Wales Millennium Centre ("we", "us" or "our") is committed to protecting and respecting your privacy.
For the purpose of the General Data Protection Regulation 2016 (the "Regulation") the data controller is Wales Millennium Centre, a company limited by guarantee, registered in England and Wales with company number 3221924 and charity number 1060458 whose registered address is at Bute Place, Cardiff CF10 5AL.
Our nominated representative for the purpose of the Regulation is our Finance and Corporate Services Director.
INFORMATION WE MAY COLLECT FROM YOU
We may collect and process the following data about you:
- information that you provide by filling in forms on our site wmc.org.uk ("our site") and other sites hosted by Wales Millennium Centre. This includes information provided at the time of registering to use our site, subscribing to our services, placing orders, posting material or comments or requesting further services. We may also ask you for information when you enter a competition or promotion sponsored by us, and when you report a problem with our site;
- if you contact us, we may keep a record of that correspondence;
- we may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them;
- details of transactions you carry out through our site and of the fulfilment of your orders (including any services we provide you with as a result of your visit to our venue); and
- details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.
Such data may include your name, delivery address, email address, telephone number and debit and/or credit card numbers. We do not retain any of your credit or debit card information.
We may also ask you to answer various general questions about yourself including any areas in which you are interested so that information can be tailored to cover the areas in which we believe you might be interested for future reference.
USES MADE OF YOUR INFORMATION
We will use information held about you in the following ways:
- to ensure that content from our site is presented in the most effective manner for you and for your computer;
- to provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes;
- to carry out our obligations arising from any contracts entered into between you and us;
- to allow you to participate in interactive features of our service, when you choose to do so;
- to notify you about changes to our service and your visits to our venue or if you need any additional information to facilitate your visit; and
- to provide aggregate information about our users to stakeholders (but not to advertisers).
We will only send you information about the Centre, our shows and events if you have given us specific, 'opt-in' consent to do so. If you change your mind and wish to stop receiving Emails from us you can click 'unsubscribe' on any Email sent to you by the Centre; log into your account to change your preferences direct, or call our Contact Centre on 029 2063 6464 to ask them to update your record. The latter two options also provide you with the opportunity to change your postal and telephone preferences.
If you have given us permission to contact you with marketing information, we will cease to use that data for marketing purposes after 7 years of inactivity on your account except in very particular circumstances; for example, where a production on your ticket history falls into a specialist or "niche" category whereby we have reason to believe you may wish to be informed of a similar type of event, or of a particular company's return visit in the future. We will continue to retain records on our system for up to 15 years from the last noted activity for analytical purposes, which form a legitimate interest for our business.
We will not supply your details to third party organisations to contact you with marketing information unless you have given us specific permission to do so.
We analyse information you provide and how you've helped us, to enable us to understand our supporters better and decide what communications will be of interest to you; so that we can save our resources for delivering arts-based activities to as many people as possible.
From time to time, our supporters may recommend others who could be interested in our cause. We would use public information to understand their interests better and the likely level of support. We never use data enrichment companies or any third party companies to provide personal information.
WHO CAN VIEW YOUR INFORMATION?
In 2007 the Centre created a Consortium that makes it possible for other arts organisations to benefit from the same Customer Relationship Management (CRM) / Ticketing System we use, Tessitura, at a lower level of investment than would otherwise be required from them. We offer a collegiate approach to the use of Tessitura with consortium partners, sharing a system for mutual benefit rather than a more traditional corporate relationship.
The organisations in our Consortium are currently
- Welsh National Opera
- BBC National Orchestra of Wales
- National Dance Company Wales
- National Theatre Wales
- Venue Cymru
- Liverpool Everyman and Playhouse
Whilst all "organisation specific" data is locked down to the appropriate organisation (ie transactional information, payment data, customer interactions, ticket history etc.), there is a general tab on a customer's record which is shared amongst Consortium partners. This means that each consortium member can view the following information: Name, Address, Phone Number, E-mail Address.
However, under no circumstance are they allowed to make use of this information unless you have specifically given them permission to do so.
If you would like further information on our CRM System, Tessitura and the Consortium please click here.
DISCLOSURE OF YOUR INFORMATION
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
ACCESS TO INFORMATION
The Regulation gives you the right to access information we hold about you. To exercise this right simply contact us at email@example.com or by post addressed to Data Lead, Wales Millennium Centre, Bute Place, Cardiff Bay CF10 5AL and we will respond to you within one month.
If you have any concerns about our use of your data and how that complies with the Regulation, or if you wish to initiate your "Right to be Forgotten", please contact us on firstname.lastname@example.org or call our Contact Centre on 029 2063 6464.
See also the paragraphs below entitled "Our Use of CCTV" and "Recordings of Visitors to our Venue".
MONITORING OF USER TRAFFIC
We may monitor user traffic on an aggregate basis in order to help us develop and improve our site for the benefit of all users.
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.
For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on your browser or the hard drive of your computer. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our site and to deliver a better and more personalised service. Some of the cookies we use are essential for the site to operate.
Cookies are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit allaboutcookies.org.
To opt out of being tracked by Google Analytics across all websites visit
|Google Analytics Cookies||These cookies enables us to collect anonymous information about how our site is used, what pages are visited and how long is spent on each page. The information collected is used by us to improve the website and to provide broad statistical data to our stakeholders or for general benchmarking with other similar organisations.||google.com|
|_bo_active_language||Marketing cookie - language||Keeps track of preferred email@example.com|
|_bo_basket_count||Marketing cookie - basket count||Denotes number of items in the basket (for communication between ticketing and marketing domains).||firstname.lastname@example.org|
|_bo_logged_in||Marketing cookie - logged in||Denotes if the user is loggedin (for communication between ticketing and marketing domains to change the link used in the header).||email@example.com|
|_bo_ticket_expiration_time||Marketing cookie - ticket expiration||Denotes the time prior to tickets in the basket firstname.lastname@example.org|
|_current_mos||Marketing cookie - current mode of sale||Denotes mode of sale currently in use (for communication between ticketing and marketing domains).||email@example.com|
|BOSESSID||Ticketing cookie - session id||Session cookie used to track the order and if the user is currently logged firstname.lastname@example.org|
|BOTRACE||Ticketing cookie - user id||Anonymised code specific to a user. Used for email@example.com|
|wrkey||Ticketing cookie - queuing session||Session cookie for the queuing system. Used to identify a user and their position in the firstname.lastname@example.org|
|savecard||Ticketing cookie - save card||Used to identify whether a user wants to save their card for future purchases. Holds no information on the email@example.com|
|_mm_channel||Ticketing cookie - cache||Used to group users for the purpose of offering them cached firstname.lastname@example.org|
You block cookies by activating the setting on your browser which allows you to refuse the setting of all or some cookies.
Except for essential cookies, all cookies expire when you close the browser window.
Please note that by continuing to use our site, you consent to us collecting those cookies.
Targeting and Advertising Cookies
We use targeting and advertising cookies to serve tailored ads to you based on your previous visits to our website, or based on your demographics or interests as determined by Google*. Google uses the third-party DoubleClick cookie to collect data and serve ads that are relevant to you on the websites of its partners. The cookie does not contain any personally-identifiable information and we do not merge it with any personally-identifiable information collected through the website. Users may opt out of the use of the DoubleClick cookie for interest-based advertising by visiting Ads Settings.
The website uses Google Analytics Advertising Features for collecting data via Google advertising cookies and anonymous identifiers. The features used are: Remarketing with Google Analytics, Google Display Network Impression Reporting and Google Analytics Demographics and Interest Reporting.
*How Google determines demographic and interest information
When someone visits a website that has partnered with the Google Display Network, Google stores a number in their browsers to remember their visits. This number uniquely identifies a web browser on a specific computer, not a specific person. Browsers may be associated with a demographic or interest category based on the sites that were visited. In addition, some sites might provide Google with demographic information that people share on certain websites, such as social networking sites. Google may also use demographics derived from Google profiles.
WHERE WE STORE YOUR PERSONAL DATA
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted during transit using TLS 1.2 encryption. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the internet and the transmission of information via the internet are not fully secure. Although we will use reasonable endeavours to protect your personal data and prevent unauthorised access to it by storing it on a secure server which is password protected and hidden behind a firewall from the outside world, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
OUR USE OF CCTV
We monitor and record images using closed circuit television at our venue. We do this for the purposes of crime prevention and public safety.
RECORDINGS OF VISITORS TO OUR VENUE
We, or third parties authorised by us, may carry out film and/or sound recording during, before or after a performance and/or in our venue from time to time. Whilst we take reasonable steps to make sure that visitors are notified of such recording when they enter our venue and are given an opportunity to avoid such recording, by attending our venue you consent to you and any persons (including any children) who may accompany you, being included in such recordings and such recordings subsequently being used by us for any reasonable commercial purposes, including without limitation, for marketing and promotional purposes. We will not make any payment to you in respect of your inclusion in such recordings.
For more information on the General Data Protection Regulation you can call (UK) 01625 545 700 or visit the Information Commissioner's website at ico.org.uk.