The Policy does not cover all of the personal data processing operations by Downstage Left, for example data processed in connection to members and committee, which is covered by internal procedures.
The data controller for data collected and processed in accordance with this Policy is Downstage Left.
Any questions regarding this Policy or any other data protection issue related to Downstage Left should be submitted by email to info@downstage Left.org
Downstage Left is a theatre collective that is eager to create and share great performances. Downstage Left is also committed to increasing its audiences, both online and in attendance at its performances.
To meet these objectives Downstage Left needs to collect and process some personal data. In accordance with these guiding principles, Downstage Left limits the amount of data it collects to that which is needed to meet these objectives, and only ever uses the data that it collects for purposes that are related to those objectives.
Downstage Left also engages third party service providers to help it meet its objectives. As far as possible, Downstage Left prioritises service providers that work to protect personal privacy.
Downstage Left will never sell the personal data it collects, and will work to protect that data against unauthorised access and misuse.
Data collection and processing
In order to meet its communications and community-building objectives, Downstage Left collects and processes data from the following data subjects (you are the “data subject” if you fall into any of these categories):
- Website users
- Email list subscribers
- Social media users
- Users of our ticket service
The following table shows the data collected by Downstage Left and who it is collected from.
Not all the data listed below is collected systematically. For example, Downstage Left members may look at information relating to social media users who engage with the organisation on Facebook, but does not routinely collect such information.
|Data subjects||Name||Email address||Home address||Phone number||Biographical information||IP Address||Pages accessed|
|Email list subscribers||x||x||x|
|Social media users||x|
|Users of our ticket service||x||x||Optional||Optional||Optional||Optional||Optional|
Downstage Left collects and processes personal data for the following specific purposes:
- To send emails about its work to its email subscribers
- To administer its websites and monitor aggregate usage
- To provide its audiences with updates
- To respond to communications received via its website
- To respond to requests for information about its services from data subjects
- To receive and process ticket payments
- To conduct occasional surveys regarding its work or services
- For related accounting and auditing purposes.
Downstage Left takes all reasonable steps to ensure that personal data is treated securely and in accordance with this Policy. Unfortunately, the transmission of information via the internet is not completely secure. Although Downstage Left does its best to protect personal data, it cannot guarantee the security of personal data transmitted to any of its websites. Any such transmission is therefore at the data subject’s own risk.
For personal data in its possession, Downstage Left implements various technical and organisational measures in order to prevent unauthorised access. Access controls within the organisation limit the number of people with access to personal information to those that need it in connection with their related responsibilities.
In order to meet its objectives, Downstage Left works with a carefully chosen group of third party service providers to perform tasks on its behalf.
This includes the following service providers, who perform the following tasks.
|Ikbenaanwezig||Ticket web shop|
|Mailchimp||Manage email subscriber list|
|WP Statistics||Analyzing traffic to our website|
Downstage Left may also engage additional third-party service providers to provide services such as ticket sales or promotion. These activities may involve access to the personal data held by Downstage Left. In these instances we will seek to ensure as far as possible that any such data processing is carried out in accordance with this Policy. This includes conscientiously selecting service providers and only working with trusted partners.
As far as possible, the personal data that Downstage Left collects is stored within the European Economic Area and therefore processed in accordance with EU data protection law. However, because many of our third party vendors work globally, there may be occasions where personal data is processed outside of this jurisdiction, for example by staff or contractors working for Downstage Left from other parts of the world. In these rare instances Downstage Left takes appropriate steps to ensure that the recipients of personal data are bound by a duty of confidentiality.
Downstage Left retains personal data only for as long as necessary in accordance with the above purposes and applicable laws.
When personal data is no longer necessary for these purposes it is securely deleted.
Where financial information is concerned, Downstage Left may be required to retain some personal data for up to seven years in order to satisfy legal or contractual obligations, or in order to establish, exercise or defend legal claims.
For consent-based services from which the data subject can opt-out at any time such as email updates, Downstage Left keeps personal data until it receives instructions to the contrary.
Tracking and cookies
Downstage Left limits the information it collects from its website users.
Downstage Left’s internet service provider may also process traffic data to support the provision of its services.
Downstage Left also collects some data in order to understand how its website is used. This data processing is primarily concerned with counting views, and, if available, the geographical distribution of the views.
Downstage Left also collects data on how people use its websites in order to understand the impact of its work and improve its communication. This data processing is primarily concerned with recording the specific pages of the website that people enter and leave the site from and the sections of the website they visit.
Downstage Left also makes limited use of WP Statistics. Downstage Left’s use of WP Statistics enables the collection of traffic data but does not allow Downstage Left to identify individual users or link web usage to other personal data.
Downstage Left uses social media and social networking to increase the reach and impact of its work. These applications require the use of third party service providers.
Downstage Left has a Facebook page.
Downstage Left’s Facebook page is administered by Facebook, in accordance with Facebook’s Data Policy, and is accessible by Facebook users who have already consented to Facebook’s Data Policy.
Downstage Left’s social media accounts and pages are managed by Downstage Left members. Downstage Left does not import or export information on its followers or subscribers from or to the aforementioned platforms.
Downstage Left may occasionally use direct messaging over social media if it is contacted this way by individuals or organisations.
Downstage Left’s email newsletter is administered by Mailchim, in accordance with Mailchimp’s Data Policy, and is provided to users who have already consented to Mailchimp’s Data Policy.
Downstage Left will contact its newsletter subscribers about upcoming performances and auditions and, very occasionally, for other marketing purposes related to Downstage Left. In general, subscribers will receive a maximum of two newsletter emails per month from Downstage Left.
Data subjects rights
Individuals whose personal data is processed by Downstage Left have the following rights:
- The right to be informed as to whether Downstage Left holds data about them
- The right of access to that information
- The right to have inaccurate data corrected
- The right to have their data deleted
- The right to opt-out of particular data processing operations
- The right to receive their data in a form that makes it “portable”
- The right to object to data processing
- The right to receive an explanation about any automated decision making and/or profiling, and to challenge those decisions where appropriate.
To make a subject access request or complaint contact firstname.lastname@example.org
Requests can be submitted at any time. Downstage Left will provide a response to any such requests in accordance with Dutch data protection law.
Data subjects covered by EU law may also be entitled to lodge complaints in regard to data processing or the handling of subject access requests with data protection supervisory authority in their country of residence. In the Netherlands the relevant supervisory authority is the Dutch DPA.
Changes to the Policy
In the event that the Policy is changed at any time, the date and nature of the change will be clearly indicated in this document.
In the event that the change has a material impact on the handling of personal data, Downstage Left will contact the data subjects to inform of the changes and where appropriate seek their consent.
Last update 29 January 2018.