We are committed to protecting your personal data: this policy tells you more about when, from whom and why we collect your personal data and how we use it
This policy sets out how we collect, process and hold any personal data that you provide to us. In those cases, we act as Data Controller of the personal data to which this policy relates. You will find our contact details below and under Section 10.
This policy affects your legal rights and obligations so please read it carefully. If you have any questions, please contact us at firstname.lastname@example.org.
Personal data we collect
Data we collect directly from you
We will collect your personal data, usually via a form, when you sign up to our newsletter, buy tickets for our productions, participate in our fundraising campaigns or otherwise directly provide personal data to us. This personal data may include:
- Full name and address
- E-mail address
- Payment method details (however, we don’t have access to your bank account details or full credit card number, as these are only transmitted to the provider that processes those payments).
Also, when you contact us by email or post, we may keep a record of the correspondence.
Data we automatically collect
When you visit our websites or event ticket shop, we (or more precisely third parties on our behalf), automatically collect and store information about your device and your activities. This information could include
- Internet protocol addresses and device identifiers
- Technical information about your device such as type of device, web browser or operating system;
- Your preferences and settings such as time zone and language; and
- Statistical data about your browsing actions and patterns.
A cookie is a small text file containing a unique identification number that is transferred (through your browser) from a website to the hard drive of your computer. The cookie identifies your browser but will not let a website know any personal data about you, such as your name and/or address. These files are then used by websites to identify when users revisit that website.
We also use Google Analytics to monitor websites traffic and how the event ticket shop is used. Google Analytics collects information anonymously and generates reports detailing information such as the number of visits, where visitors generally came from, how long they stayed on the page, and which pages they visited. Google Analytics places several persistent cookies on your computer’s hard drive. These do not collect any personal data. If you do not agree to this you can disable persistent cookies in your browser. This will prevent Google Analytics from logging your visits.
How do we use your personal data
We will use your personal data in order to supply to you the tickets to an event that you have booked, to contact you with any information relating to the event, to deliver the event to you in accordance with any requests you make and that we agree to, and to deal with any questions, comments or complaints you have in relation to the event. When related to a donation, we may also use it to claim Gift Aid on it where applicable, to keep you informed about our fundraising campaigns and to enable delivery of any applicable rewards.
We may also use your personal data for our and your legitimate interests, including dealing with any customer services you require, enforcing the terms of any other agreement between us, for regulatory and legal purposes (for example anti-money laundering), for audit purposes and to contact you about changes to this policy.
We also use your personal data to keep you informed from time to time about our current or future productions.
Sometimes this takes the form of a “soft opt-in” under applicable rules in the context of your buying services from us (e.g. tickets to one of our productions), in which case you will be given a clear option to opt-out of such communications. Sometimes this will require you to explicitly opt-in (e.g. when contacting us via the form on our website). In both cases, when you opt in to receive marketing communications from us you consent to the processing of your data to send you such communications, which may include newsletters, blog posts, surveys and information about new events. We retain a record of your consent.
You can choose at any time to no longer receive marketing communications by contacting us at email@example.com or clicking unsubscribe from a marketing email. We shall therefore retain your personal data in our records for these purposes until you notify us that you no longer wish to receive these emails from us.
Who do we share your data with?
We may share your personal data with service providers, sub-contractors and agents that we may appoint to perform functions on our behalf and in accordance with our instructions (Data Processors), including payment providers, event ticketing providers, fundraising platforms, email communication providers, IT / Cloud storage service providers, accountants, auditors and lawyers.
Where we hold and process your personal data
Some or all of your personal data may be stored or transferred outside of the European Union (the EU), including for example, if our email server is located in a country outside the EU or if any of our service providers or their servers are based outside of the EU. We shall only transfer your personal data to organisations that have provided adequate safeguards in respect of your personal data, including being in a country that the European Commission has confirmed provides adequate protection for personal data, and having entered into a written contract with the entity that holds your data which requires it to provide all protections to your personal information required by data protection legislation.
How long do we keep your personal data
If you opted in to receive marketing communications from us, we shall retain your personal data until you opt out of receiving such communications.
Personal data collected for the purpose of processing donations, or data related to ticket purchase transactions will be retained in accordance with applicable legal requirements for accounting and recordkeeping purposes.
You have the right to obtain from us a copy of the personal data that we hold for you, and to require us to correct errors if it is inaccurate or incomplete. You also have the right at any time to require that we delete your personal data and to withdraw your consent to how your personal data is being processed, where that processing is based on consent.
To exercise these rights, or any other rights you may have under applicable laws, please contact us at firstname.lastname@example.org.
If you have any complaints in relation to this policy or otherwise in relation to our processing of your personal data, you have the right to lodge a complaint with the UK supervisory authority (the Information Commissioner). See www.ico.org.uk
We may change the terms of this policy from time to time. You are responsible for regularly reviewing this policy so that you are aware of any changes to it, although we will inform you in case of material changes to the way we use your personal data.
If you have any questions about how your personal data is used, please feel free to contact us:
The Opera Story
36 Arlington Avenue, London N1 7AY
Last Updated: May 2018