Understanding the General Data Protection Regulation (GDPR)
The GDPR is the biggest change to data privacy laws in the last 20 years and came into effect on 25 May 2018. The new regulation focuses on how an individual’s data is used and processed and although most of the principles and terminology have not changed, the GDPR enhances rights for individuals and introduces greater transparency and accountability.
In the case of Westbury Festival (“the festival”), it is essentially about how we collect your data and what we do with it.
How we collect data
How we use your personal data
The main way in which we may use your personal information is to:
Sharing your personal information
The festival will not share your personal information with any other organisations.
How the law protects you
We are only allowed to use personal information if we have a proper reason to do so. The law says we must have one of the following reasons:
The festival collects and processes your personal information under the following lawful basis:
Retaining your personal information
We will retain your personal information for as long as it is necessary for the purposes stated above. However, we will ensure to maintain the security and protection of any information we hold.
Your rights and how we respond
You may request access to a copy of the personal information we hold about you.
If you believe the personal information we hold about you in inaccurate, incorrect or incomplete, please contact us a soon as possible at firstname.lastname@example.org so we can update it.
At any time you may withdraw the consent you granted for your personal information to be held by the festival. You can exercise these rights at any time by contacting us using the contact information on this website. Please note we may need to validate your identity before we can respond to your request. We aim to respond within 30 days from receipt of request. We will let you know if we need additional time to complete and will also let you know whether we accept or refuse your request.
We take all reasonable precautions to keep your personal information secure but if you have any concerns about the use of your personal data, or the way we handle your requests relating to your rights, you can raise a complaint directly with us using the contact details on this website.
If you have any questions about the way the festival collects and uses your personal information, please contact email@example.com. If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with the UK Information Commissioner’s Office via the details available on their website www.ico.org.uk