What we do with your data
Privacy Notice – how NCF and the Nottingham Comedy Festival keeps your data
NCF Comedy and The
Nottingham Comedy Festival are all trading names of NCF Entertainment which is
a solely owned company. The Nottingham Comedy Festival is a ‘not for
profit’ part of NCF Entertainment.
NCF Entertainment (NCF) understands that your
privacy is important to you and that you care about how your personal data is
used, stored and shared. We respect and value the privacy of everyone who joins
our mailing list, becomes one of our artists or their representatives, hosts
one of our events, visits our websites or uses any of our services.
are a "data controller" for the purposes of the Data Protection Act
1998 and (from 25 May 2018) the EU General Data Protection Regulation 2016/679
("Data Protection Law"). This means that we are responsible
for, and control the processing of, your personal information.
This notice explains how we use information
about you and how we protect your privacy.
Your rights are set out in Data Protection Law. Below we explain how we protect these rights, including what we will use your data and personal information for and how we will use it. Our policy on Privacy and Data Protection has been designed to make sure that we are protecting your legal rights. Personal information we collect directly from you may include details such as your name, date of birth, email address, postal address, telephone numbers, banking information as well as information you provide in any communications between us. You may give us this information when joining our mailing list, registering for an event, performing at one of our events, hosting an event, using our services, or any of the other ways to interact with us. (Credit card details are held by ticket booking agencies and are never forwarded on to NCF). We may use this information:
To process your request to join the mailing list and to provide you with
special offers, news and other information we consider will be of interest.
- To keep a record of your relationship with us.
- Where you volunteer with us, to administer the volunteering arrangement.
- When banking details are supplied, to make prompt payments to you of any
- If you are an artist or their representative we may keep details of any performances, contact details etc. to assist in preparing other events.
None of this information is shared outside the organisation without your consent unless required by law. You don’t have to provide this information, but without it we may not be able to provide the services you have requested, make payment to you or sign you up for a particular event.
Data Protection law recognises that certain categories of personal information are
more sensitive. Sensitive personal data is information about your health, race,
religious beliefs, criminal records and political opinions.
only collect ‘sensitive personal data’ about our users when there is a clear
reason for doing so. For example health information may be used to ensure you
can have the relevant facilities to enjoy or participate in any event
We will not
pass on your details to anyone else without your consent except in exceptional
circumstances allowed by law.
Data Protection law sets out the legal grounds under
which we can use your personal information and sensitive data.
We will only
use your personal information in a way or for a purpose that you would
reasonably expect, and that does not conflict with any previously expressed
If we use your personal information for
research and analysis, we’ll always keep you anonymous unless you’ve agreed
that your personal information can be used for that research.
We don’t sell your personal information to
Who do we share your information with?
We may use other organisations to help
deliver some of our services and activities. Where we do this, there is always
an agreement in place to make sure that the organisation complies with data
You can be assured that whoever we share your
information with, we will have received confirmation that they are protecting
your rights under GDPR in the same way as NCF.
In very rare instances the law requires organisations
to share information because there’s a good reason that’s more important than
protecting your privacy. This would be:
in order to find and stop crime and fraud;
if there are serious risks to the public, our
staff or to other professionals;
to protect a child; or
to protect adults who are thought to be at
For all of these reasons the risk must be
serious before we can override your right to privacy.
How do we protect your information?
We’ll hold records about you (on paper and
electronically) in a secure way, and we’ll only make them available to those
who have a right to see them. Examples of our security include: controlling
access to systems and networks so that only authorized NCF staff can access
your personal information; regular testing of our technology and ways of
working and training our staff and
volunteers in how to handle information and how and when to report when
something goes wrong.
Where in the world is your
All of the information we currently hold is
stored on systems in the UK.
How long do we keep your personal information?
If you’re listed on our mailing list we will hold your data until you request it be removed. This can be done at any time and we will ensure the data is removed immediately. Occasionally we may check that the list is up to date and you will then be asked to confirm you wish to remain on the list.
Where can I get advice?
NCF makes sure we respect your rights and
follow the law. If you have any concerns or questions about how we look after
your personal information, please contact our Data Protection Lead by, or by
e-mail at email@example.com
For independent advice about data protection,
privacy and data sharing issues, you can contact the Information Commissioner’s
Information Commissioner's Office
Cheshire SK9 5AF
Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a
national rate number.
You have various rights in respect of the personal information
we hold about you – these are set out in more detail below. If you wish
to exercise any of these rights or make a complaint, you can do so by
contacting our Data Protection Lead at firstname.lastname@example.org. You can also make a complaint to the data protection
supervisory authority, the Information Commissioner's Office.
Access to your personal information:
You have the right to request access to a copy of the personal information that we hold about you, along with information about the personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making. You can make a request for access free of charge. Please contact us with your access request, we may ask you for proof of your identity.
Right to object:
You can object to our using your
personal information, or you can change the way that we communicate with you.
Please contact us as noted above, providing details of your objection, or the
change that you would like to make.
If you have given us your consent to use
personal information, you can withdraw your consent at any time.
You can ask us to correct, change or
complete any inaccurate or incomplete personal information held about you.
You can ask us to delete your personal
information where it is no longer necessary for us to use it, if you have
withdrawn consent, or where we have no lawful basis for keeping it.
You can ask us to provide you or a
third party with some of the personal information that we hold about you in a
structured, commonly used, electronic form, so it can be easily transferred.
You can ask us to restrict the personal
information we use about you.
No automated-decision making:
decision-making takes place when an electronic system uses personal information
to make a decision without human intervention. NCF doesn’t use any
automated decision-making systems.
Data Protection law sets out the legal grounds under
which we can use your personal information.
It may be where you have given us your consent. This will be for a
that you have told us about, such as to process your membership
you with a product, service or information at your request.
It may be where we have a legal obligation to use or disclose
information about you – For example if we are ordered to do so by a
court or regulatory authority .
It may be because it is necessary
to use your data to communicate with you, or provide an activity, in a
you would reasonably expect. The law calls this 'legitimate interest'.
Whenever we process your personal information
under the ‘legitimate interest', we have to make sure that the
necessary to carry out the task, that we couldn’t achieve it in a less
intrusive way and that we take into account your rights and interests.
Examples of where we may use personal information this
To tell current members and supporters about our
activities and services.
To verify who we deal with to protect us against fraud, money
laundering and other risks;
improve our services;
with complaints and claims, or
To conduct research to better understand who our
you visit our website
Your details will not be retained when you access our web sites unless
a ticket when the ticket agency may retain booking details (financial
are not forwarded to NCF) you request information or request to be added
marketing list, list of performers or venues. The information is
within NCF and is not sold or given outside unless you give specific
want to share your experiences
is always happy to hear about your experiences and personal stories. We
them to share with customers and potential customers. We will only do
you have given us your consent or otherwise clearly indicated to us. We
then publish it in other media support our marketing or fundraising
NCF Entertainment May2018