Wales Millennium Centre ("we", "us" or "our") is committed to protecting and respecting your privacy.

This policy (together with our terms of use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us (including data collected/provided online by telephone or in person), will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purpose of the General Data Protection Regulation 2016 (the "Regulation") the data controller is Wales Millennium Centre, a company limited by guarantee, registered in England and Wales with company number 3221924 and charity number 1060458 whose registered address is at Bute Place, Cardiff CF10 5AL.

Our nominated representative for the purpose of the Regulation is our Strategic Director, Operations and Performance.

INFORMATION WE MAY COLLECT FROM YOU


We may collect and process the following data about you:

  • information that you provide by filling in forms on our site wmc.org.uk ("our site") and other sites hosted by Wales Millennium Centre. This includes information provided at the time of registering to use our site, subscribing to our services, placing orders, posting material or comments or requesting further services. We may also ask you for information when you enter a competition or promotion sponsored by us, and when you report a problem with our site;

  • if you contact us, we may keep a record of that correspondence;

  • we may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them;

  • details of transactions you carry out through our site and of the fulfilment of your orders (including any services we provide you with as a result of your visit to our venue); and

  • details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access. 


Such data may include your name, delivery address, email address, telephone number and debit and/or credit card numbers. We do not retain any of your credit or debit card information.

We may also ask you to answer various general questions about yourself including any areas in which you are interested so that information can be tailored to cover the areas in which we believe you might be interested for future reference.


USES MADE OF YOUR INFORMATION

GENERAL


We will use information held about you in the following ways:

  • to ensure that content from our site is presented in the most effective manner for you and for your computer;

  • to provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes;

  • to carry out our obligations arising from any contracts entered into between you and us;

  • to allow you to participate in interactive features of our service, when you choose to do so;

  • to notify you about changes to our service and your visits to our venue or if you need any additional information to facilitate your visit; and

  • to provide aggregate information about our users to stakeholders (but not to advertisers).


MARKETING PURPOSES


We will only send you information about the Centre, our shows and events if you have given us specific, 'opt-in' consent to do so. If you change your mind and wish to stop receiving Emails from us you can click 'unsubscribe' on any Email sent to you by the Centre; log into your account to change your preferences direct, or call our Contact Centre on 029 2063 6464 to ask them to update your record. The latter two options also provide you with the opportunity to change your postal and telephone preferences.


If you have given us permission to contact you with marketing information, we will cease to use that data for marketing purposes after 7 years of inactivity on your account except in very particular circumstances; for example, where a production on your ticket history falls into a specialist or "niche" category whereby we have reason to believe you may wish to be informed of a similar type of event, or of a particular company's return visit in the future. We will continue to retain records on our system for up to 15 years from the last noted activity for analytical purposes, which form a legitimate interest for our business.


We will not supply your details to third party organisations to contact you with marketing information unless you have given us specific permission to do so.

FUNDRAISING PURPOSES


We analyse information you provide and how you've helped us, to enable us to understand our supporters better and decide what communications will be of interest to you; so that we can save our resources for delivering arts-based activities to as many people as possible. 
 
From time to time, our supporters may recommend others who could be interested in our cause. We would use public information to understand their interests better and the likely level of support. We never use data enrichment companies or any third party companies to provide personal information.

WHO CAN VIEW YOUR INFORMATION?


In 2007 the Centre created a Consortium that makes it possible for other arts organisations to benefit from the same Customer Relationship Management (CRM) / Ticketing System we use, Tessitura, at a lower level of investment than would otherwise be required from them. We offer a collegiate approach to the use of Tessitura with consortium partners, sharing a system for mutual benefit rather than a more traditional corporate relationship.


The organisations in our Consortium are currently

  • Welsh National Opera
  • BBC National Orchestra of Wales
  • National Dance Company Wales
  • National Theatre Wales
  • Venue Cymru
  • Liverpool Everyman and Playhouse


Whilst all "organisation specific" data is locked down to the appropriate organisation (ie transactional information, payment data, customer interactions, ticket history etc.), there is a general tab on a customer's record which is shared amongst Consortium partners. This means that each consortium member can view the following information: Name, Address, Phone Number, E-mail Address. 


However, under no circumstance are they allowed to make use of this information unless you have specifically given them permission to do so. 
If you would like further information on our CRM System, Tessitura and the Consortium please click here.

DISCLOSURE OF YOUR INFORMATION


We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or if we in good faith believe we are required to do so, or in order to enforce or apply our terms of use  or conditions of sale and other agreements; or to protect our rights, property, or safety or the rights property or safety of our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates.  If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.  Please check these policies before you submit any personal data to these websites.


ACCESS TO INFORMATION


The Regulation gives you the right to access information we hold about you. To exercise this right simply contact us at data-protection@wmc.org.uk or by post addressed to Data Lead, Wales Millennium Centre, Bute Place, Cardiff Bay CF10 5AL and we will respond to you within one month.


If you have any concerns about our use of your data and how that complies with the Regulation, or if you wish to initiate your "Right to be Forgotten", please contact us on data-protection@wmc.org.uk or call our Contact Centre on 029 2063 6464.


See also the paragraphs below entitled "Our Use of CCTV" and "Recordings of Visitors to our Venue".

MONITORING OF USER TRAFFIC


We may monitor user traffic on an aggregate basis in order to help us develop and improve our site for the benefit of all users.


IP ADDRESSES


We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.


COOKIES


For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on your browser or the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our site and to deliver a better and more personalised service. Some of the cookies we use are essential for the site to operate.


Cookies are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit allaboutcookies.org.


To opt out of being tracked by Google Analytics across all websites visit

tools.google.com/dlpage/gaoptout

 Cookie  Name   Purpose  More information
__utmb
__utmc
__utma
__utmz
__utmv
__utmx
Google Analytics Cookies   These cookies enables us to collect anonymous information about how our site is used, what pages are visited and how long is spent on each page. The information collected is used by us to improve the website and to provide broad statistical data to our stakeholders or for general benchmarking with other similar organisations. google.com/analytics/learn/privacy.html
_bo_active_language Marketing cookie - language Keeps track of preferred language. feedback@wmc.org.uk
_bo_basket_count Marketing cookie - basket count Denotes number of items in the basket (for communication between ticketing and marketing domains). feedback@wmc.org.uk
_bo_logged_in Marketing cookie - logged in Denotes if the user is loggedin (for communication between ticketing and marketing domains to change the link used in the header). feedback@wmc.org.uk
_bo_ticket_expiration_time Marketing cookie - ticket expiration Denotes the time prior to tickets in the basket expiring. feedback@wmc.org.uk
_current_mos Marketing cookie - current mode of sale Denotes mode of sale currently in use (for communication between ticketing and marketing domains). feedback@wmc.org.uk
BOSESSID Ticketing cookie - session id Session cookie used to track the order and if the user is currently logged in. feedback@wmc.org.uk
BOTRACE Ticketing cookie - user id Anonymised code specific to a user. Used for troubleshooting. feedback@wmc.org.uk
wrkey Ticketing cookie - queuing session Session cookie for the queuing system. Used to identify a user and their position in the queue. feedback@wmc.org.uk
savecard Ticketing cookie - save card Used to identify whether a user wants to save their card for future purchases. Holds no information on the card. feedback@wmc.org.uk
_mm_channel Ticketing cookie - cache Used to group users for the purpose of offering them cached content. feedback@wmc.org.uk

You block cookies by activating the setting on your browser which allows you to refuse the setting of all or some cookies.

However, if you use your browser settings to block all cookies (including essential cookies) you may not be to access all or parts of our site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies as soon you visit our site.

Except for essential cookies, all cookies expire when you close the browser window.

Please note that by continuing to use our site, you consent to us collecting those cookies.

Targeting and Advertising Cookies

We use targeting and advertising cookies to serve tailored ads to you based on your previous visits to our website, or based on your demographics or interests as determined by Google*. Google uses the third-party DoubleClick cookie to collect data and serve ads that are relevant to you on the websites of its partners. The cookie does not contain any personally-identifiable information and we do not merge it with any personally-identifiable information collected through the website. Users may opt out of the use of the DoubleClick cookie for interest-based advertising by visiting Ads Settings.


The website uses Google Analytics Advertising Features for collecting data via Google advertising cookies and anonymous identifiers. The features used are: Remarketing with Google Analytics, Google Display Network Impression Reporting and Google Analytics Demographics and Interest Reporting.


*How Google determines demographic and interest information

When someone visits a website that has partnered with the Google Display Network, Google stores a number in their browsers to remember their visits. This number uniquely identifies a web browser on a specific computer, not a specific person. Browsers may be associated with a demographic or interest category based on the sites that were visited. In addition, some sites might provide Google with demographic information that people share on certain websites, such as social networking sites. Google may also use demographics derived from Google profiles.

WHERE WE STORE YOUR PERSONAL DATA


The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted during transit using TLS 1.2 encryption. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the internet and the transmission of information via the internet are not fully secure. Although we will use reasonable endeavours to protect your personal data and prevent unauthorised access to it by storing it on a secure server which is password protected and hidden behind a firewall from the outside world, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.


OUR USE OF CCTV


We monitor and record images using closed circuit television at our venue. We do this for the purposes of crime prevention and public safety.


 
RECORDINGS OF VISITORS TO OUR VENUE


We, or third parties authorised by us, may carry out film and/or sound recording during, before or after a performance and/or in our venue from time to time. Whilst we take reasonable steps to make sure that visitors are notified of such recording when they enter our venue and are given an opportunity to avoid such recording, by attending our venue you consent to you and any persons (including any children) who may accompany you, being included in such recordings and such recordings subsequently being used by us for any reasonable commercial purposes, including without limitation, for marketing and promotional purposes. We will not make any payment to you in respect of your inclusion in such recordings.


 
CHANGES TO OUR PRIVACY POLICY


Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.


CONTACT


Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to data-protection@wmc.org.uk 
For more information on the General Data Protection Regulation you can call (UK) 01625 545 700 or visit the Information Commissioner's website at ico.org.uk.