Please read this information carefully, by providing your information to us you acknowledge you have read this policy and understand we will process your information in accordance with its terms.
The MAC is committed to ensuring that your information is kept safe. Any personal information you provide the MAC will only be used in accordance with this policy.
This policy explains:
· What information we may collect about you
· How we may use that information
· In what situations we may disclose your details to third parties
· Information about how we keep your personal information secure, how long we maintain it for and your rights to be able to access it
If you have any queries about this policy, please use the contact information at the bottom of this page to get in touch.
The MAC may change or update this policy occasionally. Any changes will be made available through an update to this document on our website. This policy is effective from January 2018 and was last updated in January 2019.
The MAC Data Promise
We want you to enjoy the communications you receive from the MAC. To make sure you always get the relevant information, here’s our promise to you:
· You’ll exclusively hear about shows, exhibitions, offers, jobs at the MAC and other news
· We won’t email you more than twice a month
· You’ll receive our season brochure in the post twice a year, at most
· We’ll only send you information that we think is relevant to you & your interests
· We’ll always protect your personal information and never pass on your information to a third party without your consent.
· You can unsubscribe, update or change your preferences at any time
We promise to use the information we collect about you in accordance with the General Data Protection Regulation (GDPR, 2018), the Data Protection Act (2018) and the Privacy and Electronic Communications Regulations (PECR, 2003). We aim to be clear about how we handle your data and not do anything you wouldn’t reasonably expect.
What information may we collect?
You may be required to give us personal information when you buy a ticket, sign up to our mailing list, update your contact preferences, make a donation, join a membership scheme, sign up for an event, visit our offices, apply for a job or volunteer post, book a conference or event or participate in a project.
We may collect the following information:
· Full name
· Contact information including telephone number, postal address and email address
· Demographic information such as date of birth, preferences and interests
· Other information relevant to customer surveys and/or offers
· A record of your purchases and donations
· Communications preferences
· Access requirements (where applicable)
· Allergies and dietary requirements (where applicable)
· Any other information you provide to us by email, letter, telephone, social media, via our website or in person
· CCTV security recordings, and possible photography and filming at performances/events
Under the new data protection law starting in May 2018 we have a number of lawful reasons that we can use (or 'process') your personal information. One of the lawful reasons is called 'legitimate interest'.
Broadly speaking Legitimate Interest means that we can process your personal information if we have a genuine and legitimate reason and we are not harming any of your rights and interests.
What do we do with that information?
We require your information to better understand your needs. It allows us to provide MAC customers with a better service and in particular for the following reasons:
· Customer record keeping
· We will email you with information on new shows, special offers or other information which we think you’ll be interested in, unless you have asked us not to
· We may use the information to improve our products or services
Maintaining your personal information and updating your preferences
We store your personal information indefinitely such that for any subsequent purchases you make we can link them back to a single unique record that we hold for you on our system.
Any objections you make to any processing of your data will be stored against your record on our system so that we can comply with your requests.
Unless you ask us not to, we will tell you about our future events, ticket offers, our other relevant services (e.g. hospitality, memberships), or opportunities to support our charitable work (from volunteering to fundraising).
If there are aspects of your record that are inaccurate or that you would like to remove, you can usually do this by logging in to your account through our website. Alternatively, please use the contact details at the end of this policy to get in touch with our Box Office Manager.
When will you stop hearing from us?
If you have not booked a ticket on themaclive.com in 5 years and have not engaged with attempts from the MAC to re-engage, then we will remove your information from our mailing list. You are welcome to reconnect with us at any time.
There are certain circumstances under which we may disclose your personal information to third parties. These are as follows:
· To our own service providers who process data on our behalf and on our instructions (for example our ticketing system software provider). In these cases, we require that these third parties comply strictly with our instructions and with data protection laws.
· Where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example to government bodies and law enforcement agencies).
· To specific named visiting companies whose performances you have attended. In these cases, we will always ask for your explicit consent before doing so.
· If we run an event in partnership with another third-party organisation, some of your details may be shared in order to help us run the event.
Sensitive and personal information
Data Protection law recognises that certain categories of personal information are more sensitive such as health information, ethnicity, religious beliefs and political opinions. We do not usually collect this type of information about our visitors unless there is a clear reason for doing so. As an example, we collect health information from those who have given consent about visitors who may require access assistance with seating.
We may ask for other information specific to a job or volunteering role you are applying for.
From time to time we might ask visitors to take part in surveys to assess many aspects, including ethnicity. This is optional, rather than mandatory and you always have the right to decline providing us with this information.
Your debit and credit card information
If you use your credit or debit card to purchase from us or to make a donation, we will ensure that this is carried out securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).
We optionally allow you to store your card details for use in a future transaction. This is carried out in compliance with PCI-DSS and in a way where none of our staﬀ members are able to see your full card number. We never store your 3 or 4 digit security code.
Information about your interactions with us
Through our website, we collect anonymised information about how you interact with our content and ads. When we send you a mailing (email or post) we store a record of this, and in the case of emails, we keep a record of which ones you have opened - and which ones you have clicked on.
You can choose to accept or decline cookies. You can usually modify your browser setting to decline cookies if you prefer. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.
Find out how to manage cookies on popular browsers:
To find information relating to other browsers, visit the browser developer's website.
To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout
Strictly Necessary Cookies
|_dc_gtm_UA-xxxxxxxx||This cookie is associated with sites using Google Tag Manager to load other scripts and code into a page. Where it is used it may be regarded as Strictly Necessary as without it, other scripts may not function correctly. The end of the name is a unique number which is also an identifier for an associated Google Analytics account.||Session Cookie|
|CraftSessionId||This cookie name is associated with the Craft web content management system, where is functions as an anonymous session identifier.||Session Cookie|
|__cf_bm||The __cf_bm cookie is a cookie necessary to support Cloudflare Bot Management, currently in private beta. As part of our bot management service, this cookie helps manage incoming traffic that matches criteria associated with bots.
This is a CloudFoundry cookie
|CRAFT_CSRF_TOKEN||This cookie is used by Cloudflare to identify trusted web traffic.
|exp_csrf_token||This cookie is used by Cloudflare to identify trusted web traffic.
|_hjIncludedInPageviewSample||This cookie is set to let Hotjar know whether that visitor is included in the data sampling defined by your site's pageview limit.||Session Cookie|
|_hjid||Hotjar cookie. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.||365 Days|
|_ga||This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners._ga||730 Days|
|_gclxxxx||Google conversion tracking cookie||90 Days|
|exp_tracker||This cookie name is associated with the website content management system Expression Engine. Most likely to do with tracking or recoding visitor activity.||Session Cookie|
|_hjTLDTest||When the Hotjar script executes we try to determine the most generic cookie path we should use, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.||Session Cookie|
|_gid||This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited._gid||1 Day|
|optimizelyEndUserId||Cookie set by the Optimizely website optimisation plaftform. This cookie is a unique user identifier||3650 Days|
|_hjAbsoluteSessionInProgress||This cookie is used by HotJar to detect the first pageview session of a user. This is a True/False flag set by the cookie.||Session Cookie|
|exp_last_visit||This cookie name is associated with the website content management system Expression Engine. Most likely to do with tracking or recoding visitor activity.||365 Days|
|_gat||This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes._ga||Session Cookie|
|exp_last_activity||This cookie name is associated with the website content management system Expression Engine. Most likely to do with tracking or recoding visitor activity.||365 Days|
|_hjFirstSeen||Identifies a new user's first session on a website, indicating whether or not Hotjar's seeing this user for the first time.||Session Cookie|
|optimizelyDomainTestCookie||These Optimizely cookies allow us to test different versions of website pages to different users at the same time and to track how users navigate around our website. We use this information to test new features and make the website easier to use.||3650 Days|
|__stripe_mid||Stripe is used to making credit card payments. Stripe uses a cookie to remember who you are and to enable the website to process payments without storing any credit card information on its own servers.||365 Days|
|__stripe_sid||Stripe is used to making credit card payments. Stripe uses a cookie to remember who you are and to enable the website to process payments without storing any credit card information on its own servers.||Session Cookie|
|_gat_gtag_xxxxxxxxxxxxxxxxxxxxxxxxxxx||Google Analytics||Session Cookie|
|_fbp||Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers||90 Days|
|test_cookie||This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange||Session Cookie|
|CONSENT||YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.||5995 Days|
|YSC||YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.||Session Cookie|
|VISITOR_INFO1_LIVE||This cookie is used as a unique identifier to track viewing of videos||180 Days|
Links to other websites
Occasionally, themaclive.com may contain links to other websites of interest. Once you have left themaclive.com, please note that the MAC does not have any control over that external website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites as they are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Other processing activities
In addition to marketing communications, we also process personal information in the following ways that are within our legitimate organisational interests:
· We may analyse information we hold about you to ensure that the content and timing of communications that we send you are as relevant to you as possible.
· We may analyse information we hold about you in order to identify and prevent fraud.
In all of the above cases, we will always keep your rights and interests at the forefront to ensure they are not overridden by your own interests or fundamental rights and freedoms. You have the right to object to any of this processing at any time. If you wish to do this, please use the contact details at the end of this policy. Please bear in mind that if you object this may aﬀect our ability to carry out the tasks above that enhance the service we provide you.
Security of your personal information
We will put in place appropriate safeguards (both in terms of our procedures and the technology we use) to keep your personal information as secure as possible. We will ensure that any third parties we use for processing your personal information do the same.
We will not transfer, process or store your data anywhere that is outside of the European Economic Area.
Your Right to Object
You can ask us at any time to stop processing of your personal information if it is for direct marketing purposes at any time. You can do this by contacting the box office team on the phone 02890 235053, by email firstname.lastname@example.org or if you have an online account you can login on our website and update your contact preferences. We will never ignore a request.
You have rights including the following:
Please note that we may need to retain certain information for our own record-keeping and research purposes. We may also need to send you customer service-related communications.
All personal information requests will be reviewed by the Box Office Manager at the MAC.
Paula Kearney, Box Office Manager Paula@themaclive.com
10 Exchange Street West