The proper handling of personal information by Carmarthenshire County Council is very important to the delivery of our services and maintaining public confidence.
Personal data is any information that relates to a person who can be directly or indirectly identified from the information. The terms ‘information’ and ‘personal data’ are used throughout this privacy notice and have the same meaning.
To ensure that the Council treats personal information correctly, we seek to adhere in full to the requirements of Data Protection legislation.
This privacy notice has therefore been produced to explain as clearly as possible what we do with your personal data.
1. The purpose for which we use your personal data
The information we collect about you will be used for the purposes of:
- Processing your orders, reservations and bookings
- Notifying you about changes to our service
- If you have opted to receive marketing communications, we use personal data to update you on news, events and activities organised by our service
- We also pass your information on to other arts organisations for them to contact you about events and performances, but only when you consent for us to do this
- Carrying out market research and analysis
The legal basis for the processing of your information is to exercise official authority under Section 145 of the Local Government Act 1972, a discretionary power to provide theatres and other entertainment.
As above, we provide you with marketing information based on your consent.
2. What type of information do we use?
We collect the following types of personal data about you to deliver this service:
- Telephone number
- Email address
- Bank/payment details
3. Do we use information received from other sources?
No. To deliver this service, we only collect personal data directly from you and do not obtain information about you from any other source.
4. Transferring your information abroad
We use Microsoft Office 365 to process our electronic documents under the terms of a strict agreement, which safeguards your information. This personal data is hosted on servers outside the UK, but only in EU countries which are subject to the General Data Protection Regulation.
We use a third party called MailChimp to send marketing emails to you and they are based in the United States of America.
The company participates in and has certified its compliance with the Privacy Shield framework, and is committed to treating all personal data received from European Union member countries in accordance with the Privacy Shield framework’s principles.
Ticketsolve provides us with a ticket purchasing platform for all Carmarthenshire Theatres’ ticketed events. Ticketsolve processes your personal data in Ireland and the United Kingdom.
5. Who has access to your information?
When you purchase tickets, gift vouchers, or merchandise through our Box Office, your name and contact details will be stored by our ticketing partner, Ticketsolve.
When you book tickets online, information is shared between Carmarthenshire County Council, Realex (payment gateway) and Ticketsolve (ticketing platform) in order to process the transaction.
Where you have opted in to receive marketing mailings, your personal data will be shared with MailChimp.
We share your contact details with other arts organisations, when you consent to us doing this.
There are other specific situations where we may be required to disclose information about you, such as:
- Where the Council is required to provide the information by law
- Where disclosing the information is required to prevent or detect a crime
- Where disclosure is in the vital interests of the person concerned
6. How long we will keep your information
We will keep your information for a year following inactivity in accordance with the Council’s Retention Guidelines.
7. Your Data Protection rights
You have the right to:
- Obtain access to the personal data that Carmarthenshire Council is processing about you
- Have any inaccurate or incomplete information rectified (corrected)
- Withdraw your consent to processing, where this is the only basis for the processing
- Make a complaint to the Information Commissioner’s Office (ICO), the independent body in the UK which protects information rights
In some circumstances, you may have the right to:
- Object to the processing of your personal information
- The erasure of your personal data
- Restrict the processing of your personal information
- Data portability
8. Contact details
For more information regarding this privacy notice and your rights, please contact:
Data Protection Officer
Carmarthenshire County Council
Contact details for the Information Commissioner’s Office along with further guidance on Data Protection legislation can be found on the ICO website.