GDPR Privacy Notice 2018
This document refers to personal data, which is defined as information concerning any living person (a natural person who hereafter will be called the Data Subject) that is not already in the public domain. The General Data Protection Regulation (GDPR) which is EU wide and far more extensive than its predecessor the Data Protection Act, along with the Privacy and Electronic Communications Regulations (PECR), seek to protect and enhance the rights of EU data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU and its storage within the EEA.
1 - Who we are
2 - Production Data
For some productions it is necessary for us to obtain personal and background information on people. This is strictly for the benefit of the production and the data will only be used by the core production team and not be made available to anybody else. At times our core production team may include the use of freelance employees who are employed on short term contracts. If the production needs those employees to view personal and / or background date then they will have previously signed an integrity and confidentiality agreement. If we hold any personal stories, comments or data on film then these will be stored in our locked, alarmed and cctv protected offices and will not be used in any productions unless otherwise agreed in writing with you. Any paper based data will also remain in our head office or on our production location and any electronic data will not be stored in shared folders but on desktop computers that are password protected.
3 - Consent
Through agreeing to this privacy notice you are consenting to The Creative Colony Limited processing your personal data for the purposes outlined. You can withdraw consent at any time by using the postal, email address or telephone number provided at the end of this Privacy Notice.
4 - Cookies
5 - Analytics
When someone visits www.creativecolony.co.uk we use a third party service, Google Analytics and Squarespace, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
6 - Mailing Lists
As part of the registration process for our monthly e-newsletter, we collect personal information. We use that information for a couple of reasons: to tell you about stuff you’ve asked us to tell you about; to contact you if we need to obtain or provide additional information; to check our records are right and to check every now and then that you’re happy and satisfied. We don't rent or trade email lists with other organisations and businesses and we generally only email quarterly with news and opportunities.
We use a third-party provider, MailChimp, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing us at firstname.lastname@example.org
7 - Ticketing Data
When you purchase a ticket (or tickets), merchandise, equipment, or gift vouchers through our website or a hosting page such as www.eventbrite.co.uk, we will obtain your name, address, email address and contact number. This is for operational reasons and please be assured that we do not share your personal details with any other company or individual without your consent.
8 - Third Parties
We may share personal data with third parties from time to time, however, this is for operational reasons only…for example, if you sign up for one of our events that is being hosted elsewhere we may pass your name to the host location in order to create a sign in sheet. We will ensure that the host venue does not contact you unless you confirm that you would like to receive news from them. We will not share any sensitive information or any payment or financial details.
9 - Your rights as a data subject
At any point whilst Creative Colony Limited are in possession of, or processing your personal data, all data subjects have the following rights:
- Right of access – you have the right to request a copy of the information that we hold about you.
- Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
- Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
- Right to restriction of processing – where certain conditions apply you have a right to restrict the processing.
- Right of portability – you have the right to have the data we hold about you transferred to another organisation.
- Right to object – you have the right to object to certain types of processing such as direct marketing.
- Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.
10 - Access to your personal data
You are entitles to view, amend or delete any of the personal information that we hold. Email your request to our data protection officer email@example.com or call us on 020 3757 7236. If you wish to make a complaint then please do contact us on 020 3757 7236 or by emailing firstname.lastname@example.org.
11 - Changes to this Privacy Notice
Our GDPR notice will be updated annually on the 1st of May each year.
Creative Colony Limited,
60 Richmond Road,
Kingston Upon Thames,