Privacy Notice
This Privacy Notice explains how Hackney Music Live (Sutton House Music Society) collects, stores, manages and protects your personal data. It outlines the types of data we hold and how we use them. Hackney Music Live takes its responsibilities around the correct collection, use and destruction of the personal data of all of its audiences and stakeholders very seriously and is committed to the openness and fairness in the handling of personal data.
1. Who are we?
Hackney Music Live is the trading name of Sutton House Music Society. Hackney Music Live is the data controller (contact details below). This means it decides how your personal data (“information”) is processed (“used”) and for what purposes.
2. Our purpose
Our mission is to support the live performance of high quality music in Hackney. We achieve this by producing concerts in venues around Hackney.
3. Your personal data – what are they?
Personal data means any information from which an individual can be identified. Identification can be by the information alone or in conjunction with any other information the data controller possesses or is likely to possess. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the “GDPR”). Hackney Music Live collects and processes personal data to support the aims of the organisation.
To provide services and support under agreements or contracts we may collect and process all or some of the following data:
Name and title
​
-
Contact details including postal address(es), personal e-mail, phone number(s), links to social media accounts
-
Records of communications sent to you by us and received by us from you
-
Photos and video of events in which you appear
For managing events, sending out our newsletters, marketing and promoting the work of Hackney Music Live we may collect and process the following data:
-
Name and title
-
Contact details including postal address(es), personal e-mail, phone number(s), and links to social media accounts
-
Photos and video of events in which you may appear
4. How do we collect your information?
The majority of information about you that we use is obtained directly from you. You may subscribe to our mailing list to receive updates from us. We may require you to give us your information so that we can provide you with tickets to concerts.
5. How do we use your information?
Hackney Music Live complies with its obligations under the GDPR by keeping your information up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting information from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect it.
We use your information for the following purposes:
-
To meet our responsibilities under contracts with you
-
To inform you of news, events, activities and other services run for our networks;
-
To administer tickets;
-
To otherwise communicate with you regarding our aims and activities that are likely to be of interest;
-
For internal record keeping so as to keep a record of your relationship with us;
-
To keep your information up to date; and
-
To implement any instructions you give us with regard to withdrawing any or all of your consent.
​​
6. What is the legal basis for using your information?
We will be processing your personal data only with your consent and for the purpose of meeting our responsibilities under agreements and contracts where applicable.
7. Sharing your personal data
Your personal data will be treated as strictly confidential, and we will only share your data with third parties with your consent unless we have a legal obligation to do so.
8. How long do we keep your personal data?
We will keep your data as long as you are a member of our mailing list. If you are a performer we will retain your personal contact information indefinitely for the purposes of potentially contacting you to discuss further work
Financial records will be retained in line with financial law and regulation for at least seven years.
9. Where do we keep your data?
Hackney Music Live maintains your data within the EU.
Data is only processed by third parties outside of the EU for the provision of services such as:
-
Managing events
-
Sending our newsletters
Where data is processed outside the EU, Hackney Music Live has verified that the appropriate safeguards are in place including:
-
Complying with all data protection principles
-
Where possible trying to ensure data is processed in a country that is on the list of countries approved as adequate by the EU
-
If the transfer is to an organisation in the United States of America ensuring that the organisation participates under the auspices of Privacy Shield
-
Ensuring that in all other instances adequate contractual provisions are in place to ensure the protection of the data
10. How do we protect your data?
We ensure that there are appropriate and operational measures in place to protect your personal data. We have appropriate technical controls in place to protect your personal data:
-
Our mailing list is stored by a third party and access to it requires two-factor authentication
-
Internal files containing personal data are password protected
-
Where we use external companies to process personal data on our behalf we check how they manage the personal data and who has access to it.
11. Your rights and your personal data
Under the GDPR, you have the following rights with respect to your personal data:
-
The right of access – you can ask for a copy of your personal data which The Point of Care Foundation holds about you (this is primarily contact data) and confirmation of the reason for its use;
-
The right to rectification – you can ask that The Point of Care Foundation corrects any personal data if it is found to be inaccurate or out of date;
-
The right to erasure – you can ask for your personal data to be erased where it is no longer necessary for The Point of Care Foundation to retain such data;
-
The right to restrict processing – you can ask for a restriction to be made on further processing of your data if there is a dispute over its accuracy or processing;
-
The right to data portability – you can request that we provide you with your personal data and where possible, transmit that data directly to another data controller;
-
The right to object to the processing of your personal data for the purpose of direct marketing, for research (when you will need grounds relating to your particular situation); and
-
Rights related to automated decision making and profiling – this means that where there is an automated decision made in the processing of your data and you have not given explicit consent.
You have the overall right to complain to the regulator and/or seek judicial remedy if your information has not been treated in accordance with the law.
​
12. Further processing
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and whenever necessary, we will seek your prior consent to the new processing.
13. Contact Details
To exercise all relevant rights, queries or complaints, please contact the Data Protection Officer at Hackney Music Live: chairman@hackneymusiclive.co.uk