Last Updated: 11th August 2020 Next Planned Update: 11th August 2021
Introduction: Stage2Stage Productions Limited (12786235) are a Newcastle based theatre and community entertainment company, and will be the data controller and accountable for the security and fair processing of any personal data that you provide to us. While we have not yet appointed a data protection officer due to the volume of our collection and processing actives being low enough as to not require one, we have nominated someone within the business who is responsible for our compliance under the General Data Protection Regulation.
Should you have any questions relating to this policy or how we process or manage your data please contact us directly at firstname.lastname@example.org
In line with the GDPR you have the right to make a complaint to the Information Commissioner’s Office (ICO) www.ico.org.uk, should you feel we are not correctly managing your personal data. However, before you speak with the ICO we would ask that you contact us first to resolve your concerns.
Data Collection and Use: We take the protection and management of your data seriously and will never share your data with any third party without your explicit consent, unless we are required to do so by law. The data we collect will only be used to:
We will only ever collect information that you provide to us such as your email address and in some cases full name. We will never collect data via third parties. The minimum level of data we retain will be Full Name and Email Address, however in some cases for ticket purchase and delivery we will be required to process address details.
As the business grows, our needs to process your data may change and evolve with the business. Should the purpose for collection and processing change you will be notified via email and new consent will be sought for the new purpose.
Data Retention: We will only retain the data you provide for as long as necessary, in most cases this will be until you withdraw consent for marketing. To determine retention period for specific cases whereby we need additional data such as you providing support or services for a show, the legal basis for storage of accounts will be used and data will be retained for the minimum legal requirements in the country we entered into the contract.
Your Rights: Under the GDPR you have several legal rights in relation to your personal data, in most cases these can be carried out without further discussion. In limited cases we may need to retain your data for another legal purpose, in those circumstances we will explain our reason for retention and when you can expect the request to be completed. In all cases prior to completing the request we will request a copy of your ID in a valid format (either Full Driving Licence or Passport) to ensure you are the data subject.
The following will always be completed within 1 calendar month of your request.
Right of access – You have the right to request all personal data and supplementary information we hold and confirmation that we are processing this data lawfully. This is more commonly referred to as a Subject Access Request.
Right of erasure – You have the right to request all personal data is deleted or removed where we have no good reason to continue the processing of that data. This is more commonly referred to as a Right to be Forgotten request. Should we be unable to remove certain aspects of your personal data we will provide our reasons for rejecting the request in writing.
Right of rectification – We ask that you keep us up to date with any changes in your personal data and will send an annual reminder to do so, however, should you wish us to update your data outside that annual window please let you know and we will ensure that data is always accurate.
Right to object – You also have the right to object where we are processing your personal data for direct marketing purposes.You are always free to withdraw your consent to marketing, this can be done either via email or using the unsubscribe button within our emails.
Should you wish to action any of these requests please email us at email@example.com. No fee is usually required, however we reserve the right to charge a reasonable fee if your request is unfounded, repetitive, or excessive. In those circumstances we may also refuse the request to comply.
Third Party Transfers: We will never transfer your data to a third party without your consent or a legitimate legal basis to do so, such as local law enforcement. We do however use a third-party partner for our marketing communications and their details are provided below.