What we do with your data

Our Privacy Notice – how NCF and the Nottingham Comedy Festival keeps your data safe


NCF Comedy and The Nottingham Comedy Festival are all trading names of NCF Entertainment which is a solely owned company. The Nottingham Comedy Festival is a ‘not for profit’ part of NCF Entertainment. NCF Entertainment (NCF) understands that your privacy is important to you and that you care about how your personal data is used, stored and shared. We respect and value the privacy of everyone who joins our mailing list, becomes one of our artists or their representatives, hosts one of our events, visits our websites or uses any of our services. We are a "data controller" for the purposes of the Data Protection Act 1998 and (from 25 May 2018) the EU General Data Protection Regulation 2016/679 ("Data Protection Law"). This means that we are responsible for, and control the processing of, your personal information. This notice explains how we use information about you and how we protect your privacy.

Your rights

Your rights are set out in Data Protection Law. Below we explain how we protect these rights, including what we will use your data and personal information for and how we will use it. Our policy on Privacy and Data Protection has been designed to make sure that we are protecting your legal rights. Personal information we collect directly from you may include details such as your name, date of birth, email address, postal address, telephone numbers, banking information as well as information you provide in any communications between us. You may give us this information when joining our mailing list, registering for an event, performing at one of our events, hosting an event, using our services, or any of the other ways to interact with us. (Credit card details are held by ticket booking agencies and are never forwarded on to NCF). We may use this information:

  • To process your request to join the mailing list and to provide you with special offers, news and other information we consider will be of interest.
  • To keep a record of your relationship with us.
  • Where you volunteer with us, to administer the volunteering arrangement.

  • When banking details are supplied, to make prompt payments to you of any monies due

  •  If you are an artist or their representative we may keep details of any performances, contact details etc. to assist in preparing other events.


None of this information is shared outside the organisation without your consent unless required by law. You don’t have to provide this information, but without it we may not be able to provide the services you have requested, make payment to you or sign you up for a particular event.


Sensitive Personal Information

Data Protection law recognises that certain categories of personal information are more sensitive. Sensitive personal data is information about your health, race, religious beliefs, criminal records and political opinions. We only collect ‘sensitive personal data’ about our users when there is a clear reason for doing so. For example health information may be used to ensure you can have the relevant facilities to enjoy or participate in any event We will not pass on your details to anyone else without your consent except in exceptional circumstances allowed by law.


Data Protection law sets out the legal grounds under which we can use your personal information and sensitive data. We will only use your personal information in a way or for a purpose that you would reasonably expect, and that does not conflict with any previously expressed preferences. If we use your personal information for research and analysis, we’ll always keep you anonymous unless you’ve agreed that your personal information can be used for that research. We don’t sell your personal information to anyone else.


Who do we share your information with?

We may use other organisations to help deliver some of our services and activities. Where we do this, there is always an agreement in place to make sure that the organisation complies with data protection law. You can be assured that whoever we share your information with, we will have received confirmation that they are protecting your rights under GDPR in the same way as NCF. In very rare instances the law requires organisations to share information because there’s a good reason that’s more important than protecting your privacy. This would be: in order to find and stop crime and fraud; or if there are serious risks to the public, our staff or to other professionals; to protect a child; or to protect adults who are thought to be at risk. For all of these reasons the risk must be serious before we can override your right to privacy.

How do we protect your information?

We’ll hold records about you (on paper and electronically) in a secure way, and we’ll only make them available to those who have a right to see them. Examples of our security include: controlling access to systems and networks so that only authorized NCF staff can access your personal information; regular testing of our technology and ways of working and training our staff and volunteers in how to handle information and how and when to report when something goes wrong.


Where in the world is your information?

All of the information we currently hold is stored on systems in the UK.

How long do we keep your personal information?

If you’re listed on our mailing list we will hold your data until you request it be removed. This can be done at any time and we will ensure the data is removed immediately. Occasionally we may check that the list is up to date and you will then be asked to confirm you wish to remain on the list.


Where can I get advice?

NCF makes sure we respect your rights and follow the law. If you have any concerns or questions about how we look after your personal information, please contact our Data Protection Lead by, or by e-mail at [email protected] or [email protected] For independent advice about data protection, privacy and data sharing issues, you can contact the Information Commissioner’s Office at: Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.

NCF Entertainment May 2018

You have various rights in respect of the personal information we hold about you – these are set out in more detail below. If you wish to exercise any of these rights or make a complaint, you can do so by contacting our Data Protection Lead at [email protected]. You can also make a complaint to the data protection supervisory authority, the Information Commissioner's Office.

Access to your personal information:

You have the right to request access to a copy of the personal information that we hold about you, along with information about the personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making. You can make a request for access free of charge. Please contact us with your access request, we may ask you for proof of your identity.

Right to object:

You can object to our using your personal information, or you can change the way that we communicate with you. Please contact us as noted above, providing details of your objection, or the change that you would like to make. ·

Consent:

If you have given us your consent to use personal information, you can withdraw your consent at any time.

Correction

You can ask us to correct, change or complete any inaccurate or incomplete personal information held about you.

Erasure:

You can ask us to delete your personal information where it is no longer necessary for us to use it, if you have withdrawn consent, or where we have no lawful basis for keeping it.

Portability:

You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred.

Restriction:

You can ask us to restrict the personal information we use about you.


No automated-decision making:

Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. NCF doesn’t use any automated decision-making systems.


Legal Basis

Data Protection law sets out the legal grounds under which we can use your personal information. It may be where you have given us your consent. This will be for a purpose that you have told us about, such as to process your membership application, provide you with a product, service or information at your request. It may be where we have a legal obligation to use or disclose information about you – For example  if we are ordered to do so by a court or regulatory authority . It may be because  it is necessary to use your data to communicate with you, or provide an activity, in a way that you would reasonably expect. The law calls this 'legitimate interest'. Whenever we process your personal information under the ‘legitimate interest', we have to make sure that the processing is necessary to carry out the task, that we couldn’t achieve it in a less intrusive way and that we take into account your rights and interests. Examples of where we may use personal information this way are: To tell current members and supporters about our activities and services. To verify who we deal with to protect us against fraud, money laundering and other risks; To improve our services; To deal with complaints and claims, or To conduct research to better understand who our supporters are.  When you visit our website Your details will not be retained when you access our web sites unless you book a ticket when the ticket agency may retain booking details (financial details are not forwarded to NCF) you request information or request to be added to a marketing list, list of performers or venues. The information is retained within NCF and is not sold or given outside unless you give specific consent. When you want to share your experiences NCF is always happy to hear about your experiences and personal stories. We use them to share with customers and potential customers. We will only do this if you have given us your consent or otherwise clearly indicated to us. We may then publish it in other media support our marketing or fundraising bids.

NCF Entertainment May2018