Privacy Notice – Bradford UNESCO City of Film
CHANGES TO DATA PROTECTION LEGISLATION
New data protection legislation will come into force on the 25th May 2018 and will replace the current UK Data Protection Act. The new General Data Protection Regulation provides a modernised, accountability-based compliance framework for data protection in Europe. It is intended to strengthen privacy rights in relation to personal information.
The new accountability principle in Article 5(2) of the GDPR requires data controllers to demonstrate that they comply with the good practice principles set out in the Regulation and states explicitly that this is their responsibility.
This Notice sets out most of your rights under the new laws.
Further information about the new law can be found on the Information Commissioners website: https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/
Department or Service Area: Bradford City of Film
City of Bradford Metropolitan District Council (CBMDC) is registered with the information Commissioners Office (ICO) under the provisions of the Data Protection Act 1998. The Council takes its responsibilities under the Act very seriously. This notice provides details of how Bradford City of Film as an organisation hosted by the Council collects and uses information about you. For more general information about how CBMDC uses your information, please refer to the general ‘Privacy Notice’ on CBMDC website. You can find this here: https://www.bradford.gov.uk/privacy-notice/
What is this information?
You give us your information when you sign up for our regular newsletter. We also keep your details when you sign up to receive email from us. Bradford City of Film may collect some or all of the following information about you:
- Telephone number(s)
- Email address
We use social media to broadcast messages and updates about events and news. On occasion we may reply to comments or questions you make to us on social media platforms. You may also see adverts from us on social media that are tailored to your interests. Depending on your settings or the privacy policies social media and messaging services like Facebook or Twitter, you might give third parties (like Bradford City of Film) permission to access information from those accounts or services.
You do not have to give us any personal data or private information about yourself to access the information on this site, unless you want to sign up for our monthly newsletter.
This system does automatically gather certain usage information, such as the numbers and frequency of visitors. This collective data helps us determine how much visitors use specific parts of our site, so that we can improve it and make sure that it is as accessible as we can make it for as many people as possible. We use a system called Google Analytics to find out how people use our site.
If you visit our site just to read or download information, we will collect and store only the following information about your visit:
- The name of the domain from which you access the Internet, and the Internet Protocol (IP) address or host name, which does not usually identify a specific computer.
- The date and time you access our site.
- The pages you visit.
- The Internet address of any website from which you linked directly to our site.
- This information (web access logs) does not contain any personal data or private information, and we do not make any attempt to link the information in the logs with the individuals who actually visit our site. We collect web access log information for internal monitoring only.
Who uses this information?
Bradford City of Film officers use this information. It may also be used by other third party organisations who bring visiting productions to our venues. See the section on “who are we likely to share this information with.”
What authority does CBMDC have to collect and use this information?
Under the General Data Protection Regulations, Bradford City of Film collects and uses this information under the following categories of lawfulness:
- Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract
- Processing is necessary to protect the vital interests of a data subject or another person
- Processing is necessary for compliance with a legal obligation
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
In general, any information you provide will only be accessed by authorised employees of Bradford City of Film, part of the City of Bradford Metropolitan District Council. We will never share your personal data or private information outside of the Council without first obtaining your consent, unless we are required by law to disclose it.
What is ‘person identifiable data’?
The term ‘person identifiable data’ relates to any data that could potentially identify a specific individual. The following fields in Theatres are classified as person identifiable: Name, age, address, postcode, place of birth, date of birth, gender, credit or debit card payment – any information about an individual that can be used directly, or in connection with other data, to identify, contact or locate that person.
Why do we use this information?
We aim to be clear when we collect your data and not to do anything you wouldn’t reasonably expect.
If you sign up for an event we usually collect your name, contact details and your bank or credit card information (if making a transaction). Where it is appropriate (and you have the right to decline to give this information) we may also ask for your age, gender or ethnicity.
We use this data to provide you with the events, products, services or information you asked for, ensure we know how you prefer to be contacted, understand how we can improve our communications or events.
Giving you control
With your consent, we will tell you about events and information about our site (for example updates on film festivals and events). Occasionally, we may include information in these communications from partner organisations or organisations who support us.
We do not sell personal details to third parties for any purpose. We will only share personal details for the purposes of marketing if you have given explicit consent for us to do this.
We will give you the opportunity to opt out, at any time, from any marketing email and postal communications you receive from us.
Who are we likely to share this information with?
We may share anonymised personal information with other organisations, for example partner film festivals and/or Arts Council England or research agencies, who use this to analyse our audience development programmes and ticket sales to understand the impact of the investment made at Bradford City of Film.
We will not otherwise share your personal information with third party organisations.
How do we keep this information secure?
Your information will be held and processed on Bradford City of Film systems or systems managed by suppliers on behalf of Bradford City of Film. We maintain only a mailing list with email addresses and names.
We may need to disclose your details if where it is necessary, lawful and fair to do so to the police, regulatory bodies or legal advisors. We will only ever share your data in other circumstances if we have your explicit and informed consent.
How long do we keep this information?
Bradford City of Film has a record retention schedule which details how long we keep different types of records and what we do with them when we no longer need them. For example, we keep financial information records for 6 years; correspondence by letter for 3 years after the matter has closed; complaints for 6 years after the matter has closed. Then all documents are destroyed securely.
What are your rights?
You have the right to request Bradford City of Film to stop processing your personal data in relation to any council service. Wherever possible, we will seek to comply with your request but we may need to hold or process information in connection with one or more of the Council’s legal functions.
If you have any questions about our use of these data, or you wish to request a copy of the information we hold about you, or you wish to discuss your rights in relation to opting out from these processes, please contact the Corporate Information Officer- Dani Mistry, by email at firstname.lastname@example.org or by post to Information Governance Team, CBMDC, 1st Floor, Britannia House, Bradford, BD1 1HX.