Shw'mae

Siarad Cymraeg? Visit the Welsh site.

Dewch i mewn
Account Login Donate Basket {{vm.cart_counter}}

Privacy Policy

Wales Millennium Centre ("we", "us" or "our") is committed to protecting and respecting your privacy.

This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us (including data collected/provided online by telephone or in person), will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purpose of the General Data Protection Regulation 2016 (the "Regulation") the data controller is Wales Millennium Centre, a company limited by guarantee, registered in England and Wales with company number 3221924 and charity number 1060458 whose registered address is at Bute Place, Cardiff CF10 5AL.

Our nominated representative for the purpose of the Regulation is our Finance and Corporate Services Director.

INFORMATION WE MAY COLLECT FROM YOU

We may collect and process the following data about you:

  • Information that you provide by filling in forms on our site wmc.org.uk ("our site") and other sites hosted by Wales Millennium Centre. This includes information provided at the time of registering to use our site, subscribing to our services, placing orders, posting material or comments or requesting further services. We may also ask you for information when you enter a competition or promotion sponsored by us, and when you report a problem with our site.
  • If you contact us, we may keep a record of that correspondence.
  • We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
  • Details of transactions you carry out through our site and of the fulfilment of your orders (including any services we provide you with as a result of your visit to our venue); and
  • Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.

Such data may include your name, delivery address, email address, telephone number and debit and/or credit card numbers. We do not retain any of your credit or debit card information.

We may also ask you to answer various general questions about yourself including any areas in which you are interested so that information can be tailored to cover the areas in which we believe you might be interested for future reference.

USES MADE OF YOUR INFORMATION

GENERAL

We will use information held about you in the following ways:

  • To ensure that content from our site is presented in the most effective manner for you and for your computer.
  • To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
  • To carry out our obligations arising from any contracts entered into between you and us.
  • To allow you to participate in interactive features of our service, when you choose to do so.
  • To notify you about changes to our service and your visits to our venue or if you need any additional information to facilitate your visit. 
  • To provide aggregate information about our users to stakeholders (but not to advertisers).
  • To conduct desktop research and fundraising activities to promote the interests of Wales Millennium Centre as a charity.

MARKETING PURPOSES

We will only send you information about our work, shows and events if you have given us specific, 'opt-in' consent to do so.

If you change your mind and wish to stop receiving emails from us you can click 'unsubscribe' on any email sent to you by us; log into your account to change your preferences direct, or call our Contact Centre on 029 2063 6464 to ask them to update your record. The latter two options also provide you with the opportunity to change your postal and telephone preferences.

If you have given us permission to contact you with marketing information, we will cease to use that data for marketing purposes after seven years of inactivity on your account except in very particular circumstances e.g. where a production on your ticket history falls into a specialist or niche category whereby we have reason to believe you may wish to be informed of a similar type of event, or of a particular company's return visit in the future.

We will continue to retain records on our system for up to 15 years from the last noted activity for analytical purposes, which form a legitimate interest for our business.

We will not supply your details to third party organisations to contact you with marketing information unless you have given us specific permission to do so.

FUNDRAISING PURPOSES

We analyse information you provide and how you've helped us, to enable us to understand our supporters better. To make sure you only receive fundraising communications which are relevant, we may undertake research to help us better understand our supporters and to contact appropriate people who may be able to support us further. This may take the form of internal profiling, screening and ranking or segmentation exercises carried out in-house. In doing so we will make use of additional publicly available information about you. As part of our fundraising activities, we may seek to supplement booking information with qualified information such as business network information, personal connections and other publicly available information pertaining to: age, place of residence, wealth, career, interests and public donations to other organisations.

We will continue to retain records on our system for up to 15 years from the last noted activity for analytical purposes, with the exception of donors who gave to any capital campaigns, such as our opening campaign, whereby we will retain these records for up to 30 years, which form a legitimate interest for our business.

We never use data enrichment companies or any third party companies to provide personal information.

WHO CAN VIEW YOUR INFORMATION?

In 2007 the Centre created a Consortium that makes it possible for other arts organisations to benefit from the same Customer Relationship Management (CRM) / Ticketing System we use, Tessitura, at a lower level of investment than would otherwise be required from them. We offer a collegiate approach to the use of Tessitura with consortium partners, sharing a system for mutual benefit rather than a more traditional corporate relationship.

The organisations in our Consortium are currently:

  • Welsh National Opera
  • National Dance Company Wales

Whilst all "organisation specific" data is locked down to the appropriate organisation (ie transactional information, payment data, customer interactions, ticket history etc.), there is a general tab on a customer's record which is shared amongst Consortium partners. This means that each consortium member can view the following information: Name, Address, Phone Number, E-mail Address.

However, under no circumstance are they allowed to make use of this information unless you have specifically given them permission to do so. 
If you would like further information on our CRM System, Tessitura and the Consortium please click here

DISCLOSURE OF YOUR INFORMATION

We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or if we in good faith believe we are required to do so, or in order to enforce or apply our terms of use  or conditions of sale and other agreements; or to protect our rights, property, or safety or the rights property or safety of our customers, or others.

This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates.  If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.  Please check these policies before you submit any personal data to these websites.

ACCESS TO INFORMATION

The Regulation gives you the right to access information we hold about you. To exercise this right simply contact us at data-protection@wmc.org.uk or by post addressed to Data Lead, Wales Millennium Centre, Bute Place, Cardiff Bay CF10 5AL and we will respond to you within one month.

If you have any concerns about our use of your data and how that complies with the Regulation, or if you wish to initiate your "Right to be Forgotten", please contact us on data-protection@wmc.org.uk or call our Contact Centre on 029 2063 6464.

See also the paragraphs below entitled "Our Use of CCTV" and "Recordings of Visitors to our Venue".

MONITORING OF USER TRAFFIC

We may monitor user traffic on an aggregate basis in order to help us develop and improve our site for the benefit of all users.

IP ADDRESSES

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.

 

How Google determines demographic and interest information

When someone visits a website that has partnered with the Google Display Network, Google stores a number in their browsers to remember their visits. This number uniquely identifies a web browser on a specific computer, not a specific person.

Browsers may be associated with a demographic or interest category based on the sites that were visited. In addition, some sites might provide Google with demographic information that people share on certain websites, such as social networking sites. Google may also use demographics derived from Google profiles.

WHERE WE STORE YOUR PERSONAL DATA

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.

Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted during transit using TLS 1.2 encryption.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the internet and the transmission of information via the internet are not fully secure. Although we will use reasonable endeavours to protect your personal data and prevent unauthorised access to it by storing it on a secure server which is password protected and hidden behind a firewall from the outside world, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.

OUR USE OF CCTV

We monitor and record images using closed circuit television at our venue. We do this for the purposes of crime prevention and public safety.

RECORDINGS OF VISITORS TO OUR VENUE

We, or third parties authorised by us, may carry out film and/or sound recording during, before or after a performance and/or in our venue from time to time.

Whilst we take reasonable steps to make sure that visitors are notified of such recording when they enter our venue and are given an opportunity to avoid such recording, by attending our venue you consent to you and any persons (including any children) who may accompany you, being included in such recordings and such recordings subsequently being used by us for any reasonable commercial purposes, including without limitation, for marketing and promotional purposes. We will not make any payment to you in respect of your inclusion in such recordings.

CHANGES TO OUR PRIVACY POLICY

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.

CONTACT

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to data-protection@wmc.org.uk 
For more information on the General Data Protection Regulation you can call (UK) 01625 545 700 or visit the Information Commissioner's website at ico.org.uk.