1. Introduction to this Policy
1.2. You should read this Policy carefully as it contains important information about how we will use your Information (as defined below in clause 4.1). In certain circumstances (see below) you will be required to indicate your consent to the processing of your Information as set out in this Policy when you first submit such Information to or through the Products.For further information about consent see clause 7below.
1.3. We may update this Policy from time to time in accordance with clause 18below. This Policy was last updated on 1stMarch 2020.
2. About us
2.1. The terms “Climax” or “us” or “we” refer to Climax Promotions and Events Limited (The Promotor), the owner of the intellectual property. We are a company registered in Wales under company number 12433707
2.2. whose registered office is at The Maltings, East Tyndall Street, Cardiff CF24 5EA. The term “you” refers to the individual using the services.
2.3. Our Data Protection Officer is Mark Hopkins, Head of Festivals and Live Music.
3. Data Protection
3.1. References in this Policy to:
3.1.1. “Data Protection Law” means: the Data Protection Act 1998 (until repealed) (“DPA”), the Data Protection Directive (95/46/EC) (until repealed) and, from 25 May 2018, the General Data Protection Regulation 2016/679 (“GDPR”) or any equivalent provision which may replace the GDPR following the formal political separation of the United Kingdom from the European Union; the Regulation of Investigatory Powers Act 2000; the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000 (SI 2000/2699); the Electronic Communications Data Protection Directive (2002/58/EC); the Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2426/2003); and all applicable laws and regulations which may be in force from time to time relating to the processing of Personal Data and privacy, including where applicable the guidance and codes of practice issued by the Information Commissioner or any other supervisory authority, and the equivalent of any of the foregoing in any relevant jurisdiction; and
3.1.2. “Personal Data”, “Data Controller” and “processing” shall have the meanings given to them in the DPA or, from 25 May 2018, the GDPR.
3.2. For the purposes of applicable Data Protection Law, we (Climax Promotions and Events Limited) are a Data Controller and therefore we are responsible for, and control the processing of, your Personal Data in accordance with applicable Data Protection Law. “Personal Data” has a legal definition but, in brief, it refers to information from which a living person can be identified. Such information must be protected in accordance with applicable Data Protection Law.
4. Information we may collect about you
4.1. When you use the Products and services and/or when you otherwise deal with us we may collect the following information about you (“Information”):
4.1.1. personal information including first name, last name and date of birth;
4.1.2. contact information including residential address, primary email address and/or primary phone number;
4.1.3. payment information including billing address and credit/debit card details;
4.1.4. technical data, includes internet protocol (IP) address, browser type and version, time zone and settings and platform and other technology on the device you use to access this website;
4.1.5. information obtained through our correspondence and monitoring in accordance with clause 12below.
4.3. Occasionally we may receive information about you from other sources, for example from any third party websites, applications or sign-in services (such as Facebook Connect) that integrate or communicate with the service in relation to you. If so, we will add this information to the Information we already hold about you in order to help us carry out the activities listed below.
5. How we store your Information and how long we keep it
5.1. All Information you provide to us through the website/ is securely stored within our google database.
5.2. Subject to clause 5.3, we will keep your Information only for as long as we need to hold it for the purposes set out in clause 8below.
5.3. If required, we will be entitled to hold Information for longer periods in order to comply with our legal or regulatory obligations.
6. Legal basis for processing your information
6.1. From 25 May 2018, under applicable Data Protection Law we may only process your Information if we have a “legal basis” (i.e. a legally permitted reason) for doing so. For the purposes of this Policy, our legal basis for processing your Information is:
6.1.1. your consent (for which see clause 7below); or
6.1.2. because the processing is necessary for the performance of a contract you have entered into with us (i.e. your contract with us as set out in this Policy and our Products/ Services terms and conditions available on our website, or for taking any preliminary steps that are required before you can enter into such a contract (provided we only do this at your request); or
6.1.3. subject to your rights set out in clause 15below, the legitimate interest of providing services to our users,which requires the processing of your Information to enable us to provide these services.
7. Your consentto processing
7.1. As noted above, you will be required to give consent to certain processing activities before we can process your Information as set out in this Policy, for example for marketing purposes under clause 9below. Where applicable, we will seek this consent from you when you first submit Information to or through the websites.
7.2. If you have previously given consent you may freely withdraw such consent at any time. You can do this through your account for the website or by notifying us in writing(see clause 21below).
7.3. If you withdraw your consent, and if we do not have another legal basis for processing your information (see clause 6above), then we will stop processing your Information. If we do have another legal basis for processing your information then we may continue to do so subject to your legal rights (for which see clause 15below).
8. How we use your Information
We may process Information held about you for the following purposes:
8.1. to operate, administer, maintain, provide, analyse and improve the products/ services available;
8.2. to carry out our obligations arising from any agreements entered into between you and us;
8.3. to investigate and address any comments, queries or complaints made by you regarding the Services, and any similar or related comments, queries or complaints from other users;
8.4. to otherwise communicate with you for customer service purposes;
8.5. to ensure that content from the Products/Services are presented in the most effective manner for you and for your device;
8.6. to conduct research, statistical analysis and behavioral analysis (including anonymizing data for these purposes), including understanding your broad, non-specific geographic location to help us identify groups of users by general geographic market (such as zip code, state or country);
8.7. to provide insights based on aggregated, anonymous data collected through the research and analysis referred to at 8.6above;
8.8. to allow you to participate in interactive features of the Products/ Services, including inputting information, providing feedback and completing surveys;
8.9. to contact you for marketing purposes if applicable (see ‘Marketing and opting out’ in clause 9below);
8.10. to disclose your information to selected third parties as permitted by this Policy (see clause 10below);
8.11. to notify you about changes to the Products/ Services; and
8.12. to comply with our legal obligations, including obligations relating to the protection of Personal Data.
9. Marketing and opting out
9.1. Where you have previously ordered Products/ Services from us we may contact you by [telephone and email] about similar or related Products/ Services, promotions and special offers that may be of interest to you. We will inform you (during the sale process) if we intend to use your data for such purposes and give you the opportunity to opt-out of receiving such information from us. If you do not opt-out then we may contact you unless you opt-out later (see below). In addition, and if you have given permission, we may also contact you by about our other Products/ Services, promotions and special offers that may be of interest to you. We will inform you (before collecting your data) and seek your permission if we intend to use your data for such additional marketing purposes. If you prefer not to receive any direct marketing communications from us, or you no longer wish to receive them, you can opt out at any time (see below).
9.2. If you have given permission, we may contact you by mail, telephone and email to provide information about services, promotions, special offers and other information we think may be of interest to you from carefully selected third parties. We will inform you (before collecting your data) if we intend to use your data for such purposes. If you would rather not receive such third party marketing information from us, or you no longer wish to receive it, you can opt out at any time (see below).
9.3. If you have given permission, we may share your personal data with carefully selected third party organizations and business partners and they may contact you directly (unless you have asked them not to do so) by mail, telephone and email about services, promotions and special offers that may be of interest to you. We will inform you (before collecting your data) and seek your permission if we intend to disclose your data to third parties for such purposes. If you prefer not to receive direct marketing communications from our business partners, or you no longer wish to receive them, you can opt out at any time (see below).
9.4. You have the right at any time to ask us, or any third party, to stop processing your information for direct marketing purposes. If you wish to exercise this right, you should contact us by sending an email to firstname.lastname@example.org contact the relevant third party using their given contact details, giving us or them enough information to identify you and deal with your request. Alternatively you can follow the unsubscribe instructions in emails you receive from us or them.
10. Disclosure of your information
10.1. We may disclose your Information (including Personal Data):
10.1.1. to other companies within our group of companies (which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006);
10.1.2. to our business partners, ticket providers or third-party contractors to enable them to undertake services for us and/or on our behalf (and we will ensure they have appropriate measures in place to protect your Information);
10.1.3. to business partners that offer and/or provide goods or services complementary to our own where this would enhance our users’ experiences by offering you integrated or complementary functionality, or bundled pricing options;
10.1.4. to any prospective buyer or seller (and their represenatives) in the event that we sell or buy any business or assets;
10.1.5. if we are under a duty to disclose or share Personal Data in order to comply with any legal obligation, including (but not limited to) any request or order from law enforcement agencies and/or HMRC in connection with any investigation to help prevent unlawful activity; and
10.1.6. to other third parties if you have specifically consented to us doing so.
10.2. We may disclose aggregated, anonymous information (i.e. information from which you cannot be personally identified), or insights based on such anonymous information, to selected third parties, including (without limitation) analytics and search engine providers to assist us in the improvement and optimisation of our services. In such circumstances we do not disclose any information which can identify you personally.
10.3. If our whole business is sold or integrated with another business your Information may be disclosed to our advisers and any prospective purchasers and their advisers and will be passed on to the new owners of the business.
11. Keeping your Information secure
11.1. We will use technical and organisational measures in accordance with good industry practice to safeguard your Information. In particular, any payment transactions will be encrypted using SSL technology and all payment information is stored with our ticketing/ products payment processor and is never stored on Climax Promotions and Events servers.
11.2. While we will use all reasonable efforts to safeguard your Information, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any Information that is transferred from you or to you via the internet.
We may monitor and record communications with you (such as telephone conversations and emails) for the purposes of provision of Products/ Services, quality assurance, training, fraud prevention and compliance purposes. Any information that we receive through such monitoring and communication will be added to the information we already hold about you and may also be used for the purposes listed in clause 8above.
13. Information about other individuals
If you give us information on behalf of a third party, you confirm that the third party has appointed you to act on his/her/their behalf and has agreed that you can: give consent on his/her/their behalf to the processing of his/her/their Information; receive on his/her/their behalf any data protection notices.
14. Your rights
If you are an individual, this section sets out your legal rights in respect of any of your Personal Data that we are holding and/or processing. If you wish to exercise any of your legal rights you should put your request in writing to us (using our contact details in clause 21below) giving us enough information to identify you and respond to your request.
14.1. You have the right (which may be subject to the payment of a small fee depending on when you request this right) to request information about Personal Data that we may hold and/or process about you, including: whether or not we are holding and/or processing your Personal Data; the extent of the Personal Data we are holding; and the purposes and extent of the processing.
14.2. You have the right to have any inaccurate information we hold about you be corrected and/or updated. If any of the Information that you have provided changes, or if you become aware of any inaccuracies in such Information, please let us know in writing giving us enough informationdeal with the change or correction.
14.3. You have the right in certain circumstances to request that we delete all Personal Data we hold about you (the ‘right of erasure’). Please note that this right of erasure is not available in all circumstances, for example where we need to retain the Personal Data for legal compliance purposes. If this is the case we will let you know.
14.4. You have the right in certain circumstances to request that we restrict the processing of your Personal Data, for example where the Personal Data is inaccurate or where you have objected to the processing (see clause 15.6below).
14.5. You have the right to request a copy of the Personal Data we hold about you and to have it provided in a structured format suitable for you to be able to transfer it to a different data controller (the ‘right to data portability’). Please note that the right to data portability is only available in some circumstances, for example where the processing is carried out by automated means. If you request the right to data portability and it is not available to you we will let you know.
14.6. You have the right in certain circumstances to object to the processing of your Personal Data. If so, we shall stop processing your Personal Data unless we can demonstrate sufficient and compelling legitimate grounds for continuing the processing which override your own interests. If, as a result of your circumstances, you do not have the right to object to such processing then we will let you know.
14.7. You have the right in certain circumstances not to be subject to a decision based solely on automated processing, for example where a computer algorithm (rather than a person) makes decisions which affect your contractual rights. Please note that this right is not available in all circumstances. If you request this right and it is not available to you we will let you know.
14.8. You have the right to object to direct marketing, for which see clause 9.4above.
If you have any concerns about how we collect or process your Information then you have the right to lodge a complaint with a supervisory authority, which for the UK is the UK Information Commissioner’s Office (“ICO”). Complaints can be submitted to the ICO through the ICO helpline by calling 0303 123 1113. Further information about reporting concerns to the ICO is available at https://ico.org.uk/concerns/.
16. ‘Cookies’ and related tracking technologies
16.1. Our software may contain and/or issue ‘cookies’ (small text files) or similar tracking technologies to your device when you access the Websites. Cookies do not affect your privacy and security since a cookie cannot read data off your system or read cookie files created by other sites.
16.3. Information about specific tracking and monitoring technologies we use are as follows:
16.3.1. We use local storage, such as HTML5, to store content information and preferences. Third parties with whom we partner to provide certain features on the Products/ Services also use HTML5 to collect and store information. Various browsers may offer their own management tools for removing HTML5.
16.3.2. We may use third party trackers to let us know when users have visited the Products/ Services by “clicking-through” our sponsored advertising or content hosted on third party platforms.
16.3.3. The Website uses Google Analytics code to gather statistical information. Google Analytics sets cookies to help us accurately estimate the number of visitors to the website and the volume of usage. This is done to ensure that the website is available when you want it and is fast. For more information on how Google Analytics processes this information, visit www.google.com/analytics.
16.3.4. We use mobile analytics software to allow us to better understand the functionality of our mobile software (including the App and mobile versions of the Website) on your phone. This software may record information such as how often you use the Products/ Services, performance data. We may link the information we store within the analytics software to any personal information you submit within the mobile application.
16.3.5. If you receive the HTML-formatted version of our email newsletter, your opening of the newsletter is notified to us and saved. Your clicks on links in the newsletter are also saved. These and the open statistics are used in aggregate form to give us an indication of the popularity of the content and to help us make decisions about future content and formatting.
16.4. We may partner with third parties who use tracking technologies such as cookies to gather information about your activities within the Products/ Services to deliver such advertising to you, such as retargeting ads. For more information about interest-based ads, including how to opt-out of having your web-browsing information used for behavioural advertising purposes, please visit www.aboutads.info/choices. Please note that this does not opt you out of being served ads. You may continue to receive generic ads on these third party platforms. You may also opt out of receiving ads across devices by adjusting your ad preference if you have accessed Climax Promotions and Events Products via an android device ustilising a Google account.
16.5. You can set your system not to accept cookies if you wish (for example by changing your settings so cookies are not accepted), however please note that some of our services may not function if you remove cookies from your system. For further general information about cookies please visit www.aboutcookies.orgor www.allaboutcookies.org.
16.6. Our Products/ Services may develop to include social media features, such as the Facebook Like button, and widgets, such as the “Share This” button, or interactive mini-programs. These features may collect your Internet protocol address, which page you are visiting on our services, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Either way, your interactions with these features are governed by the privacy statement of the company providing them and it is your responsibility to check that you are happy with any applicable third party terms or policies before activating or using third party features.
17. Changes to this Policy
17.1. We keep this Policy under regular review and may change it from time to time. If we change this Policy we will post the changes on this page, and place notices on other pages, so that you may be aware of the Information we collect and how we use it at all times. You are responsible for ensuring that you are aware of the most recent version this Policy as it will apply each time you use the services.
17.2. This Policy was last updated on 1stMarch 2020.
18. Links to other website and apps
18.1. Our websites may contain links to other website or apps. This Policy only applies to our services. If you access links to other websites or apps any Information you provide to them will be subject to the privacy policies of those other websites and apps.
18.2. If you use third party services or platforms (such as Facebook Connect) to interact with our Product/ Services we may, through such third party platforms, give you to the option to post information about your activities on our Products/ Services to your profile page(s) and/or share with others within your network on such third party platforms. Where we offer this function, any information that is posted to your profile page(s) on third party platforms will be subject to the terms and policies (including privacy policies) of such platforms. It is your responsibility to ensure that information you choose to share to third party platforms through our services does not breach the terms and policies of such platforms and we will not be responsible or liable for any such breach.
This Policy aims to provide you with all relevant details about how we process your Information in a concise, transparent, intelligible and easily accessible form, using clear and plain language. If you have any difficulty in reading or understanding this Policy, or if you would like this Policyin another format (for example audio, large print or braille), please get in touch with us.
20. Contact us