GDPR
Understanding the General Data Protection Regulation (GDPR)
The GDPR is the biggest change to data privacy laws in the last 20 years and came into effect on 25 May 2018. The new regulation focuses on how an individual’s data is used and processed and although most of the principles and terminology have not changed, the GDPR enhances rights for individuals and introduces greater transparency and accountability.
In the case of Westbury Festival (“the festival”), it is essentially about how we collect your data and what we do with it.
How we collect data
- The festival collects personal data about you from your application to purchase tickets from our online ticket agency, Ticket Source, and our local Westbury box office.
- From your interactions with us, whether over the phone, in person, in writing or through our website or emails.
How we use your personal data
The main way in which we may use your personal information is to:
- Communicate with you and provide information on festival events and news using the data processor MailChimp
- Contact you about ways that you can support the festival both financially and with your time
Sharing your personal information
The festival will not share your personal information with any other organisations.
How the law protects you
We are only allowed to use personal information if we have a proper reason to do so. The law says we must have one of the following reasons:
- To fulfil a contract we have with you
- When it is our legal duty
- When it is in our legitimate interest
- When you consent to it
The festival collects and processes your personal information under the following lawful basis:
- For contract purposes so that we can contact you in case of a cancellation or in the case of problems with a payment
- In the legitimate business interests of the festival to send you information that we believe is informative and relevant to you and in a way that you might reasonably expect.
Retaining your personal information
We will retain your personal information for as long as it is necessary for the purposes stated above. However, we will ensure to maintain the security and protection of any information we hold.
Your rights and how we respond
You may request access to a copy of the personal information we hold about you.
If you believe the personal information we hold about you in inaccurate, incorrect or incomplete, please contact us a soon as possible at info@westburyfestival.org.uk so we can update it.
At any time you may withdraw the consent you granted for your personal information to be held by the festival. You can exercise these rights at any time by contacting us using the contact information on this website. Please note we may need to validate your identity before we can respond to your request. We aim to respond within 30 days from receipt of request. We will let you know if we need additional time to complete and will also let you know whether we accept or refuse your request.
Security
We take all reasonable precautions to keep your personal information secure but if you have any concerns about the use of your personal data, or the way we handle your requests relating to your rights, you can raise a complaint directly with us using the contact details on this website.
If you have any questions about the way the festival collects and uses your personal information, please contact info@westburyfestival.org.uk. If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with the UK Information Commissioner’s Office via the details available on their website www.ico.org.uk
