We collect and process your personal data to manage bookings for the cinema and events at the Borough Hall in Godalming. You can also opt-in to receive emails with information about forthcoming events.
We are committed to protecting your privacy. The following information explains how and why we use your personal information.
Who we are
We are the data controller for your personal information and we will ensure that it is used and stored in accordance with:
- The Data Protection Act (1998)
- The Privacy and Electronic Communications (EC Directive) Regulations (2003)
- The EU General Data Protection Regulation (GDPR) (Regulation EU 2016/679), (‘GDPR’), effective from 25 May 2018
Information we may collect about you
We may collect and process these types of personal information:
Information you give us
We will store personal information you give us when you register on our website or buy a ticket. This includes your:
- name, phone number, email address and home address
- marketing and communications preferences.
Why we process your data (legal basis for processing)
We process your data to:
- Send you information about forthcoming events, special offers and competitions, provided you have given your consent.
- Process your booking and store your contact details so contact you in case a show is cancelled or there is a problem with your payment. This is to fulfil our contract to you.
- Ask you for your feedback and ideas on how to improve our services in the future, provided you have given your consent.
If you’re under 18, please ensure you have your parent or guardian’s consent before you give us any personal information.
Sharing and protecting your information
When we share your information
There are certain circumstances under which we may disclose your personal information to third parties. These are:
- We share your data with service providers who process data on our behalf – eg our ticketing system (The Little Box Office), our email distribution provider (Mailchimp). We require all third parties to respect the privacy of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.
- Where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example to government bodies and law enforcement agencies).
- We share your data with specific, named visiting companies whose performances you have attended. In these cases, we will always ask for your explicit consent before disclosing your personal information.
- We do not sell personal details to third parties for any purpose.
- In exceptional circumstances, we may share your contact information to protect someone’s life or to comply with a legal or regulatory obligation.
Security of your personal data
We have set up appropriate safeguards to keep your information secure. Any third parties we use to process your personal information are required to do the same.
We will not transfer, process or store your data outside the European Economic Area, unless we have a contractual agreement in place that is of an equivalent standard to the General Data Protection Regulation (GDPR).
Debit and credit card information
If you use your credit or debit card to purchase from us, we will ensure that this is carried out securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). We never store your 3 or 4-digit security code.
How long we keep your personal information
Once you have bought your tickets and you have attended an event at the Borough Hall, we will keep your personal information for up to seven years.
If you have purchased a ticket for a future event and ask to be removed from our database before the event, we will need to retain your personal data until the event has taken place.
If you have consented to receiving marketing from us, will continue to send you information until you ask to unsubscribe from our database.
Your rights under the law
Depending on the lawful basis for processing your data, you may have one or more of the following rights under data protection laws in relation to your personal information:
- Request a copy of the information we hold about you
- Request correction of your personal information
- Request that we delete personal information where there is no good reason for us to keep it or process it.
- Object to processing of your personal information
- Ask us to suspend the processing of your personal data where:
- You want us to establish the data’s accuracy
- Our use of the data is unlawful but you don’t want us to erase it
- You need us to hold the data for legal claims, even when we don’t need it anymore
- You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- request transfer of your personal information
- to withdraw your consent
You will not have to pay a fee to access your personal information (or to exercise any of the other rights).
However, we may charge a reasonable fee or refuse to comply with your request if it is clearly unfounded, repetitive or excessive.
What we may need from you
As a security measure, you may need to supply information to help us confirm your identity.
We may also contact you to ask you for further information in relation to your request to speed up our response.
How to access your information (Subject Access Request)
If you have any questions, please contact us:
- Email: firstname.lastname@example.org
- Phone: 01483 523071
- Post: Data Controller, Borough Hall, Bridge Street, Godalming, Surrey, GU7 1HR
Main council privacy notice: www.waverley.gov.uk/privacynotice
Page owner: Vanessa de Chazal. Last updated: 17/03/2020 14:30