PRIVACY POLICY

 

Legitimate Interests

The term ‘legitimate interests’ applies to the business interests that we as an organisation have in collecting, holding and processing your personal data. These do not supersede your personal rights and interests.

Our legitimate interests are:

• Direct marketing to you, ensuring you are aware of The Poly’s productions, activity and opportunities and that the marketing is relevant to you.
• Maintaining a relationship with you if you are an artist, venue, partner organisation, participant, donor, funder, stakeholder, media, community group, education centre or business.
• Photography
  We occasionally take photographs at our shows and events to showcase our work, our building, audience and participants
  Photography is a part of our ‘legitimate interests’ to market our work.
  Here are the most common ways in which we use our photographs:
  - On our website
  - On our Social Media
  - In Press
  - In reports to stakeholders and funders

All images are stored on our secure, password protected network. It can only be accessed by staff who have a legitimate business need. The latest released updates from our software and network providers are applied to our systems which ensure their continued security. However, no company or system can guarantee complete security as this can be affected by unknown, outside factors.

How is my information stored?

Your personal information is stored on our secure, password protected network. It can only be accessed by staff who have a legitimate business need. The latest released updates from our software and network providers are applied to our systems which ensure their continued security. However, no company or system can guarantee complete security as this can be affected by unknown, outside factors.

How long will my data be stored for?

We will keep your personal data for as long as it is relevant and appropriate to our legitimate business uses as outlined above. We believe it is reasonable to obtain new consent to holding personal data every 5 years, so that individuals can re-evaluate how and why their data is held by us.

What rights do I have to access, change or remove my information?

You do not have to provide your personal contact information to us, but do please be mindful there may be instances that may hinder our ability to provide the service to you.

You do not have to provide us with evaluation data, and if you do, you can anonymise it.

You have the right to a copy of the information we have collected from you. Additionally, you are entitled to have inaccurate personal data rectified or destroyed.

You have the right to remove your personal information by ‘opting out’ at any time, by either clicking on the unsubscribe link at the bottom of all emails or:

Email: info@thepoly.org
Call on: 03126 319461 or
Write to: The Poly, 24 Church Street, Falmouth Cornwall TR11 3EG 

We welcome any amendments you may suggest. It is our obligation to keep any data we collect as accurate as reasonably possible and in accordance with GDPR regulations.
Go to www.ico.org.uk to find out more about your individual rights.

NHS Test & Trace

The Poly is working with NHS Test and Trace as part of the country’s ongoing COVID-19 response. 

NHS Test and Trace is a contact tracing service run by the Department of Health and Social Care (DHSC).

We’ll collect the names and contact telephone numbers, and date of visit and arrival and departure time of all customers attending an event at The Poly, or if it is a group of people, the name and number of one member of the group. We’ll collect the information when you book a ticket through our ticketing system. You will not need to provide this information to us if you are visiting to browse in our Guild shop or Spring Gallery.

Your information is shared with Department of Health and Social Care (who run NHS Test and Trace). This is only shared in the event that someone who has tested positive for COVID-19 has listed The Poly as a place they visited recently, or if The Poly is identified as potential location of a local outbreak of COVID-19.

The data you provide for the purpose of NHS Test and Trace will be deleted after 21 days by The Poly. Where your data is passed to NHS Test and Trace in the case of a suspected outbreak, your information will be kept for up to 8 years, as part of the standard contact-tracing retention period set out by Public Health England. 

For more information on how your data is used by NHS Test and trace services see their website here.

Any questions?

If you are unhappy with our use of your personal data, you have the right to complain to the Information Commissioner’s Office . We would encourage you to contact us in the first instance so we can attempt to resolve any concerns on 01326 319461 or info@thepoly.org

We may change this Privacy Policy from time to time. If we make any significant changes in the way we treat your personal information, we will make this clear on The Poly website.