Wirral Council is the organization responsible for running the Floral Pavilion Theatre & Conference Centre. The overarching privacy notice for the council can be found here Principal Privacy Notice | www.wirral.gov.uk

For the purpose of the Data Protection Act 2018 and the General Data Protection Regulation (GDPR) the Data Controller is Wirral Council, whose registered address is:

Wirral Council,
PO Box 290,
Brighton Street,
Wallasey, Wirral,
CH27 9FQ.

The statutory officer responsible for Data Protection Compliance is Wirral Council’s data protection officer who can be contacted at DPO@Wirral.gov.uk

Floral Pavilion Theatre generally collects personal data from you when you engage with us in relation to our facilities and/or services. These include but are not limited to

• Booking a ticket
• Enquiring about an event
• Sign up to our emails
• Purchase from us
• Hiring one of our spaces

The information we collect may include name, postal address, email address, phone number, age, bank details, payment card details, any access requirements you tell us, and if you are interacting with us as a business, government authority or charity, your organisation or entity’s name.

Your Debit Card and Credit Card Information

If you use your credit or debit card, we will ensure that this is done securely and that we will not keep your details for longer than necessary for the purposes of the transaction. We maintain a record of your transaction history, but we never store your card number (although we may keep a note of the last four digits to help us identify transactions).

Email, Web Activity and Social Media

We keep a record of the emails we send you, and we may track whether you receive or open them so we can make sure we are sending you the most relevant information. We may then track any subsequent actions online, such as buying a ticket.

We record the way you use our website and social media channels, using this data to learn, for example, how many people visit our pages, and what they are trying to find. User traffic is also aggregated to help us improve and develop our site for the benefit of all users.

How We Use Cookies

A cookie is a small text file that is downloaded onto ‘terminal equipment’ (e.g. a computer or smartphone) when the user accesses a website. It allows the website to recognise that user’s device and store some information about the user’s preferences or past actions.

We use cookies when you visit our site. There are four main types of cookies – read more about how and why we use them below.
Our cookies help us:

• Make our website work as you’d expect
• Save you having to login every time you visit the site
• Remember your settings during and between visits
• Improve the speed/security of the site
• Allow you to share pages with social networks like Facebook
• Continuously improve our website for you
• Make our marketing more efficient (ultimately helping us to offer the service we do at the price we do)

We do not use cookies to:

• Pay sales commissions
• Collect any sensitive information

Click here to view our Cookie Policy in full

CCTV

The Floral Pavilion operates CCTV both inside and outside our buildings with the purpose of reducing the threat of crime generally, protecting the Floral Pavilion’s premises and helping to ensure the safety of all our staff, volunteers, and visitors, consistent with respect for the individuals’ privacy.

Special Category Personal Data

Data Protection legislation recognises that certain categories of personal information are sensitive in nature and are classed as special category data. This data includes:

• Race
• Ethnicity
• Political views
• Religion, spiritual or philosophical beliefs
• Biometric data for ID purposes
• Health data
• Sex life data
• Sexual orientation
• Genetic data

We do not usually collect this type of information unless there is a clear reason for doing so.

There are three legal bases under which we may use your data:

Contract Purposes

When you make a purchase, you are entering into a contract. In order to fulfil this contract, we need to process and store your data. For example, we may need to contact you by email or telephone in the case of cancellation of a show, or in the case of problems with your payment.

Legitimate Business Interest

In most situations we collect and process your personal data for purposes that are in our legitimate organisational interests. However, we only do this if there is no overriding prejudice to you by using your personal information in this way. We describe below all situations where we may use this basis for using your information.

Explicit Consent

For any situations where the above two reasons are not appropriate, we will instead ask for your explicit consent before using your personal information in that specific situation.

Marketing Communications

We aim to communicate with you about the work that we do in ways that you find relevant, timely and respectful. To do this we use data that we have stored about you, such as what events you have booked for in the past, as well as any preferences you may have told us about.

PLEASE NOTE: if you have previously ‘opted out’ of receiving such communications methods, this continues to take precedent. It is important to us that your choices about how we communicate with you are respected:-

• You can log into your account at any time and changing your preferences
• You can email floralboxoffice@wirral.gov.uk
• You can also ‘unsubscribe’ from any email we send you.

In line with our records retention and destruction policy we will cease to use your data for marketing and communications purposes after 7 years of inactivity on your account.

We will not share any personal details with any other third parties without your agreement, unless required to fulfil our contract with you, or allowed by law.

In general, the third-party providers used by us to fulfil our contract with you will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. For example, when booking a ticket, you may be given the choice to also hear from the artistic company you have booked to see. Where you explicitly agree for us to do so, we will pass your data to the relevant company, and they will be in touch with you to communicate their own Privacy and Data Policy.

Your information is stored in accordance with current Data Protection Legislation requirements on secure networks. Access to your information is limited to individuals with appropriate authorisation. Data is held mainly in the United Kingdom with some on servers within the European Union.

You have the right to be informed about how we use your data and the right to access information we hold about you, except where:

• It contains confidential information about other people and we are the required to balance the rights of other individuals
• It includes information a care professional thinks will cause serious harm to your or someone else’s physical or mental well-being
• It contains information which may prejudice an investigation if disclosed

To exercise your right to access or if you have any concerns about anything in this privacy policy simply contact the Data Protection Officer

Email DPO@Wirral.gov.uk or
Write – Data Protection Officer, Wirral Council, PO Box 290, Brighton Street, Wallasey, Wirral, CH27 9FQ

There is a wealth of information about Data Protection and Information Management legislation available on the website of our regulator https://ico.org.uk/