We at The Queen’s Hall (collectively “The Queen’s Hall”, “we”, “us” and “our”) take your privacy very seriously. We know that you, like us, care about how your personal information is used and shared.
Please read the following to learn more about how we collect, store, use and disclose information about you when you interact with us, in any manner, via our website and/or Box Office services.
We use any information we collect on you in compliance with the Data Protection Act 2018, UK GDPR and the Privacy and Electronic Communications Regulations (PECR 2019).
When you use our website, we collect information via cookies and other similar technologies which may include saving cookies to users’ computers. We collect certain information related to your device such as IP address, referring website, what pages your device visited, and when.
We use the information we collect via our services for a range of reasons, including:
We use the information we collect via our website:
We may also use the information you send to us via our website and/or services, to communicate with you via email and possibly other means regarding products, services, offers, promotions and events we think may be of interest to you or to send you our newsletter, but only if you have granted us permission to do so. You will always be able to opt-out of such communications at any time (see the “What choices do I have” section below).
We only disclose personal data with other Data Controllers where there is a legitimate business reason for doing so, or with Data Processors carrying out work on our behalf. Legitimate business reasons would include sharing personal data with other Data Controllers where we or they are selling or distributing tickets on each other’s behalf and/or we are joint partners in a project, concert or subscription series and sharing information with Data Processors to enable us to deliver our business and/or to enhance our strategic planning through evaluation and research.
We have data sharing agreements with any Data Controller we work with and ensure that the privacy controls of all Data Processors are at least as secure as our own.
Here is our list of the Data Controllers we share personal data with, but only in relation to the particular event, project or subscription with which your personal data would be connected.
Scottish Chamber Orchestra
New Town Concerts Society
Edinburgh International Festival
Our data processors are:
Spektrix – online Box Office service
Sagepay – online credit and debit card payment service
Dimensions – mailing house for sending of our brochure, targeted marketing campaigns and membership communication
DotDigital – bulk email distribution service
SurveyMonkey – online survey tool
Audience Finder (The Audience Agency) – cultural research
We may occasionally need to transfer your personal information overseas, for instance to our SurveyMonkey account. Where this is necessary, this may be to countries or territories around the world. We are required to ensure any transfers of data will be done securely, in accordance with best practice, and in compliance with the Data Protection Act 2018.
We do not rent or sell your Personal Information to anyone under any circumstances.
We may process your Personal Information for our legitimate business interests e.g. direct marketing, data analytics and/or enhancing/modifying/improving our services (see ‘Legitimate Interests’ section below).
We do not transfer any information, personal or otherwise, outside of the EEA (European Economic Area).
Under certain circumstances we may be required to disclose your Personal Information in response to valid requests by public authorities such as the Police or security services.
“Legitimate Interests” means the interests of our company in conducting and managing our business to enable us to give you the best service/products and the best and most secure experience. For example, we may process your data to send you essential information pertaining to the event you are attending. It can also apply to processing that is in your interests as well. For example, we may process your information to protect you against fraud when transacting on our website, and to ensure our websites and systems are secure.
When we process your personal information for our Legitimate Interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. Our Legitimate Business interests do not automatically override your interests – we will not use your Personal Information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
If you have any concerns you have the right to object to processing that is based on our legitimate interests. Please see ‘How to contact us’ below.
We use appropriate technical, organisational and administrative security measures to protect any information we hold from loss, misuse, unauthorised access, disclosure, alteration and destruction. Unfortunately, no company or service can guarantee complete security. Unauthorised entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.
You can always opt not to disclose information to us, but keep in mind some information may be needed to register with us or so that we can contact you in the case of any changes to event details. You can opt-out of receiving promotional or marketing communications from us at any time by using the Manage Preferences page or unsubscribe link in the email communications we send.
We do not knowingly collect or solicit personal information from anyone under the age of 16. If you are under 16, please do not attempt to buy tickets or send any Personal Information about yourself to us. If we learn that we have collected Personal Information from a child, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided Personal Information to us please contact us at email@example.com.
You can ask us if we are keeping any Personal Information about you and request to receive a copy of that data by making a Subject Access Request. Before your request can be processed you will need to provide The Queen’s Hall with adequate proof of identity, for example, a copy of your passport, birth certificate or driving licence.
Please try to be as clear and give as much detail about the information you are seeking and send your Subject Access Request, along with proof of identity to:
Marketing Manager, The Queen’s Hall, 85-89 Clerk Street, Edinburgh EH8 9JG or firstname.lastname@example.org.
You will receive a response from us within 40 days of receipt of your Request and will be able to get copies of any Personal Information we hold on you. However, exemptions to disclosure may apply in some circumstances.
You may request that we delete or correct the Personal Information held by The Queen’s Hall at any time by contacting us at email@example.com.
If you have any questions or concerns about this policy, please contact us as follows:
The Queen’s Hall (Edinburgh) Ltd is a Scottish Charity (No. SC 012294) and company limited by guarantee (Company No. 64372). Our VAT number is GB 446 4109 56.