uk/privacy-notice/
Bradford Theatres is run and managed by Bradford Council. There are 4 venues which sit under the Bradford Theatres umbrella: the Alhambra Theatre, St George's Hall, The Studio and King's Hall and Winter Garden in Ilkley.
What is this information?
You give us your information when you buy a ticket, buy something online via our website, sign up for one of our events, update your preferences on our website, or book a table in our restaurant. We also keep your details when you sign up to receive email from us. Bradford Theatres may collect some or all of the following information about you:
We use social media to broadcast messages and updates about events and news. On occasion we may reply to comments or questions you make to us on social media platforms. You may also see adverts from us on social media that are tailored to your interests. Depending on your settings or the privacy policies social media and messaging services like Facebook or Twitter, you might give third parties (like Bradford Theatres) permission to access information from those accounts or services.
This system does automatically gather certain usage information, such as the numbers and frequency of visitors. This collective data helps us determine how much visitors use specific parts of our site, so that we can improve it and make sure that it is as accessible as we can make it for as many people as possible. We use a system called Google Analytics to find out how people use our site.
If you visit our site just to read or download information, we will collect and store only the following information about your visit:
Who uses this information?
Bradford Theatres’ officers use this information. It may also be used by other third party organisations who bring visiting productions to our venues. See the section on “who are we likely to share this information with.”
What authority does CBMDC have to collect and use this information?
Under the General Data Protection Regulations, Bradford Theatres collects and uses this information under the following categories of lawfulness:
In general, any information you provide will only be accessed by authorised employees of Bradford Theatres, part of the City of Bradford Metropolitan District Council. We will never share your personal data or private information outside of the Council without first obtaining your consent, unless we are required by law to disclose it.
What is ‘person identifiable data’?
The term ‘person identifiable data’ relates to any data that could potentially identify a specific individual. The following fields in Theatres are classified as person identifiable: Name, age, address, postcode, place of birth, date of birth, gender, credit or debit card payment - any information about an individual that can be used directly, or in connection with other data, to identify, contact or locate that person.
Why do we use this information?
We aim to be clear when we collect your data and not to do anything you wouldn’t reasonably expect.
If you make a purchase or sign up for an event we usually collect your name, contact details and your bank or credit card information (if making a transaction). Where it is appropriate (and you have the right to decline to give this information) we may also ask for your age, gender or ethnicity.
We use this data to provide you with the events, products, services or information you asked for, ensure we know how you prefer to be contacted, understand how we can improve our communications or events.
When you register on our website, you can visit the ‘My Account’ section to choose whether you would like to receive marketing communications from Bradford Theatres by email or post. Once you have an account, you can manage your preferences at any time. We will not contact you for marketing purposes unless one of these boxes is ticked. We will include opt-out instructions in any marketing communications you receive from us.
Giving you control
With your consent, we will tell you about events, concerts, offers, priority booking and information about our site (for example updates on building works on site). Occasionally, we may include information in these communications from partner organisations or organisations who support us. We make it easy for you to tell us how you want to hear from us (by logging onto our website and updating your preferences in the “My Account” section) or by telling our Box Office team over the phone or in person. You can opt out from these marketing communications at any time - every email sent to you will tell you how to do this.
We do not sell personal details to third parties for any purpose. We will only share personal details for the purposes of marketing if you have given explicit consent for us to do this.
If you have opted out of marketing communications, we may still get in touch with you. For example we may email you to give you important information about the events you’ve booked or to tell you about any changes (for example, if a performance has been cancelled or postponed).
We will give you the opportunity to opt out, at any time, from any marketing email and postal communications you receive from us.
Who are we likely to share this information with?
We may share anonymised personal information with other organisations, for example visiting production companies and/or Arts Council England or research agencies, who use this to analyse our audience development programmes and ticket sales to understand the impact of the investment made at Bradford Theatres.
All the events at Bradford Theatres are presented in partnership with other visiting companies, other artistic organisations and promoters. We will let them know about your booking and share your name and contact details with them but they can’t contact you unless you select either the Email or Post option under ‘I would like to hear about events, news and offers from the artists or companies presenting the events I’ve booked’ as part of your booking online, at the Box Office or over the phone. We will not share sensitive information or your payment details.
If you would like us to stop sending your data to our partners, you can change your preferences in the “My Account” section of our website. If we have already given your data to another company, we can’t remove you from their mailing list. To opt in or out of marketing or other communications from another company, please get in touch with them direct. They should always provide instructions for opting out in any marketing or other communications you receive. If you need help, please contact us by using the details in the ‘contact us’ section below.
We will not otherwise share your personal information with third party organisations.
How do we keep this information secure?
Your information will be held and processed on Bradford Theatres’ systems or systems managed by suppliers on behalf of Bradford Theatres. We maintain a customer relationship management (CRM) system to hold contact details and a record of your interactions with Bradford Theatres such as ticket purchases, memberships, queries, complaints and attendance at special events. Where possible we aim to keep a single record for each customer.
Your information is stored securely on a database with stringent access and use policies. We also undertake quality checks and monitoring to ensure the information we hold is accurate at the time and being used appropriately. The CRM system can only be accessed by people who need it to do their job. Certain data, for example some sensitive information, is additionally controlled and is only made visible to members of staff who have a reason to work with it. Any debit or credit card details that you might supply us for any payments are not retained by the Council, and are not accessible by any Council employee.
We may need to disclose your details if where it is necessary, lawful and fair to do so to the police, regulatory bodies or legal advisors. We will only ever share your data in other circumstances if we have your explicit and informed consent.
How long do we keep this information?
Bradford Council (Theatres) has a record retention schedule which details how long we keep different types of records and what we do with them when we no longer need them. For example, we keep financial information records for 6 years; correspondence by letter for 3 years after the matter has closed; complaints for 6 years after the matter has closed. Then all documents are destroyed securely.
What are your rights?
You have the right to request CBMDC (Bradford Theatres) to stop processing your personal data in relation to any council service. Wherever possible, we will seek to comply with your request but we may need to hold or process information in connection with one or more of the Council’s legal functions.
If you have any questions about our use of these data, or you wish to request a copy of the information we hold about you, or you wish to discuss your rights in relation to opting out from these processes, please contact the Corporate Information Officer- Dani Mistry, by email at firstname.lastname@example.org or by post to Information Governance Team, CBMDC, 1st Floor, Britannia House, Bradford, BD1 1HX.