Cartwheel Arts Privacy Notice     

We take your personal privacy very seriously at Cartwheel Arts. We have created this privacy notice to explain how we collect, store, manage, process and protect any personal information. It includes the types of information that we might hold, how and where we’ll use it and how we’ll look after it.

If you want to contact us about our privacy notice, or anything to do with your data at Cartwheel Arts then please email admin@cartwheelarts.org.uk, or phone 01706 361300 or by post: Cartwheel Arts, 110 Manchester Street, Heywood, Lancashire, OL10 1DW.

How we collect personal information:

• You request to join our mailing list
• You participate in one of our projects
• You are or become a staff member / Trustee / volunteer
• You work for us as a freelance practitioner
• You make a donation
• You visit our website

We’ll always make it clear what data we are collecting from you.

The following data and information may also be collected when you visit our website:

• IP address
• Referring website
• Web browser and device
• Cookies
• Time and date of visit
• Pages visited
• Location

Images / Video:

We don’t have CCTV at Cartwheel Arts, although some of the venues that we hire for projects may do - we don’t have access to this.

We often take photos and/or video and sound recordings at our events and project sessions. We will ask for your consent to do this, if you refuse then we’ll ask you to wear a badge so that the photographer can see that you don’t want to be photographed. At larger events where it is not feasible to ask for individual consent, we will clearly indicate that photographs / video is being taken and how to withdraw consent. 

Why:

We collect personal information to fulfil legal and contractual requirements, or if we feel that there is a legitimate interest, or if you have given us consent to do so.

If you are taking part in a project then we need to hold your contact details so that we can keep you informed.

Often, our funders will require us to collect information about the projects that we are delivering. You will always be told what this is. Most of the data is statistical or anonymous so can’t be linked to an individual. We will get your express permission to use anything that is personally identifiable such as a case study.

Lots of our projects produce outputs such as video, print, art work or content for websites and press releases. We will always ask for your consent to use this.

We will only collect sensitive personal information, such as health, disability, economic situation if we are contractually obliged to, or is it is to help to keep you safe. For example, if you are coming on a trip with us then we would need to know if you are asthmatic or have a nut allergy etc.

What you can expect from us:

1. We’ll never provide any of your information to a third party without your permission
2. You have the right to challenge us about any information that we hold relating to you
3. You have the right for your details to be removed from our systems (database and newsletter)
4. We may compile statistical data from time to time (for our Impact Report, to report to funders etc) but this will never include references to particular individuals
5. We will never, ever sell or give our mailing lists to a third party
6. We store any information as securely as possible. Anything stored digitally is password protected and paper records are stored in secure cabinets.

We uphold the 7 GDPR Principles as follows:

1. We process data lawfully, fairly and in a transparent manner (‘lawfulness, fairness and transparency’)
2. We collect data for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes (‘purpose limitation’)
3. We only collect data that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’)
4. We ensure data is accurate and, where necessary, kept up to date; every reasonable step is taken to ensure that personal data that is inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’)
5. We keep data in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals (‘storage limitation’)
6. We process data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’)
7. We are responsible for and can demonstrate compliance with the above principles ('accountability')

Your data protection rights

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please note that we may not always be able to do what you ask – for example if you ask us to erase data which we have an over-riding legal duty to keep.

If you wish to make a request please contact us:

Email - admin@cartwheelarts.org.uk

Phone – 01706 361 300

Post – 110 Manchester Street, Heywood, OL10 1DW