Privacy

Essex Cultural Diversity Project Respects Your Privacy

Essex Cultural Diversity Project (ECDP) understands that your personal information and privacy is important to you, and therefore makes every effort to ensure that the information you share with us is recorded accurately, retained securely, used only according to your wishes and only held for as long as it is needed. This Privacy Statement outlines how we collect your data and what we do with it.

We protect your personal information and adhere to all current data protection act legislation with respect to protecting privacy and processing data. ECDP does not give out, sell or trade any personal data with external organisations, or share your personal data with any third parties including project partners without your consent.

Our mailing list

When you sign up to our e-mailing list ECDP will only ask for your email address, as that is all we need to be able to contact you by email and keep you up to date with our activities. Once you have opted in, we will send you regular email updates about our programme and the festival, any special news bulletins we think may be of interest to you, opportunities to participate in projects, and event invitations.

To deliver our newsletter we use a third party provider MailChimp, who hold your email address at a secure location. We use MailChimp software to gather statistics on opening rates and clicks on links, which help us monitor and improve our communications. Individuals can unsubscribe at any time from newsletters by clicking the unsubscribe link on each e-newsletter.

You can view MailChimp’s privacy and security notice at mailchimp.com/legal/privacy.

Third party box offices, event sign-ups and website links

Occasionally, for events we have organised, we may use a third party box office, such as Leaping Hare in Norfolk, as we do not have the facilities in-house to take bookings. When you are booking tickets through them or wanting to join their mailing list, they will collect personal information about you such as your contact details and payment method, and will give you the opportunity to indicate if you do or do not wish to receive more information from them on first contact.

You might also find links to third parties on our website and promotional material, and when signing up to attend events promoted by us that we have not directly organised. These are usually for other creative organisations who are project partners, or who are organsing their own events as part of our programme, or which we have agreed to promote.

These other organisations may have their own booking systems independent of ECDP, and should have their own privacy policies. We do not accept any responsibility or liability for their data protection procedures as we have no control over them, and so we would strongly advise you to consult their own privacy policies.

Special Event Invitations on Eventbrite

Occasionally we may invite you to attend a free event and ask you to RSVP via Eventbrite. In this case we’ll ask for your full name, your email address, and may request additional information such as the name of the organisation. This additional information will usually be optional, and is only required to help organisers monitor numbers, reach and inclusiveness of the event. If we are organising events in partnership with an external organisation and want to share attendee information with them, we will make this clear on the Eventbrite page.

Please note that Eventbrite is a third party service that is not owned or managed by the ECDP. You should refer to Eventbrite’s Terms and Conditions and Privacy Policy, as we do not accept any responsibility or liability for their policies. Eventbrite operates in the USA and subscribes to the EU-US Privacy Shield, which commits subscribers to adhering to European standards of data protection. Eventbrite’s Terms and Conditions can be found at eventbrite.co.uk/tos, and their Privacy Policy can be found at eventbrite.co.uk/privacypolicy

For those who do not want to use Eventbrite, attendees can email ECDP at indi@essexcdp.com to book their place for free events.

Feedback and Evaluation

ECDP may invite you to undertake post-event evaluation, at which time you will be asked to share personal information such as your name, email address, age and any comments/opinions about the event you attended. We use this information for monitoring purposes and to pass on to partners and funders. However, all responses will be anonymised before sharing or made public, and all completed questionnaires and responses will be destroyed within six months of collection.

Feedback is collated through questionnaires forms at events, and online via SurveyMonkey, which operates in the USA and subscribes to the EU-US Privacy Shield, which commits subscribers to adhering to European standards of data protection. For more information about SurveyMonkey’s privacy policy visit surveymonkey.com/mp/legal/privacy-policy/

For those who do not want to use SurveyMonkey and wish to give us their feedback directly, then attendees can email ECDP directly at indi@essexcdp.com

Google Analytics

When someone visits www.essexcdp.com, we use Google Analytics to collect statistical data and details of visitor patterns which tell us which parts of our website visitors use most often. None of this information uses, or requires the use, of personal information and is processed in a way that does not identify individuals. We do not make any attempts to find out the identities of individuals visiting our website.

Security and Storage

The transmission of information via the Internet or email is not completely secure. However, once we have received your personal data, we will take all reasonable steps to prevent unauthorised access. We will process, disclose or share your personal data only if required to do so by law or in the good faith belief that such action is necessary to comply with legal requirements or legal process served on us or the website.

ECDP uses Dropbox and Google Drive for file sharing, which is a secure place for our files. However, any sensitive data related to personal information about our audiences and those we work with will be kept in a secure password protected office archive for extra security.

More information about Dropbox’s privacy can be found at dropbox.com/privacy

Google’s Terms of Service is at google.com/drive/terms-of-service, and their privacy policy can be found at policies.google.com/privacy?hl=en-GB&gl=uk

Your Rights and Information Requests

You have several rights, which we will endeavor to adhere to, and we will aim to respond to information requests within one month. Please note that we will need to ask for valid proof of identification before proceeding with any requests. Your rights are detailed below:

  • RIGHT TO BE INFORMED – Individuals should be informed of how their data is collected, stored and processed in a clear, accessible way (the purpose of this Privacy Statement)
  • RIGHT OF ACCESS – Individuals can request access to a copy of their data in electronic form and details of how it is processed
  • RIGHT TO RECTIFICATION – Individuals are entitled to have their data corrected if it is inaccurate or incomplete
  • RIGHT TO ERASURE – Also known as ‘the right to be forgotten’, this permits individuals to request the deletion of their data
  • RIGHT TO RESTRICT PROCESSING – Individuals can request a halt on processing if they object to accuracy or purpose but you can still hold the data until resolved (this would be an immediate action by us)
  • RIGHT TO DATA PORTABILITY – Individuals can request their data in a suitable digital format, sent either directly to them or to a third party
  • RIGHT TO OBJECT – Individuals can object to the processing of their data

Who to contact

We want to make sure that your personal information is accurate and up-to-date, and you may ask us to correct or remove information at any time. If you wish to exercise any of your rights in relation to the data we hold about you, as listed above, then please do not hesitate to get in touch. Contact Jo Nancarrow, Digital and Admin Lead for ECDP on jo@essexcdp.com who is acting as the data controller for the organisation.

You also have the right to lodge a complaint with the Information Commissioners Office (ICO) if you believe your data has been processed in a way that does not comply with data protection. You can do so by calling the ICO helpline on 0303 123 1113 or via their website at ico.org.uk

 

Updated: 17 May 2018