Privacy Policy
Privacy Policy
INTRODUCTION
This privacy statement describes how we will use your personal data when you give it to Music in Lyddington.
ORGANISATION
Music in Lyddington is a registered charity (Number 1040099) for the promotion of music appreciation particularly among young people in Lyddington and its surrounding Counties. We undertake to collect and use your personal data in compliance with the General Data Protection Regulation (GDPR) and other relevant legislation.
WHAT WE COLLECT
We collect names, addresses, telephone numbers and email addresses of both our members and people on our mailing list. We also collect similar but more limited information from members of the public when they book tickets from us.
WHAT THE DATA ARE USED FOR
• Membership records
• Mailing of programme details to people on our mailing list
• Mailing the annual brochure to members and mailing list
• Mailing tickets to customers
• Emailing of concert reminders
• Gift Aid returns
• Any other legitimate activity of the organisation
SECURITY OF DATA & DATA RETENTION
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and administrative procedures to safeguard the information we collect. Data is kept only for so long as it is required. This includes data which is held for 6 years after a Gift Aid application as required by HMRC.
SHARING OF DATA
We share personal data with:
• Mailchimp, who provide bulk email services
• WeGotTickets, who provide online ticketing
YOUR RIGHTS
Under GDPR you have:-
• the right to be informed about the collection & use of your personal data including our purposes for processing it, our retention periods and with whom it will be shared .
• the right of access to your personal data and supplementary information. The right of access to be aware of and verify the lawfulness of processing
• the right to rectification. You have the right to have inaccurate personal data rectified or completed if it is incomplete.
• the right to erasure. You have the right to have your personal data erased in certain circumstances.
• the right to restrict processing of your personal data in certain circumstances. When processing is restricted, we are permitted to store the personal data but not use it.
• the right to data portability to obtain and reuse your personal data for your own purposes across different services. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to accessibility
• the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority, direct marketing and processing for purposes of scientific/historical research and statistics
• the right not to be subject to automated decision-making including profiling
SUBJECT ACCESS REQUESTS
You can submit a subject access request to seek your data at any time to the Secretary. Alternatively you can ask for it to be removed from the current data list (excluding Gift Aid data as above).
REVIEW
This privacy policy will be reviewed annually by the Trustees of Music in Lyddington.
v2 Date 14 June 2018