PRIVACY POLICY 

The Royal Burgh of Pittenweem Arts Festival (PAF) is committed to protecting the privacy of individuals whose data it processes. 

BACKGROUND INFORMATION 

This privacy policy aims to give you information on how PAF collects and processes your personal data. It outlines your data protection rights under the General Data Protection Regulation (“GDPR"). 

If you have any queries about this policy or your personal data, or you wish to submit an access request or raise a complaint about the way your personal data has been handled, please contact The Secretary, PAF, 47 High Street, Pittenweem, Fife, KY10 2PG.

PAF may update this policy from time to time. 

CATEGORIES OF DATA SUBJECTS

(A) BUSINESS CONTACTS INCLUDING EXHIBITING ARTISTS 

PAF may process personal data about its business associates, artists who have contacted PAF, visitors buying tickets to events or invited artists contacted by us.

We may collect, use, store and transfer personal data about you which you provide to us including: name, address, email address, and telephone numbers.

We do not collect any sensitive personal data or special categories of personal data about you through our website.

We will use your personal data in the following circumstances where it is necessary for our legitimate interests and where your interests and fundamental rights are not overridden or, where we need to comply with a legal or regulatory obligation.

Your personal data may be processed by PAF for the following purposes:

to hold your personal data on our system and to contact you on the basis of the legitimate interests of PAF including, in the case of artists, details of the work they do; 

in respect of suppliers, to allow us to process payments and orders in respect of any goods and services provided;

to better understand our audience attendance to enable us to know which activities and events are most popular.

to comply with legal or regulatory requirements; 

to scan and monitor emails sent to us, including attachments, for viruses or malicious software, to process and encrypt personal data to protect and manage email traffic, and to store personal data on our systems to pursue our legitimate interests including for document retention purposes; and 

such other actions as are necessary to manage the activities of PAF, including by processing instructions and enforcing or defending the rights or interests of PAF, in order to comply with our legal obligations and/or to pursue legitimate interests.

If we consider it necessary to obtain your consent in relation to the use your personal data, we will contact you to request this consent. In such circumstances, we will provide you with full details of the personal data that we require and the reason we need it, so that you can consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw that consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. To withdraw your consent or to opt out of receiving marketing communication, please contact us at PAF, 47 High Street, Pittenweem, Fife, KY10 2PG or by following the unsubscribe instructions included in electronic marketing communication. Once we have received notification that you have withdrawn your consent, we will no longer process your information unless we have another legitimate basis for doing so in law.

Where such processing is being carried out on the basis that it is necessary to pursue the legitimate interests of PAF, such legitimate interests do not override your interests, fundamental rights or freedoms. 

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. 

(B) MEMBERS OF PAF 

This section of the policy sets out how PAF may process personal data about its members and people who have applied to become a member. 

We may hold personal data about our members which is provided to us by you directly, including through completing application forms, through our website, telephone calls and/or corresponding with us.  We may also process personal data about individuals that are connected with you as a member, for example your spouse’s name. 

We may collect, store, and use the following categories of personal information about your contact details including name, title, address, telephone number, personal email address.

Your personal data may be processed by PAF for the following purposes: 

to hold your personal data on our system and to contact you as necessary in accordance with PAF’s contractual obligations, or on the basis of our legitimate interests; 

to provide you with information on PAF and its activities and events, being carried out to pursue PAF’'s legitimate interest;

to allow us to administer and manage PAF which is necessary for the purpose of meeting contractual obligations, to comply with applicable laws and/or to pursue the legitimate interests of PAF and its members;

such other actions as are necessary to manage the activities and/or to comply with the legal and/or regulatory requirements of PAF, including by processing instructions, monitoring and recording electronic communications, including telephone calls and emails, and enforcing or defending the rights and/or interests of PAF, in order to comply with PAF's legal obligations and/or to pursue the legitimate interests of PAF and/or its members.

If we consider it necessary to obtain your consent in relation to the use of your personal data, we will contact you to request this consent. In such circumstances, we will provide you with full details of the personal data that we would like to use and the reason we need it, so that you can consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw your consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. 

(C) VISITORS TO OUR WEBSITE

We may collect, use, store and transfer different kinds of personal data about you which you provide to us though our website: name, date of birth, address, email address, telephone numbers, technical data, your login data and other technology on the devices you use to access our website. 

We do not collect any sensitive personal data or special categories of personal data about you through our website. 

We use different methods to collect data from and about you including through: 

direct interactions with you, including by filling in forms. This includes personal data you provide when you subscribe to our publications and/or request marketing to be sent to you. 

Automated technologies or interactions. As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies. Our Cookies Policy is detailed on our website under FAQs.

We will use your personal data in the following circumstances where it is necessary for our legitimate interests, including in relation to the sending of electronic marketing communications, and where your interests and fundamental rights are not overridden by those interests, or where we need to comply with a legal or regulatory obligation.

Your personal data may be processed by PAF for the following purposes: 

to use data analytics to improve our website, marketing, customer experiences on the basis of our legitimate interests; 

to comply with legal or regulatory requirements; 

to scan and monitor emails sent to us, including attachments, for viruses or malicious software, to process and encrypt personal data to protect and manage email traffic, and to store personal data on our systems to pursue our legitimate interests including for document retention purposes; and 

such other actions as are necessary to manage the activities of the PAF, including by processing instructions, and enforcing or defending the rights and/or interests of PAF, in order to comply with its legal and/or regulatory obligations and/or to pursue its legitimate interests. 

If it is considered necessary to obtain your consent in relation to the use your personal data, we will contact you to request this consent and will provide you with full details of the personal data we would like and the reason we need it, so that you can consider whether you wish to consent. If you decide to provide your consent, you have the right to withdraw that consent at any time, although that will not affect the lawfulness of processes based on consent before its withdrawal. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. 

Where the Website provides links to other websites, PAF is not responsible for the data protection/privacy/cookie usage policies of such other websites, and, if you have any concerns about them you should check these policies on such websites. If you use one of these links to leave our website, you should note that we do not have any control over that other website. 

DISCLOSURES OF YOUR PERSONAL DATA

We will not disclose personal information we hold about you to any third party other than as noted below.

 (a) in the event that we sell or dispose of any business or assets, in which case we may disclose personal data we hold about you to the buyer of such business or assets; and/or

(b) if we are permitted by law to disclose your personal data to that third party or are under a legal obligation to disclose your personal data to that third party.

DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

YOUR LEGAL RIGHTS

By law you have the right to:

• Request access to your personal details. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing.

• Object to processing of your personal information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

• Withdraw your consent. If we are processing your personal data on the basis of your consent, you have the right to withdraw such consent at any time. Withdrawing your consent will not affect the lawfulness of processes based on consent before its withdrawal. To withdraw your consent or to opt out of receiving marketing communication, please contact us at PAF, 47 High Street, Pittenweem, Fife, KY10 2PG or following the unsubscribe instructions included in each electronic marketing communication. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

If you wish to exercise any of the rights set out above, please contact PAF, 47 High Street, Pittenweem, Fife, KY10 2PG in writing.

You have the right to make a complaint at any time to the Information Commissioner's Office, the UK supervisory authority for data protection issues (www.ico.org.uk). 

COOKIES POLICY

Pittenweem Arts Festival uses cookies on this website. By using the Service, you consent to the use of cookies.Our Cookies Policy explains what cookies are, how we use cookies, how third-parties we may partner with may use cookies on the Service, your choices regarding cookies and further information about cookies.

What are cookies?

Cookies are small pieces of text sent by your web browser by a website you visit. A cookie file is stored in your web browser and allows the Service or a third-party to recognize you and make your next visit easier and the Service more useful to you. Cookies can be "persistent" or "session" cookies.

How Pittenweem Arts Festival uses cookies

When you use and access the Service, we may place a number of cookies files in your web browser. We use cookies for the following purposes: to enable certain functions of the Service, to provide analytics, to store your preferences, to enable advertisements delivery, including behavioural advertising. We use both session and persistent cookies on the Service and we use different types of cookies to run the Service: Essential cookies. We may use essential cookies to authenticate users and prevent fraudulent use of user accounts. Third-party cookies In addition to our own cookies, we may also use various third-parties cookies to report usage statistics of the Service, deliver advertisements on and through the Service, and so on.

What are your choices regarding cookies?

If you'd like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser or use buttons below. Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all of the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.

Where can your find more information about cookies?

You can learn more about cookies and the following third-party websites:

AllAboutCookies: http://www.allaboutcookies.org/

Network Advertising Initiative:

http://www.networkadvertising.org/

 COMPLAINTS PROCEDURE 

The Board of Pittenweem Arts Festival (the ORGANISATION) aims to provide a high-quality arts event for exhibiting artists, performers and the public, including residents in the village in which it takes place. We believe we achieve this most of the time; if we are not getting it right please let us know. 

In order to ensure our services remain at a high and improving standard, we have a procedure through which you can let us know, if for any reason, you are not satisfied with your dealings with the organisation. 

If you are not happy with THE ORGANISATION please tell us.

During the festival or at any other time, if you are unhappy about any of the organisation’s aspects, please speak to a staff member, office manager or contact us via the Contact Form on this website and a Trustee will get back to you.

If you are unhappy with an individual in THE ORGANISATION sometimes it is best to tell him or her directly. If you feel this is difficult or inappropriate then speak to the office manager or contact us via the Contact Form on this website and a Trustee will get back to you.

Often we will be able to give you a response straight away. When the matter is more complicated we will give you at least an initial response as soon as possible.

Making a written complaint 

If you are not satisfied with our response or wish to raise the matter more formally, please e-mail The ORGANISATION  via the Contact Form or write to:

Pittenweem Arts Festival 47 High Street Pittenweem Fife KY10 2PG. 

All written complaints will be logged. You will receive a written acknowledgement within seven working days. 

The aim is to investigate your complaint properly and give you a reply within twenty-eight days, setting out how the problem will be dealt with. If this is not possible, an interim response will be made informing you of the action taken to date or being considered. 

If, after we have responded, you are not satisfied, the matter will be discussed at the next meeting of the Trustees, which will decide on any further steps to resolve the situation. 

Finally, Pittenweem Arts Festival appreciates feedback at any time.