Privacy Policy

Sunderland Culture Ltd (we, our or us) is an organisation created to bring together the cultural programmes of Sunderland City Council, University of Sunderland and Music, Arts and Culture (MAC) Trust (the Partner Organisations) into a single, independent, resilient delivery model and realise the ambition of a city brimming with creative potential. We are an Arts Council England National Portfolio Organisation.

Sunderland Culture Ltd is a Registered Charity, no 1184073. Company Limited by Guarantee in England and Wales No. 10098742. Registered Office National Glass Centre, Liberty Way, Sunderland, SR6 0GL. VAT Registration No 414220646.

Sunderland Culture works in National Glass Centre and Northern Gallery for Contemporary Art, Sunderland Museum & Winter Gardens and Arts Centre Washington, and delivers programmes of cultural engagement and events across the whole city. It works across the city to ensure the power of great art, culture and creativity is harnessed for the benefit of Sunderland, its residents and visitors. Sunderland Culture’s mission is to improve life for everyone in Sunderland through culture.

In order to run the Sunderland Culture campaigns for the benefit of Sunderland, its residents, businesses and visitors, we liaise and engage with you, as an employee, representative or agent of our Partner Organisations; as a stakeholder or investor; as a patron, advisor, sponsor, business partner, a member of an associated community group or a business contact in any other capacity (our Stakeholders).

We are committed to respecting your privacy and the security of your personal data, and this policy sets out the basis on which any personal data we collect from you, or that you provide to us], will be processed.  We are the Data Controller of any personal data we hold on you for our purposes, and when we share this data with any of our Partner Organisations, they will be a joint data controller. Data collected through our website may be processed by a Data Processing Partner. Our Data Processing Partners do not have permission to use your data.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

Please use the sections below to read about how we process your personal data.

Personal data, or personal information, means any information about an individual from which that person can be identified.

In some circumstances we may anonymise your personal data so that it can no longer be associated with you for research or statistical purposes.

We may collect, use, store and transfer different kinds of personal data about you, depending on the nature of our relationship with you and the ways in which you engage with us, which are listed in the section: Purposes for which we use your personal data.

• Identity Data includes first name, last name, username or similar identifier, marital status, title, date of birth and gender
• Contact Data included billing address, delivery address, email address and telephone numbers
• Financial Data includes bank account and payment details
• Transaction Data included details about payments to and from you and other details of products and services you have purchased from us
• Marketing and Communication Data includes your preferences in receiving marketing from us and our third parties and you communication preferences

We may also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. We may use special category personal data about you if you make that information manifestly public, for example if you are a representative of a political party and we invite you to an event in your official capacity.

Where we need your data for the performance of our contract or a legal obligation, and you fail to provide it, it may mean we have to cancel that contract, so we will notify you at the time of the information we need.

We have set out below a description of the ways in which we may use your personal data, and what our legal basis under the General Data Protection regulation (GDPR) for that processing is. We have also identified what our legitimate interests are where appropriate.

A Legitimate Interest is an interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests.

We have legitimate business interest to use photos of our events in marketing documents, communications, in annual reports and on our website or publicity documents.

If you attend an event where we may be taking photos, you will see signs notifying you of this. If you are identifiable from any image that we wish to use, we will take every reasonable step to ask for your consent to use this image. If we do not have your consent, we will not use an image which we believe identifies you in any campaign posters, publications, or other publicly available documents.

We may however use images from events on our social media. If we do use an image which you believe identifies you, and you would like us to take it down please contact:  info@sunderlandculture.org.uk

We keep images on file for 7 years.

We like to engage with our Stakeholders via various social media platforms. Where you may have engaged with us on social media, we will liaise with you via the platform through which you are engaging, but we do not use the personal data you have made available on social media outside of that platform.

The use of personal data on social media is governed by that platform’s own privacy policy or terms and conditions.

We only keep your personal data as already indicated above, or for as long as is necessary for the purposes which it is provided. We will contact you from time to time to make sure you want to stay on our marketing database, and by law we have to keep basic information about our stakeholders for six years after they cease being stakeholders for tax purposes.

As we continue to update and revise our data protection procedures and practices, we may update this retention policy. Please check back from time to time or contact us to see how long your data may be held on file: info@sunderlandculture.org.uk

In some circumstances, you can ask us to delete your data: see Right to be forgotten below for further information.

In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, for historic, research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Cookies are small files saved to your computer’s hard drive that track, save and store information about your interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience.

We use cookies to better the users experience while visiting the website. Where applicable this website uses a cookie control system allowing the user on their first visit to the website to allow or disallow the use of cookies on their computer and/or device. This complies with recent legislation requirements for websites to obtain explicit consent from users before leaving behind or reading files such as cookies on a user’s computer and/or device.

This website uses tracking software to monitor its visitors to better understand how they use it. This software is provided by Google Analytics which uses cookies to track visitor usage, but will not store, save or collect personal information.

Third-party cookies

We work with third-party suppliers who may also set cookies on our site, for example X, Meta and LinkedIn. These third-party suppliers are responsible for the cookies they set on our website. If you want further information, please go to the website for the relevant third party.

How to turn off cookies

If you do not want to accept cookies, you can change your browser settings so that cookies are not accepted. If you do this, please be aware that you may lose some of the functionality of this website. For further information about cookies and how to disable them you can visit the following sites:

www.aboutcookies.org

www.allaboutcookies.org

You have the right to:

• Request access to your personal data, known as a ‘data subject access request’
• Request correction of any inaccurate personal data that we hold about you
• Request erasure of your personal data where there is no good reason for us continuing to process it. We may not always comply with your request for erasure for legal reasons
• Object to processing of your personal data where we are relying on a legitimate interest. In some cases, we may demonstrate that we have compelling grounds to continue processing your information which override your request
• Request restriction of processing of your personal data while we establish the data’s accuracy; if our use is unlawful; to hold it on file in order to establish, exercise or defend legal claims; while we process your request to object to processing based on a legitimate interest
• Request the transfer of your automated personal data in a structured machine-readable format where we used the format where we used the information to perform a contract with you, or you gave us your consent to process it
• Withdraw consent at any time where we are relying on consent to process your personal data
• Complain – you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk)