Privacy Notice
Bradfield Festival of Music Registered Charity No. 1080130 (BFOM) is committed to protecting and respecting your personal information and privacy.
This privacy policy, together with any documents referred to within, sets out the basis on which we collect, use, process and store your personal information as part of our interactions with you in:
• Promoting and marketing Bradfield Festival of Music events
• Ticket sales
Data Controller
For the purpose of the General Data Protection Regulation (GDPR) the Data Controller is Bradfield Festival of Music Registered Charity No. 1080130
Data Processor
Bradfield Festival of Music uses littleboxoffice.com, an online application provided by The Little Box Office Limited (LBO) to manage on-line ticket sales. LBO acts as a Data Processor on behalf of BFOM and is only entitled to process your personal data in accordance with our instructions.
Legal basis for processing your personal information
When we use your personal information we are required to have a legal basis for doing so. There are various different legal bases on which we may rely, depending on what personal information we process and why. The legal bases we may rely on include:
• consent: where you have given us clear consent for us to process your personal information for a specific purpose
• contract: where our use of your personal information is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• legal obligation: where our use of your personal information is necessary for us to comply with the law (not including contractual obligations)
• legitimate interests: where our use of your personal information is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal information which overrides our legitimate interests)
What information do we collect and process?
Purpose: Enquiries regarding Bradfield Festival of Music
Data: Name, e-mail address, message
Basis: Legitimate interests - it is necessary for us to read and store your message so that we can respond in the way that you would expect.
Purpose: Subscribing to email updates about BFOM
Data: Name, email address
Basis: Consent - you have given your active consent.
Purpose: Subscribing to postal updates about BFOM
Data: Name, postal address
Basis: Consent - you have given your active consent.
Purpose: Telephone and Postal ticket sales
Data: Name, postal address, telephone number
Basis: Performance of a contract with you for ticket sales
Purpose: Online ticket sales through littleboxoffice.com
Data: Name, e-mail address, billing and delivery postal address, telephone number
Basis: Performance of a contract with you for ticket sales
Purpose: Website functionality
Data: Website activity collected through cookies
Basis: Legitimate interests - it is necessary to store a small amount of information, usually through cookies, to deliver the functionality that you would expect, such as remembering the contents of your ticket order before you have fully completed the process.
Some of the information that we collect is mandatory (i.e. the information to complete the ticket sale) and other information is provided voluntarily. If you fail to provide mandatory information, we will not be able to process your form or carry out the intended function (e.g. sell you the ticket).
Payment details (online ticket sales)
Payment for online ticket sales through littleboxoffice.com is handled separately and securely through Stripe (Payment Processor). Your payment details are never collected by Bradfield Festival of Music. If you want to find out more about how the Payment Processor processes your personal data, you can refer to their own privacy notice at https://stripe.com/gb/privacy.
How do we use your data?
We will only use your data in a manner that is appropriate considering the basis on which that data was collected, as set out in the table at the top of this policy.
We may use your personal information to: • reply to enquiries you send to us
• handle sales transactions that you initiate
• send you promotional material and updates by email or post relating to Bradfield Festival of Music current and future events which we think may be of interest to you. We will ask for your specific consent to do this. If you wish to be removed from the mailing list simply send an email request to bradfieldfom@yahoo.com or alternatively write to The Revd Alan Isaacson – Chair of Trustees, Bradfield Festival of Music, Bradfield Rectory, High Bradfield, Sheffield S6 6LG.
Who will we share your personal information with?
We routinely pass your information to our third party service providers, agents and subcontractors for the sole purpose of completing tasks and providing services to you on our behalf, including The Little Box Office and the Payment Processor (for ticket sales).
We will only pass your data to other third parties in the following circumstances:
• you have provided your explicit consent for us to pass data to a named third party
• we are using a third party purely for the purposes of processing data on our behalf and we have in place a data processing agreement with that third party that fulfils our legal obligations in relation to the use of third party data processors or
• we are required by law to share your data. In addition, we will only pass data to third parties outside of the EU where appropriate safeguards are in place as defined by Article 46 of the General Data Protection Regulation.
We may also disclose your personal data to third parties:
• To protect our rights, property or safety or that of our affiliates, our users and any third parties we interact with
• If BFOM or substantially all our assets are acquired by a third party, in which case personal information held about our subscribers or customers will be one of the transferred assets
• If we sell or buy any business or assets in which case, we may disclose your personal data to the prospective seller or buyer Other than as set out above, the personal data that you give will be used exclusively for providing you with the information and or service that you have requested, and we will not pass any of your personal data to other outside organisations or individuals without your explicit consent to do so.
How do we protect your information?
Bradfield Festival of Music takes appropriate measures to ensure your personal data is kept secure, and protected against accidental loss, and unauthorised use or access.
Access to your personal data is limited to those who have a genuine business need to know it. Those processing your data will do so only in an authorised manner and are subject to a duty of confidentiality.
Should there be a suspected data security breach we will notify you and the applicable regulator where we are legally required to do so.
Our Payment Processor use their own security measures to keep your personal banking details safe, including firewalls and data encryption. Please refer to their Privacy Notice for more information about how they do this.
Unfortunately, the transmission of information via the internet is not completely secure, and BFOM cannot guarantee the security of your data transmitted to the web; any transmission is at your own risk. Once we have received your information, BFOM will use strict procedures and security features to try and prevent unauthorised access.
How can you access, change or remove your personal information?
BFOM wants to ensure the personal information we hold is as accurate as is reasonably possible and remains up to date.
If your personal contact details change or require correction or you wish to change how you are contacted or wish to be removed from the mailing list simply send an email request to bradfieldfom@yahoo.com, or write to The Revd Alan Isaacson – Chair of Trustees, Bradfield Festival of Music, Bradfield Rectory, High Bradfield, Sheffield S6 6LG or complete and return forms available in the brochure or at the Festival.
How long do we keep your personal data?
Where you have made a purchase, we hold your data in relation to that purchase for seven years. We are required to retain this information by applicable UK tax law.
If you have opted in to receive email and or postal promotional information from us, we will hold your contact details for seven years for marketing purposes.
You will be given the option to opt-out (unsubscribe) from each promotional e-mail or postal mail you receive from us.
Where data is collected based on consent, we will seek renewal of consent at least every three years.
Where we store your information
For the purposes of on-line ticketing all personal information held on you is stored by The Little Box Office on their secure servers, which may be at a destination outside the European Economic Area (EEA). The Little Box Office Data Processor is Amazon Web Services (AWS). The Little Box Office has signed AWS’s Data Processing Agreement, a copy of which can be obtained by contacting AWS.
Countries outside the EEA do not have the same data protection laws as the United Kingdom and EEA. Any transfer of your personal data will be subject to a European Commission approved contract (as permitted under Article 46 of the General Data Protection Regulation) or such other approved mechanism that is designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal data.
BFOM will not otherwise transfer your personal data outside of the UK or EEA or to any organisation (or subordinate bodies) governed by public international law or which is set up under any agreement between two or more countries.
Marketing
We would like to send you information about the music festival, including future music festivals, which may be of interest to you. Where we have your consent or it is in our legitimate interests to do so, we may do this by post or email.
We will only ask whether you would like us to send you marketing messages when you tick the relevant boxes when you complete our online order form or complete our marketing consent form.
If you have previously agreed to being contacted in this way, you can unsubscribe at any time by:
• contacting us at bradfieldfom@yahoo.com
• using the ‘unsubscribe’ link in emails
It may take up to 14 days for this to take place. For more information on your rights in relation to marketing, see ‘Your rights over your data’ below.
Your rights over your data
Under the General Data Protection Regulation, you have a range of rights over your data, which include the following:
• You have the right of access to your information
• You have the right to ask for rectification and/or deletion of your information.
• Where data processing is based on consent, e.g. for marketing purposes you may revoke this consent at any time. We will provide information on how to do this on all our marketing mailings.
• You have the right to lodge a complaint with the UK Information Commissioners Office (ICO) if you feel your rights have been infringed. A full summary of your legal rights over your data can be found on the Information Commissioner’s website at: https://ico.org.uk/
Please note that acting on some of these rights, such as the right to delete your data, will make it impossible for us to continue to deliver some services to you. However, where possible we will always try to allow the maximum access to your rights while continuing to deliver as many services to you as possible.
If you would like to exercise any of the rights listed above, or any other legal rights you have over your data under current legislation, please get in touch with us. If you would like to exercise any of these rights, please:
• email or write to us
• provide enough information to identity you, including name and email address
• provide proof of your identity and address (a copy of your driving license or passport and a recent utility or credit card bill) and
• let us know the information to which your request relates, including any transaction reference numbers if you have them How to Complain
We hope we can resolve any query or concern you raise about our use of your personal information directly.
The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who can be contacted at https://ico.org.uk/concerns/ or by telephone: 0303 123 1113.
Changes to our Privacy Notice
We reserve the right to modify this privacy notice from time to time. Any changes we may make to our Privacy Policy will be available to you when using the website. Your continued use of the services and the website shall be deemed your acceptance of the varied privacy policy. If a modification meaningfully reduces your rights, we will notify people whose personal data we hold and is affected.
Use of Cookies and IP addresses
We and Little Box Office may collect information about your mobile phone, computer or other devices from which you access the website, including where available your IP address, operating system and browser type, for systems administration and to report aggregate information. This is statistical data about our users browsing habits and does not identify any individual. We may however use such information in conjunction with the data we have about you in order to track your usage of our services.
Our websites use cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve the website. By using our website, you agree to our use of cookies as more specifically set out below.
A cookie is a small text file which is placed onto your device (eg computer, smartphone or other electronic device) when you use our website. We use cookies on our website
The cookies we use include:
• Analytical cookies. They allow us to recognise and count the number of visitors to our website and to see how visitors move around the website. This helps us to improve the way our website works by ensuring users find what they are looking for easily
• Strictly necessary cookies. These are cookies that are required for the operation of our website. They include for example cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services
• Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise content for you, greet you by name and remember your preferences for example your choice of language or region Please note that third party affiliates may also use cookies over which we have no control.
You may block cookies by activating settings on your browser that allows you to refuse the settings of all or some cookies. However, if you use your browser settings to block all cookies including essential cookies you may not be able to access all or parts of the website. Unless you have adjusted your browser settings so it will refuse cookies, our system will issue cookies as soon as you visit our website.
External Links
Bradfield Festival of Music and Little Box Office websites may contain links to other sites at which your personal information is collected, on our event pages for example. When following a link to another site, the collection and use of your personal information is controlled by the privacy policy on that website. We do not accept any responsibility or liability for the privacy policies of external websites and your use of external websites is at your own risk.
Contact
All questions, comments and requests regarding this policy should be addressed to bradfieldfom@yahoo.com