Broadway is committed to ensuring that your privacy is protected.
WHAT DO WE WANT TO KNOW?
- Contact information including email address, postal address and telephone numbers
- Demographic information such as: age, gender, marital status, household size, and communication preferences
- Payment information at ticket/concessions/cafebar point of sale including at our physical box office and at www.broadway.org.uk. This includes credit/debit card information (first six and last four digits of the card, cardholder’s name as recorded on the card and card expiry date)
- Gift card information
- Other information relevant to competitions and offers which will require a separate opt-in upon completion
- Other information relevant to customer surveys. This information may include race, gender, sexuality, postcode information and is anonymised. This is used for the sole purpose of performance monitoring.
We need to include details about the financial information we collect in connection with payments.
WHAT ARE WE DOING WITH YOUR INFORMATION?
“Broadway” and the third parties set out below may collect the following information in order to fulfil orders, complete transactions and for the servicing of our membership programme.
Our legal basis for the processing of this data is contractual in order to complete transactions at point of sale and fulfil requested orders and consensual for ongoing marketing in order to understand our customers needs and provide a better service
Data is processed for the following reasons:
We use this data to improve our products, services and your Broadway experience online and in our physical space; We use this data to send promotional emails dependent on your personal preferences via an opt-in process at point of sign-up. These include emails regarding our:
- Film programme
- Non-film events
- Specialist programming
- Special offers
- New products
We may on occasion use your data to contact you for market research purposes and in order to improve our products, services and your “Broadway” experience. We may contact you by:
- Direct mail
NHS TEST AND TRACE
"Broadway" is acting as the "data controller" in regards of collecting the following information at point of sale (both in-person and online) to faciliate NHS England's Test and Trace programme:
- the names of all customers or visitors, or if it is a group of people, the name of one member of the group
- a contact phone number for each customer or visitor, or for the lead member of a group of people
- an email address for each customer or visitor, or for the lead member of a group of people
- date of visit and arrival and departure time
By maintaining records of staff, customers and visitors (and sharing these with NHS Test and Trace where requested) this can help to identify people who may have been exposed to the virus.
This may be necessary in the event that an individual, who is present in a place at the same time as you, tests positive for coronavirus. NHS Test and Trace may then contact you to provide appropriate advice.
Its legal basis for collecting this information is covered by GDPR Article 6(1)(f): legitimate interests. The Department of Health and Social Care will act as "data controller" at the time of receiving this data from "Broadway".
Where your data is passed to NHS Test and Trace in the case of a suspected outbreak, your information will be kept for up to 8 years, as part of the standard contact-tracing retention period set out by PHE.
DHSC’s legal basis for processing your personal data is:
- GDPR Article 6(1)(e): the processing is necessary for the performance of its official tasks carried out in the public interest in providing and managing a health service
- GDPR Article 9(2)(h): the processing is necessary for the management of health or social care systems and services
- GDPR Article 9(2)(i): the processing is necessary for reasons of public interest in the area of public health
- DPA 2018 – Schedule 1, Part 1, s.3: Public Health
- DPA 2018 – Schedule 1, Part 1, (2)(2)(f): Health or social care purposes
WHO IS “BROADWAY” SHARING THIS WITH?
These third-parties acting include the following:
- Rocket Science Group trading as Mailchimp – Used to distribute marketing and non-marketing newsletters.
- Vista Entertainment Solutions –Used to process individuals data for ticket purchasing, membership and gift cards.
- Payment Express – Used to process individuals data for transaction completion at point of sale.
- Typeform S.L. – Used to collect and collate individuals data for market research processing by “Broadway”.
- Donr - Used to to collect telephone number and mobile network data for transactions related to donations given by text.
- Zonal - Member data used to process member discounts within Broadway Cafe Bar app.
“Broadway” has ensured that all third-parties adhere to their responsibilities as “data processors” as defined in the EU General Data Protection Regulation.
Performance surveys, distributed at events/films, hosted by Broadway Cinema will be shared with our funders:
- BFI (British Film Institute)
- Arts Council England
The data collected from these performance surveys will be retained for one-year only and then destroyed.
HOW ARE WE KEEPING YOUR DATA SAFE?
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
“Broadway” will only hold personal data for as long as is necessary for the purposes for which the personal data was originally intended or until an individual requests for their data to be erased as set out in the section below.
WHAT RIGHTS DO YOU HAVE?
Under article 7 of the EU General Data Protection Act you have the right to withdraw your consent at any time. It is “Broadway’s” responsibility to make this process as simple as the initial consent giving.
Under article 15 of the EU General Data Protection Act you have the right to request details of personal information which “Broadway” hold about you.
Under article 17 of the EU General Data Protection Regulation you have the right to request that your data is erased
Under article 18 of the EU General Data Protection Regulation you have the right to restrict the processing of your data. This is applicable in the following circumstances:
The accuracy of the data is being contested and Broadway are in the process of verifying this
The data has been unlawfully obtained and restriction has been requested by the individual rather than erasure of the data
The individual requires Broadway to keep the data in order to establish, exercise and defend a legal claim
Under article 20 of the EU General Data Protection Regulation you have the right to receive the data you have requested in a structured, commonly-used and machine readable format. Furthermore you have the right to send this data transmitted to one data controller to another (where technically feasible).
It is our duty to respond to your request regarding any of the reasons described above within one month of the original request unless otherwise specified by us when requests are deemed complex or numerous. It is “Broadway’s” duty to specify the reason for this extension.
All of the processes described above are free of charge. If you would like to exercise these rights please write to Broadway, c/o Broadway Cinema and Arts Centre, Broad Street, Hockley, Nottingham, ENGLAND, NG1 3AL or email email@example.com.
If you believe that any information we are holding on you is incorrect or incomplete, please write to us at the above address or email us on firstname.lastname@example.org as soon as possible. We will promptly correct any information found to be incorrect.
WHAT WE WON’T DO WITH YOUR DATA
“Broadway” will not sell, distribute or lease an individual’s personal information.
WHAT ARE COOKIES?
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
WHAT HAPPENS WHEN YOU LEAVE OUR WEBSITE?
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.