Data Protection

McMillan Theatre Privacy Notice

 

Bridgwater & Taunton College is committed to the data security and the fair and transparent processing of personal data. This privacy notice for students sets out how we will treat your personal data which you provide us in compliance with the UK General Data Protection Regulation (UK GDPR).

 

We are the data controller of the personal information about you. We are: Bridgwater & Taunton College. Our address is: Bath Road, Bridgwater, Somerset TA6 4PZ and is registered with the Information Commissions Office (ICO) Registration Number Z4677243.

 

Our Data Protection Officer is Emma Kilner. If you have any questions about this policy or the ways in which we use your personal information, please contact our Data Protection Officer

 

What information does the McMillan Theatre collect?

We will collect personal information that you submit to use when you make use of our website or services and/or when you contact us. This information may include, but not limited to:

• Personal contact details that allow us to contact you directly such as name, title, email addresses and telephone numbers
• Date of birth
• Your payment information including bank details
• CCTV images (internally and externally) – stored at Bridgwater and Taunton College
• Enrolment form for workshops including medical details and emergency contact details

 

How we collect and use your data

We collect this personal data directly from you as a visitor or by completing an enrolment form for a workshop.

 

Our lawful basis for using this data

The table below describes the main purposes for which we process your personal information, the categories of your information involved and our lawful basis for being able to do this.

 

Personal data	Personal information used	Lawful basis
To send you marketing information related to the Theatre including newsletters and events as part of your membership	Contact details and marketing preferences	Where you have given us your expressed consent to do so.
To answer your queries or complaints	Contact details and records of your interaction with us	We have a legitimate interest to provide complaint handling services to you in case there are any issues.
Retention of records	All the personal information we collect	We have legitimate interest in retaining records whilst they may be required in relation to complaints or claims.
Data analytics and google analytics	Marketing purposes	Necessary for research or statistical purposes

 

Direct marketing

Email and post marketing: from time to time, we may contact you by email or post with information about events and services we believe you may be interested in. We will only send marketing messages to you in accordance with the marketing preferences you set. You can then let us know at any time that you do not wish to receive marketing messages by unsubscribing from the link in the email. You also can log into your theatre account and change the preferences or contact the theatre directly.

 

How we store and how long we keep your personal information

The duration for which we retain your personal information will differ depending on the type of information and the reason why we collected it from you. However, in some cases personal information may be retained on a long-term basis: for example, personal information that we need to retain for legal purposes will normally be retained in accordance with usual commercial practice and regulatory requirements. 

 

Personal data is stored Spekrix a ticketing software system. Enrolment forms are locked in a filing cabinet and kept until the end of the enrolment period and then shredded.

 

How we share your personal data

The theatre does not share your personal information with any external companies.

 

Cookies

We want to make our online services as easy, useful and reliable as we can. Therefore like most other websites we use ‘cookies’ to collect anonymous statistics about how people use our website.

 

Your rights

You have the following rights in relation to your personal information: 

 

• the right to be informed about how your personal information is being used;
• the right to access the personal information we hold about you; 
• the right to request the correction of inaccurate personal information we hold about you; 
• the right to request the erasure of your personal information in certain limited circumstances;
• the right to restrict processing of your personal information where certain requirements are met; 
• the right to object to the processing of your personal information;
• the right to request that we transfer elements of your data either to you or another service provider; and
• the right to object to certain automated decision-making processes using your personal information.

 

Please note however that the withdrawal of your consent will not affect any use of the data made before you withdrew your consent and we may still be entitled to hold and process the relevant personal information to the extent that we are entitled to do so on bases other than your consent.  Withdrawing consent may also have the same effects as not providing the information in the first place, for example we may no longer be able to provide certain member benefits to you.

 

You should note that some of these rights, for example the right to require us to transfer your data to another service provider or the right to object to automated decision making, may not apply as they have specific requirements and exemptions which apply to them and they may not apply to personal information recorded and stored by us. For example, we do not use automated decision making in relation to your personal data. However, some have no conditions attached, so your right to withdraw consent or object to processing for direct marketing are absolute rights.

 

Whilst this privacy notice sets out a general summary of your legal rights in respect of personal information, this is a very complex area of law. More information about your legal rights can be found on the Information Commissioner’s website at https://ico.org.uk/for-the-public/ 

 

To exercise any of the above rights, or if you have any questions relating to your rights, please contact us by email on dpo@btc.ac.uk

 

If you are unhappy with the way we are using your personal information you can also complain to the UK Information Commissioner’s Office or your local data protection regulator. We are here to help and encourage you to contact us to resolve your complaint first.