What we do with your data
Privacy Notice – how NCF and the Nottingham Comedy Festival keeps your data
NCF Comedy and The Nottingham Comedy Festival are all trading names of NCF Entertainment which is a solely owned company. The Nottingham Comedy Festival is a ‘not for profit’ part of NCF Entertainment. NCF Entertainment (NCF) understands that your privacy is important to you and that you care about how your personal data is used, stored and shared. We respect and value the privacy of everyone who joins our mailing list, becomes one of our artists or their representatives, hosts one of our events, visits our websites or uses any of our services. We are a "data controller" for the purposes of the Data Protection Act 1998 and (from 25 May 2018) the EU General Data Protection Regulation 2016/679 ("Data Protection Law"). This means that we are responsible for, and control the processing of, your personal information. This notice explains how we use information about you and how we protect your privacy.
Your rights are set out in Data Protection Law.
Below we explain how we protect these rights, including what we will use your
data and personal information for and how we will use it. Our policy on Privacy
and Data Protection has been designed to make sure that we are protecting your legal
Personal information we collect directly from you may include details such as your name, date of birth, email
address, postal address, telephone numbers, banking information as well as
information you provide in any communications between us. You may give us
this information when joining our mailing list, registering for an event, performing
at one of our events, hosting an event, using our services, or any of the other
ways to interact with us. (Credit card details are held by ticket booking
agencies and are never forwarded on to NCF).
We may use this information:
- To process your request to join the mailing list and to provide you with special offers, news and other information we consider will be of interest.
- To keep a record of your relationship with us.
Where you volunteer with us, to administer the volunteering arrangement.
- When banking details are supplied, to make prompt payments to you of any
- If you are an artist or their representative we may keep details of any performances, contact details etc. to assist in preparing other events.
this information is shared outside the organisation without your consent unless
required by law.
You don’t have to
provide this information, but without it we may not be able to provide the
services you have requested, make payment to you or sign you up for a
Data Protection law recognises that certain categories of personal information are more sensitive. Sensitive personal data is information about your health, race, religious beliefs, criminal records and political opinions. We only collect ‘sensitive personal data’ about our users when there is a clear reason for doing so. For example health information may be used to ensure you can have the relevant facilities to enjoy or participate in any event We will not pass on your details to anyone else without your consent except in exceptional circumstances allowed by law.
Data Protection law sets out the legal grounds under
which we can use your personal information and sensitive data.
We will only
use your personal information in a way or for a purpose that you would
reasonably expect, and that does not conflict with any previously expressed
If we use your personal information for
research and analysis, we’ll always keep you anonymous unless you’ve agreed
that your personal information can be used for that research.
We don’t sell your personal information to
Who do we share your information with?
We may use other organisations to help
deliver some of our services and activities. Where we do this, there is always
an agreement in place to make sure that the organisation complies with data
You can be assured that whoever we share your
information with, we will have received confirmation that they are protecting
your rights under GDPR in the same way as NCF.
In very rare instances the law requires organisations
to share information because there’s a good reason that’s more important than
protecting your privacy. This would be:
in order to find and stop crime and fraud;
if there are serious risks to the public, our
staff or to other professionals;
to protect a child; or
to protect adults who are thought to be at
For all of these reasons the risk must be
serious before we can override your right to privacy.
How do we protect your information?
We’ll hold records about you (on paper and
electronically) in a secure way, and we’ll only make them available to those
who have a right to see them. Examples of our security include: controlling
access to systems and networks so that only authorized NCF staff can access
your personal information; regular testing of our technology and ways of
working and training our staff and
volunteers in how to handle information and how and when to report when
something goes wrong.
Where in the world is your
All of the information we currently hold is stored on systems in the UK.
How long do we keep your personal information?
If you’re listed on our mailing list we will hold your data until you request it be removed. This can be done at any time and we will ensure the data is removed immediately. Occasionally we may check that the list is up to date and you will then be asked to confirm you wish to remain on the list.
Where can I get advice?
NCF makes sure we respect your rights and follow the law. If you have any concerns or questions about how we look after your personal information, please contact our Data Protection Lead by, or by e-mail at [email protected] or [email protected] For independent advice about data protection, privacy and data sharing issues, you can contact the Information Commissioner’s Office at: Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.
You have various rights in respect of the personal information
we hold about you – these are set out in more detail below. If you wish
to exercise any of these rights or make a complaint, you can do so by
contacting our Data Protection Lead at [email protected]. You can also make a complaint to the data protection
supervisory authority, the Information Commissioner's Office.
Access to your personal information:
You have the
right to request access to a copy of the personal information that we hold
about you, along with information about the personal information we use, why we
use it, who we share it with, how long we keep it for and whether it has been
used for any automated decision making. You can make a request for access free
of charge. Please contact us with your access request, we may ask you for
proof of your identity.
Right to object:
You can object to our using your
personal information, or you can change the way that we communicate with you.
Please contact us as noted above, providing details of your objection, or the
change that you would like to make.
If you have given us your consent to use
personal information, you can withdraw your consent at any time.
You can ask us to correct, change or
complete any inaccurate or incomplete personal information held about you.
You can ask us to delete your personal
information where it is no longer necessary for us to use it, if you have
withdrawn consent, or where we have no lawful basis for keeping it.
You can ask us to provide you or a
third party with some of the personal information that we hold about you in a
structured, commonly used, electronic form, so it can be easily transferred.
You can ask us to restrict the personal
information we use about you.
No automated-decision making:
decision-making takes place when an electronic system uses personal information
to make a decision without human intervention. NCF doesn’t use any
automated decision-making systems.
Data Protection law sets out the legal grounds under which we can use your personal information. It may be where you have given us your consent. This will be for a purpose that you have told us about, such as to process your membership application, provide you with a product, service or information at your request. It may be where we have a legal obligation to use or disclose information about you – For example if we are ordered to do so by a court or regulatory authority . It may be because it is necessary to use your data to communicate with you, or provide an activity, in a way that you would reasonably expect. The law calls this 'legitimate interest'. Whenever we process your personal information under the ‘legitimate interest', we have to make sure that the processing is necessary to carry out the task, that we couldn’t achieve it in a less intrusive way and that we take into account your rights and interests. Examples of where we may use personal information this way are: To tell current members and supporters about our activities and services. To verify who we deal with to protect us against fraud, money laundering and other risks; To improve our services; To deal with complaints and claims, or To conduct research to better understand who our supporters are. When you visit our website Your details will not be retained when you access our web sites unless you book a ticket when the ticket agency may retain booking details (financial details are not forwarded to NCF) you request information or request to be added to a marketing list, list of performers or venues. The information is retained within NCF and is not sold or given outside unless you give specific consent. When you want to share your experiences NCF is always happy to hear about your experiences and personal stories. We use them to share with customers and potential customers. We will only do this if you have given us your consent or otherwise clearly indicated to us. We may then publish it in other media support our marketing or fundraising bids.
NCF Entertainment May2018