Privacy Policy

This means that we are responsible for deciding how we hold and use personal data about you. We aim to be clear about how we use your personal data, and this privacy notice will inform you as to how we look after your personal data, what personal data we process and why.

It is important that you read this privacy notice together with any other privacy notice we may provide when collecting or processing personal data, so you are fully aware of how and why we are using your personal data

What personal data do we collect and process

We will collect, use and store personal data when you:

• purchase a ticket, over the counter, by phone or via our website
• sign up to attend one of our events or workshops
• sign up to our mailing list via our website
• provide feedback about our services
• sign up for our Friends and/or Access for All scheme
• apply to take part in our Summer Youth Production
• make a personal donation
• communicate with us
• visit the Theatre

The personal data we hold may include your:

• Name
• Postal Address
• Telephone Numbers
• Email address
• Ticketing/transaction history
• Billing information
• Donation history
• Preferences as to how we communicate with you about our activities, shows, or events
• Information that is available publicly
• Image as captured on CCTV

Special Categories of Personal Information

We may also collect and store sensitive information relating to disability if you require specific access arrangements for the Theatre, or to determine eligibility for our Access for All Scheme. This sensitive information will be held securely and only used for this limited purpose.

Consequences of not providing personal data

We only ask you to provide personal data when we have a good reason to do so and there may therefore be consequences if you do not provide particular information to us. If you choose not to provide us with the personal data requested, we will tell you about the particular implications of any such decision at the relevant time.

How do we use your personal data?

We will only use your personal data when the law allows us to. Most commonly we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter or have entered into with you.
• When it in our legitimate interests and your interests, and when fundamental rights do not override those interests. We consider our legitimate interest to be the management of the Theatre and provision of the best service and experience possible.
• When we have your consent to contact you.
• When we need to comply with a legal or regulatory obligation.

We will use the data we have collected to:

• Contact you if there are any important changes to your booking or show information.
• Administer your ticket sale, membership or donation.
• Respond to feedback or information you have submitted or respond to a request for information.
• Keep a record of your relationship with us including purchase or donation history.
• Ensure we know how you prefer to be contacted, and that details we hold are accurate.

If you opt into marketing communication we will:

• Tell you about changes to our services or information on new services, productions, events, offers, and opportunities to support us that we think you will find interesting.
• Analyse your personal information to create a profile of interests and preferences so that we can contact you with information most relevant to you.
• Keep a record of the emails we send you, and we may track whether these are received or opened so we can ensure we are sending relevant information. We may then track any subsequent actions online, such as buying a ticket.
• Occasionally undertake customer research to help us understand how we can improve our products, services or communication to better understand our audience.

If you no longer wish to receive marketing information by post or email about our programme, offers, fundraising activities or customer research, you have the option to change any of your contact preferences at any time by logging into your account online, or by contacting the Theatre using the contact details at the end of this notice. An unsubscribe option will also be included in any email we issue.

If the personal data we hold for you is incorrect or incomplete we would ask you to contact us as soon as possible to request that it be updated.

Using our website

When you use our website, goh.co.uk, we are not collecting personal data. We use functional cookies to record information about the choices you have made and to allow us to tailor our website to our users. Further details about how we use functional cookies is available in our Cookies Policy.

Cookies

Data sharing and third parties

We engage the services of a number of third party service providers, who act as Data Processors, to assist us with a number of our administrative services and we rely on their contractual obligation to us as the legal basis on which we collect and share personal data. These third parties include our ticketing system provider, payment provider, email distribution service, mailing house and a business lead generator.

We may share personal data with professional advisers such as bankers, lawyers, auditors and insurers based in the UK who provide us with professional services to help protect the Theatre’s interests. The third party service providers that we share personal information with, will only use your personal data to the extent necessary to allow them to perform the services they are contracted to provide for us.

We require all third party service providers to respect and safeguard the privacy of your personal data and treat it in accordance with the law and we do not allow them to use the personal data we share with them for their own purposes.

The Theatre also gathers data via CCTV throughout the venue and via Box Office telephone calls. We hold this information centrally on our systems but may also share this information with partners including the PSNI.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees and third parties who have a genuine business requirement to use it.

We have put in place procedures to deal with any suspected personal data breach, and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

A copy of our Data Retention Schedule is available on request, using the contact details at the end of this privacy notice.

Changes to this notice

This privacy notice will be reviewed annually and updated as and when required. The most up to date privacy notice will always be available on our website and if we make any significant changes in this notice, we will clearly identify any changes we have made in any updates we communicate.

Your duty to inform us of changes

It is important that the personal information we hold about you is accurate and current. Please ensure that you keep us informed if your personal information changes.

Your rights under the data protection legislation

Under the data protection legislation you have the following rights in relation to the personal data we process. These are not absolute rights and can only be exercised in certain circumstances.

• The right to request a copy of personal data we hold about you.
• The right to request that inaccuracies in your personal data be corrected or updated.
• The right to object to us processing your personal data where we are relying on a legitimate reason for doing so.
• The right to request a restriction on us processing your personal data or erasure of your personal data in specific circumstances.
• The right to withdraw consent if we are relying on your consent to process your personal data.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights) and we will aim to respond to all legitimate requests within one month. If the request is particularly complex or a number of requests have been made it may take us longer to process your request but this will be explained to you. We may also charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, alternatively, we may refuse to comply with your request in these circumstances.

If you have any questions about the way in which your data is being processed, or the rights detailed above, please contact the Theatre’s Data Protection Officer by email at info@goh.co.uk or in writing at the Grand Opera House, Great Victoria Street, Belfast BT2 7HR.

If you are still not happy, you have the right to make a complaint to the Information Commissioners Office, the UK supervisory authority for data protection issues at:

Information Commissioners Office, 3^rd Floor, 14 Cromac Place, Belfast, BT7 2JB.