PRIVACY NOTICE

Privacy Notice for the Barn Theatre Trust Limited (Company Number 01604619) and The Barn Theatre Club Limited (Company Number 00759007), hereinafter referred to as The Barn Theatre.

The Barn Theatre, registered address: Barn Theatre, Handside Lane, Welwyn Garden City, Herts, AL8 6ST are committed to respecting your privacy and applicable privacy laws. We will only process such information as permitted by the EU General Data Protection Regulation and other applicable local laws as described below.

  1. Legitimate interest notice

 The Barn Theatre will process your personal data for the below purposes: 

2. What personal data do we/or we may collect about you?

3. What is the purpose of the processing?

4. 3rd Party involvement?

a)

General personal information: your name, home address, postal address, phone numbers (home and mobile), personal email. and/or Parental consent

MEMBERSHIP, TICKET SALES & MARKETING

Jet Virtual (call centre used by box office), Savoy Systems (our box office system provider), Elan Media (our website host), Terranova Restaurant (for meal deal tickets), Triographics Printers Ltd (Barn news postal addresses)

b)

Your Interests: your personal preferences with regards to interests within the theatre.

The processing of this personal data is necessary for understanding what our members are interested in volunteering for.

Elan Media

c)

Financial data: Card number, expiry date and security number alongside name and address

The processing of this personal data is necessary to take payment for the sale of tickets

Savoy Systems, Jet Virtual

d)

Children’s data: in addition to collecting the above General Personal information we may need to collect the below for our youth groups/productions/members who are under the age of 18

The processing of this personal data is necessary to comply with legal obligations surrounding children’s welfare

Elan Media

  1. Retention period

The Barn Theatre will keep this information, together with data retained from the membership applications, for the course of the membership year and, to the extent permitted for legal. 

  • Your personal data that we process for any purpose or purposes shall not be kept for longer than it is necessary for that purpose or those purposes. This time may vary depending on the type of the processed personal data and the purposes of processing. Notwithstanding these provisions, we will retain your personal data to the extent that we are required to do so by law.
  1. Transfer of your personal data
  • Access to personal data is limited and will only be allowed on a strict need to know basis. Your personal data will primarily be processed by personnel of the membership, box office and finance departments, where relevant and necessary. We have taken steps to ensure that there is adequate protection for your personal data in these circumstances.
  • Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law and if required for the legal protection of The Barn Theatre legitimate interests in compliance with applicable laws.
  • Personal data may also be shared with third party service providers, who will process it on behalf of The Barn Theatre for the purposes above. Before transfer your personal data to third parties, we take additional security measures to protect your personal data ().
  1. Security measures

The Barn Theatre has taken appropriate technical, administrative, physical and procedural security measures, consistent with local and international information practices, to protect the personal data from misuse, unauthorized access or disclosure, loss, alteration, or destruction. These measures include:

  • Physical safeguards, such as locked doors and file cabinets, and secure destruction of media containing personal data.
  • Technology safeguards, such as use of anti-virus and endpoint protection software, passwords.
  • Organizational safeguards, through training and awareness programs on security and privacy, to ensure personnel understand the importance and means by which they must protect personal data, as well as through privacy policies and policy standards that govern how The Barn Theatre Trust treats personal data.
  • The Barn Theatre will process your personal data primarily on the basis of, 6 para. 1 lit. b) and Art. 6 para. 1 lit. f) of the EU General Data Protection Regulation. In exceptional cases, The Barn Theatre may also process your personal data on the basis of Art. 6 para. 1 lit. a), and lit. c) to e) of the EU General Data Protection Regulation.
  1. Your rights
  • According to the EU General Data Protection Regulation, you have the right to access, rectify and erase personal data that relates to you and in line with applicable law, to restrict or object the processing of such data. You also have the right to lodge a complaint with a supervising authority. To rectify or request access to your personal data or execute any other of the aforementioned rights please contact dpo at any time. There are exceptions to these rights so that access may be denied, for example, if making the information available would reveal personal information about another person or if The Barn Theatre is legally prevented from disclosing such information
  • For questions and concerns you can also contact the dpo@barntheatre.co.uk, Handside Lane, Welwyn Garden City, Herts, AL8 6ST
  1. Your obligations
  • If you intend to provide us personal data of another person (e.g. emergency contacts, etc.), please obtain the explicit and freely given consent of this person before such provision and to its processing.
  • It is important that we maintain up to date records of key information on you. Please us of any changes in your personal circumstances as soon as they occur (e.g. change of address, phone number etc.). From time to time we may ask you to complete a new personal information form to ensure our records are up to date.
  • Where we require personal data to comply with legal, contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage the relationship (or to meet obligations placed on us. In all other cases, provision of requested personal data is optional.