General Data Protection Regulation and e-Privacy
This policy page is evolving and is periodically updated. We (Richmondshire Concerts) aim to comply with:
- GDPR rules on the storage and processing of individuals' data. In GDPR terms, Richmondshire Concerts is the 'Data Controller'.
- Future e-Privacy rules on marketing emails, in particular with regard to the 'soft opt-in'.
Whose data do we hold?
We hold data on individuals who:
- Are members of the society (= Season Ticket holders). (A membership organisation cannot work without member records.) Or...
- Have bought tickets or donated by credit or debit card or bank transfer. (It is standard accounting practice to keep records of such contracts.) Or...
- Have explicitly asked or consented to be added to or kept on our database.
What data do we hold?
Each record includes some or all of:
- Name
- Mailing address
- Phone
- Transaction history (e.g. tickets bought, ticket numbers, date of purchase)
- Miscellaneous data (e.g. record source, volunteer roles if any, hand-delivery route if applicable)
What do we use the data for?
We use the data so that:
- Individuals may receive information and occasional feedback requests about membership, concerts, General Meetings, etc.
- Individuals who have bought Season Tickets may receive the associated benefits including free concert programmes by email, entry into prize draws, etc.
- We can carry out statistical analysis, with anonymised data, to improve our service.
- Gift Aid authorisations may be retained as required by Her Majesty's Revenue and Customs
Joint subscriptions with Darlington Music Society
If you buy a joint subscription from Richmondshire Concerts, we will advise Darlington Music Society of your name/s, for their administrative purposes, but will not share your contact details.
Privacy and transparency
- We do not receive credit/debit card information from our payment processor (currently PayPal)
- We will never give or loan any individual's data to any other organisation
- We will make any individual's data record available to that individual on request
- We will disable email and/or postal contact on request, and will offer this option on every marketing email
- We will delete any individual's data record on request from that individual. (But see Note below.)
- At our own discretion, we expect to:
- delete the mailing address of any individual who has not bought a Season Ticket for four years and for whom we have an email address
- delete the record of any individual who:
- has not bought a Season Ticket for four years and for whom we have no email address
- has not bought a Season Ticket for three years and for whom we only have an email address and who fails to respond to advance email notice of deletion
Note: If you choose not to share your data with us, or ask us to delete your record, we will not be able to provide you with certain information and, in the case of Members, we will be unable to prompt you to renew your Membership or to supply you with certain Member benefits.