The Princess Alexandra Auditorium (PAA) and Friarage Theatre are committed to protecting your privacy. We will use the information that we collect about you in accordance with, the Privacy and Electronic Communications Regulations 2003, the Data Protection Act 1998 (DPA) and any replacement laws, and, from May 2018, the General Data Protection Regulation (GDPR).
Who we are
The Princess Alexandra Auditorium is part of Yarm School. Yarm School is constituted as a company limited by guarantee registered in England, Company Number 4451356, and is registered with the Charity Commission under Charity Number 1093434. Yarm School has one wholly owned subsidiary, Yarm School Trading Ltd, of which the Princess Alexandra Auditorium forms one part.
Our income is derived from ticket sales, commercial lettings and sponsorship.
Our website address is: https://www.thepaaonline.org.
What information do we collect?
The personal information that we collect includes:
- name, title, date of birth and gender
- contact details including postal address, email, phone numbers
- transaction history (we never store your whole card number, although we may keep a note of the last four digits to help us identify transactions)
- access requirements (for example if you require wheelchair access, audio description, BSL interpretation, or any other access requirement)
- details of visits to our website including traffic data, location data, operating system, browser usage, and the resources that you access
- image and likeness (as captured on our CCTV cameras and in photographs and videos we use for promotional purposes)
- other background personal information you provide to us (for example when you apply for a job, tell us your story, provide a reason for making a donation or correspond with us).
How do we collect your data?
You give us your information when you buy a ticket, sign up for one of our events, update your preferences on our website, tell us your story, make a donation, apply for a job, or communicate with us. We also keep your details when you sign up to receive emails from us.
We keep a record of the emails we send you, and we may track whether you receive or open them so we can make sure we are sending you the most relevant information. We may then track any subsequent actions online, such as buying a ticket.
Like most websites, we receive and store certain details whenever you use the PAA website at www.thepaaonline.org. We use “cookies” to help us make our site – and the way you might use it – better. Cookies mean that a website will remember you and enable online transactions. It also helps us understand how you use our website, where we can make improvements and how best to tell our audiences about events they might be interested in.
We may also receive information from external sources which enables us to gain a better understanding of our audiences, visitors and supporters and to improve our fundraising and marketing methods. These sources include:
Depending on your settings and the privacy policies used by social media and messaging services like Facebook, Instagram or Twitter, we may receive non-personally identifying demographic or analytical information from these services that enables us to better understand the reach and effectiveness of our advertising.
Information available publicly
We may collect public information, for example information found in places such as Companies House your biography on your work website or information that has been published in articles/ newspapers.
How we keep your details safe and secure
Your personal data will be held and processed on The Princess Alexandra Auditorium’s systems or systems managed by Ticketsolve on behalf the PAA. We maintain a customer relationship management (CRM) system to hold contact details and a record of your interactions with us such as ticket purchases, donations, memberships, queries, complaints and attendance at special events. Where possible we aim to keep a single record for each customer.
We always seek to hold your data securely. Access to customer information is strictly controlled. The CRM system can only be accessed by people who need it to do their job. Certain data, for example sensitive information, is additionally controlled and is only made visible to members of staff who have a reason to work with it.
Our basis for processing your personal data and what we use it for
We aim to be clear when we collect your data and not to do anything you wouldn’t reasonably expect.
We may process your personal data because it is necessary for the performance of a contract. For example, if you make a purchase, sign up for an event or give a donation.
We may process personal data because it is in our legitimate interests to do so. For example we may use your personal information to understand your reasons for donating to us, to better understand your interests, to carry out screening on potential donors and to conduct due diligence on major donors , to tailor our communications to you and/or to give you an exceptional experience at our events. We may also collect information about how you use our services (including our website) to analyse our customer base and improve our processes.
The PAA also records and uses film, photographs and audio for promotional purposes on its website, social media accounts and other formats under its legitimate interests basis for processing where it would not be necessary, appropriate or practicable to obtain your specific consent (for example, we may on occasion seek to obtain specific consent for prominent or impactful uses, but typically not for group shots, background inclusion or internal use).
We may also process your personal data (including sensitive personal data) where:
- it is necessary for medical purposes (for example, in a medical emergency or where we otherwise judge it necessary to protect your or another person’s vital interests.)
- we have your consent to do so (for example to monitor the diversity of visitors). We will also ask for your consent to provide you with information about products and services and fundraising activities which may be of interest to you (apart from where it is appropriate for us to rely on our legitimate interests to do so).
Giving you control
We may tell you about events, concerts, priority booking and information about our site.
We make it easy for you to tell us how you want to hear from us (by logging onto our website and updating your preferences in the “My Account” section) or by telling our Ticket Office team over the phone or in person. You can opt out from these marketing communications at any time – every email has a hyperlink at the bottom which will guide you to your account login.
If you have opted out of marketing communications, we may still get in touch with you. For example we may email you to give you important information about the events you’ve booked or to tell you about any changes or cancellations.
How long do we keep your information?
We may retain information for a period of six years after your association with us has come to an end. Some information may be retained indefinitely for historical, statistical or research purposes. As stated below, you have the right to require us to erase personal data.
Under the GDPR you have the following rights:
- to obtain access to, and copies of, the personal data that we hold about you
- to require that we cease processing your personal data if the processing is causing you damage or distress
- to require us not to send you marketing communications
- to require us to correct the personal data we hold about you if it is incorrect
- to require us to erase your personal data
- to require us to restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal.
- to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller
- to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
- Email us at firstname.lastname@example.org
- Or write to us: Auditorium Manager, The Princess Alexandra Auditorium, Yarm School, The Spital, Yarm, TS15 9EJ.