Pittenweem

Arts Festival

August 4th - 12th 2018

A celebration of the visual arts taking place in galleries homes studios and other venues throughout Pittenweem

Privacy Policy

The Royal Burgh of Pittenweem Arts Festival

 

PRIVACY POLICY

 

 

 

The Royal Burgh of Pittenweem Arts Festival (PAF) is committed to protecting the privacy of individuals whose data it processes.

 

 

BACKGROUND INFORMATION

This privacy policy aims to give you information on how PAF collects and processes your personal data. It outlines your data protection rights under the General Data Protection Regulation (“GDPR").

If you have any queries about this policy or your personal data, or you wish to submit an access request or raise a complaint about the way your personal data has been handled, please contact The Secretary, PAF, 47 High Street, Pittenweem, Fife, KY10 2PG.

PAF may update this policy from time to time.

 

 

CATEGORIES OF DATA SUBJECTS

 

(A) BUSINESS CONTACTS INCLUDING EXHIBITING ARTISTS

PAF may process personal data about its business associates, artists who have contacted PAF, visitors buying tickets to events or invited artists contacted by us.

We may collect, use, store and transfer personal data about you which you provide to us including: name, address, email address, and telephone numbers.

We do not collect any sensitive personal data or special categories of personal data about you through our website.

We will use your personal data in the following circumstances where it is necessary for our legitimate interests and where your interests and fundamental rights are not overridden or, where we need to comply with a legal or regulatory obligation.

Your personal data may be processed by PAF for the following purposes:

to hold your personal data on our system and to contact you on the basis of the legitimate interests of PAF including, in the case of artists, details of the work they do;

in respect of suppliers, to allow us to process payments and orders in respect of any goods and services provided;

to better understand our audience attendance to enable us to know which activities and events are most popular.

to comply with legal or regulatory requirements;

to scan and monitor emails sent to us, including attachments, for viruses or malicious software, to process and encrypt personal data to protect and manage email traffic, and to store personal data on our systems to pursue our legitimate interests including for document retention purposes; and

such other actions as are necessary to manage the activities of PAF, including by processing instructions and enforcing or defending the rights or interests of PAF, in order to comply with our legal obligations and/or to pursue legitimate interests.

If we consider it necessary to obtain your consent in relation to the use your personal data, we will contact you to request this consent. In such circumstances, we will provide you with full details of the personal data that we require and the reason we need it, so that you can consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw that consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. To withdraw your consent or to opt out of receiving marketing communication, please contact us at PAF, 47 High Street, Pittenweem, Fife, KY10 2PG or by following the unsubscribe instructions included in electronic marketing communication. Once we have received notification that you have withdrawn your consent, we will no longer process your information unless we have another legitimate basis for doing so in law.

 

Where such processing is being carried out on the basis that it is necessary to pursue the legitimate interests of PAF, such legitimate interests do not override your interests, fundamental rights or freedoms.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

 

(B) MEMBERS OF PAF

This section of the policy sets out how PAF may process personal data about its members and people who have applied to become a member.

We may hold personal data about our members which is provided to us by you directly, including through completing application forms, through our website, telephone calls and/or corresponding with us.  We may also process personal data about individuals that are connected with you as a member, for example your spouce’s name.

We may collect, store, and use the following categories of personal information about your contact details including name, title, address, telephone number, personal email address.

Your personal data may be processed by PAF for the following purposes:

to hold your personal data on our system and to contact you as necessary in accordance with PAF’s contractual obligations, or on the basis of our legitimate interests;

to provide you with information on PAF and its activities and events, being carried out to pursue PAF’'s legitimate interest;

to allow us to administer and manage PAF which is necessary for the purpose of meeting contractual obligations, to comply with applicable laws and/or to pursue the legitimate interests of PAF and its members;

such other actions as are necessary to manage the activities and/or to comply with the legal and/or regulatory requirements of PAF, including by processing instructions, monitoring and recording electronic communications, including telephone calls and emails, and enforcing or defending the rights and/or interests of PAF, in order to comply with PAF's legal obligations and/or to pursue the legitimate interests of PAF and/or its members.

If we consider it necessary to obtain your consent in relation to the use of your personal data, we will contact you to request this consent. In such circumstances, we will provide you with full details of the personal data that we would like to use and the reason we need it, so that you can consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw your consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

 

(C) VISITORS TO OUR WEBSITE

 

We may collect, use, store and transfer different kinds of personal data about you which you provide to us though our website: name, date of birth, address, email address, telephone numbers, technical data, your login data and other technology on the devices you use to access our website.

We do not collect any sensitive personal data or special categories of personal data about you through our website.

We use different methods to collect data from and about you including through:

direct interactions with you, including by filling in forms. This includes personal data you provide when you subscribe to our publications and/or request marketing to be sent to you.

Automated technologies or interactions. As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies. Our Cookies Policy is detailed on our website under FAQs.

We will use your personal data in the following circumstances where it is necessary for our legitimate interests, including in relation to the sending of electronic marketing communications, and where your interests and fundamental rights are not overridden by those interests, or where we need to comply with a legal or regulatory obligation.

Your personal data may be processed by PAF for the following purposes:

to use data analytics to improve our website, marketing, customer experiences on the basis of our legitimate interests;

to comply with legal or regulatory requirements;

to scan and monitor emails sent to us, including attachments, for viruses or malicious software, to process and encrypt personal data to protect and manage email traffic, and to store personal data on our systems to pursue our legitimate interests including for document retention purposes; and

such other actions as are necessary to manage the activities of the PAF, including by processing instructions, and enforcing or defending the rights and/or interests of PAF, in order to comply with its legal and/or regulatory obligations and/or to pursue its legitimate interests.

If it is considered necessary to obtain your consent in relation to the use your personal data, we will contact you to request this consent and will provide you with full details of the personal data we would like and the reason we need it, so that you can consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw that consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Where the Website provides links to other websites, PAF is not responsible for the data protection/privacy/cookie usage policies of such other websites, and, if you have any concerns about them you should check these policies on such websites. If you use one of these links to leave our website, you should note that we do not have any control over that other website.

 

 

DISCLOSURES OF YOUR PERSONAL DATA

We will not disclose personal information we hold about you to any third party other than as noted below.

 (a) in the event that we sell or dispose of any business or assets, in which case we may disclose personal data we hold about you to the buyer of such business or assets; and/or

(b) if we are permitted by law to disclose your personal data to that third party or are under a legal obligation to disclose your personal data to that third party.

 

 

DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

 

 

YOUR LEGAL RIGHTS

By law you have the right to:

• Request access to your personal details. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing.

• Object to processing of your personal information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

• Withdraw your consent. If we are processing your personal data on the basis of your consent, you have the right to withdraw such consent at any time. Withdrawing your consent will not affect the lawfulness of processes based on consent before its withdrawal. To withdraw your consent or to opt out of receiving marketing communication, please contact us at PAF, 47 High Street, Pittenweem, Fife, KY10 2PG or following the unsubscribe instructions included in each electronic marketing communication. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

 

 

If you wish to exercise any of the rights set out above, please contact PAF, 47 High Street, Pittenweem, Fife, KY10 2PG in writing.

You have the right to make a complaint at any time to the Information Commissioner's Office, the UK supervisory authority for data protection issues (www.ico.org.uk).