Our GDPR Policy – Data Privacy Notice
This document outlines Shrewsbury LGBT History’s EU GDPR policy.
This is a ‘live’ document that we will update as new information becomes available.
Shrewsbury LGBT History was founded in 2015 by invitation from the National Festival of LGBT History. Each year the Shrewsbury LGBT History Festival aims to share and highlight the history of LGBT+ people in Shropshire and beyond. The festival takes place in February and we run other events throughout the year.
Why do we collect data?
We collect data for normal business activities:
to complete our projects and events
to research stories and projects
to market our events
as part of our own due diligence to comply with public liability and indemnity insurance.
We do not sell or trade data or pass on data to third parties without the specific written permission of the data supplier. For example, if we are asked to recommend a colleague for a job etc.
We will share data if required to do so by law (e.g., by the police or as part of a legal process) or as part of our regular accounting activities (invoicing etc).
How do we collect data?
We collect data in usual ways:
Through the ticket sales via our website
Through documents and content supplied to us as part of our work (i.e., film files for review, text for content etc)
Business to business contact scenarios (work events, meetings etc)
Through social media
Contact information in the public domain
What data do we collect?
Customer information: contact names, email, contact number, social media information, billing information & bank details
We do not collect sensitive personal data (health, sexual orientation, dates of birth, school/college info etc) unless this is consented and required for a particular project
How do we store data?
Our contact lists are stored on Wix and Dropbox cloud services.
Access is password-protected. Also via Microsoft Excel.
We do not use facial recognition software.
We use some software as part of our workflows that stores data and metadata including:
Adobe Photoshop – for marketing and photography projects
We understand that data stored on these systems cannot be deleted for legal reasons including the following:
Public liability and indemnity insurance purposes.
We need to be able to defend our work and back reference projects in case of legal challenge.
Data (including film footage and archive material) from old projects/films may be required in future productions
It is a requirement that all invoices and company paperwork should be retained for 7 years for funder requirements
Anyone contributing to a Shrewsbury LGBT+ History project is asked to complete a contributor consent form which covers data protection and rights. These contributor forms are kept indefinitely or for as long as the programme/report that they pertain to remains active.
Data management & viewing your data
We regularly update our contact lists and delete old & irrelevant contacts.
If you wish to be removed from our contact list please send us an e-mail to firstname.lastname@example.org
If you require further information, please contact email@example.com