1. Purpose of our Privacy Statement
Under the UK General Data Protection Regulation, we are required to explain to you why we ask for personal data about you, how we intend to use the information you provide and whether we will share this with anyone else.
2. Who are we?
Vamos Group is made up of two related legal entities, Vamos Theatre CIO (charity number 1167642) and Vamos Theatre Company (company number 07166009). Our address is The Swan Theatre, The Moors, Worcester, WR1 3ED. We are the UK's leading full mask theatre company, touring full scale mask theatre production throughout the UK and sharing our skills with teachers, actors, health professionals, carers and business leaders.
3. How to contact us
If you have any concerns or questions about our use of your personal data, you can contact us by writing to Vamos Theatre, The Swan Theatre, The Moors, Worcester, WR1 3ED or emailing email@example.com.
To opt out from receiving information from us, please email your full name and postcode to firstname.lastname@example.org with “Opt Out” in the subject line. We will process your request within 5 working days and ensure that you data is removed from our records. We will also ask any partners we have shared your data with (with your permission) to do the same.
You also have the right to complain to the Information Commissioner's Office (the "ICO") if you are not satisfied with the way we use your information. You can contact the ICO by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
4. Why are we collecting your information?
We collect information about you when you fill in our feedback cards after shows, sign up to email updates on www.vamostheatre.co.uk, enter social media competitions, leave comments on our website or opt in to partner venues sharing your data with us. We use this to supply you with the latest information about Vamos Theatre, keep in touch with you and let you know about future performances, workshops and events. We also use your information for our own marketing and fundraising purposes (eg audience segmentation) to meet our requirements to use our charitable resources effectively, report to our funders and to offer you a better experience. We may also collect information on your needs, ethnicity, age and gender so that we can make our performances and workshops more accessible and inclusive.
5. What information are we collecting?
The only information which we are collecting about you is the information which you provide to us via cookie tracking, email sign up, comments and enquiry forms on our website or filling in feedback forms after performances. We may also collect information about you through online/offline surveys, email lists from venues and social media interactions.
Some of the information which we collect will be special categories of personal data (also called sensitive personal data), which includes information about your age, disability and racial or ethnic origin. This is collected for us to monitor how diverse and inclusive we are as an organisation and to make our future performances or workshops more accessible and inclusive. It also helps us provide better and more tailored audience experiences, better reflecting your needs. By providing us with this information, you consent to our use of this information for this purpose.
6. What we are going to do with your information
The information you provide to us will be used for the following purposes:
• It will be stored and used by us in accordance with this privacy statement and also in accordance with your rights under the General Data Protection Regulation (UK GDPR)
• It will be collected and used by us fairly and openly for the purpose of marketing and evaluation
• It will allow us to provide communications, workshops, shows and other services which are tailored to your needs
• It will allow us to make contact with you in the most appropriate way. For example, we can provide visual stories for people with accessible learning needs; or in an alternative language if English is not your first language.
7. What is the legal basis for using your information?
In accordance with the data protection laws, we need a "legal basis" for collecting and using information about you. There are a variety of different legal basis for processing personal data which are set out in the data protection laws.
The lawful basis on which we rely in order to use the information which we collect about you for the purposes set out in this notice will be:
• you have provided consent to our use of your information; and
• using your information is necessary for us to comply with a legal obligation to which we are subject.
The lawful basis on which we rely in order to use your special categories of personal data which we collect about you will be that you have provided your explicit consent to our use of your information.
8. Sharing your information
The Vamos Group is made up of two related legal entities, Vamos Theatre CIO (charity number 1167642) and Vamos Theatre Company (company number 07166009). We will share your information between both legal entities where necessary in order to provide services to you and meet our legal obligations. The obligations which are set out in this notice shall apply to all members of the Vamos Group.
It may be necessary to share information about you with our contractors and sub-contractors in order to provide you with the services in accordance with the contract between us. We will only share information about you with the contractors and sub-contractors which is relevant and necessary to address your individual needs. The contractors and sub-contractors shall be contractually required to ensure that they adhere to the security requirements imposed by the UK General Data Protection Regulation (as applicable). Our contractors and sub-contractors will not share your information with any other parties and will only be able to use the information when completing work on behalf of us.
We may also be required to share your information with our regulators (such as the Charities Commission) who are permitted access to this information by law and with other organisations where we have a legal obligation to share the information with them. We also share information with our funders (such as Arts Council England) in order to meet our contractual obligations with them.
We may from time to time share your information with other organisations, such as theatres and other venues. This includes information provided on feedback cards and surveys which may include email addresses, name, event attended and other information that you have completed and agreed for us to share with third parties for marketing and promotional purposes.
9. Cookie Statement
What are cookies?
Cookies are small data files that are stored on your computer or mobile device when you visit a website. Cookies are widely used by online service providers in order to (for example) make their websites or services work.
The cookies we use on our website won't collect personally identifiable information about you and we won't disclose information stored in cookies that we place on your device to third parties. The cookies we send to your device only relate to your use of our website; they don't have any other effect on your device.
We do not use Google Analytics.
Cookies from third party websites
A limited number of pages on our website use content embedded from third party websites. These third-party websites may send cookies to your device. You can opt out of these by using the Cookie Consent pop-up on entry to the website.
Our website is hosted in the UK with green hosting provider, GURU.
10. Transferring your information abroad
We will not transfer the information you provide to us outside of the European Economic Area.
11. Security of your information
The information that you provide will be stored securely on our systems and if this is in physical form, will be shredded. Our security measures and procedures reflect the seriousness with which we approach security and the value we attach to your information.
Only relevant members of staff will access the information you provide to us.
12. Storing your information and deleting it
Where you have provided us with consent for holding and processing your personal data, we will retain this for a period of 6 months, after which we will delete your information, unless there is another identifiable purpose for which it is necessary retain it.
13. Your rights
In relation to the information which we hold about you, you are entitled to:
• Ask us for access to the information
• Ask us to rectify the information where it is inaccurate or is incomplete
• Ask us to erase the information and take steps to ask others who we have shared your information with to also erase it
• Ask us to limit what we do with your information
• Object to our use of your information and ask us to stop that use
• Instruct us to provide you with the information we hold about you in a structured and commonly used format or transmit that information directly to another organisation
Our obligations to comply with the above rights are subject to certain exemptions.
Where we are using your information because you have provided your consent to that use, you are entitled to withdraw your consent at any time. The lawfulness of our use of your information before consent was withdrawn is not affected.
Visitors to our website under 13
The new Age Appropriate Design Code developed in the UK restricts the age of consent to 13 for on-line services. Online, as defined by the Information Society Services (ISS) includes social media, messaging, news and education services, sales offering goods or services. If you are under the age of 13, you will need your parent or guardian’s consent with Parental Responsibility before providing personal information to Vamos Theatre which we may hold.
Holding / use of personal data for minors.
Under GDPR Article 8, the age of consent, i.e. when a child is required or able to give their consent for the processing of their own data, is 16. Under this age consent is required from an adult with Parental Responsibility.
A child with consent given by an adult with parental responsibility can withdraw their consent once they exceed the age of consent. If a child of age gives consent, a holder of PR can withdraw consent if they feel the child has not the capacity to fully understand the request for consent. (This also applies to a vulnerable adult who might not understand what they are giving consent for).
A child as a subject of research is able to request erasure as they get older and circumstances change. They must be aware if their data is still in use. Any request by a child of appropriate consent age (16) for erasure of data will be honoured.
You have the right to withdraw consent at any point.