The Data We Hold
- At Bankside Gallery (BG) the maximum amount of data we will keep on our database about you is your prefix, first name and surname, postal address, telephone number(s), email address, purchasing history (without any bank or credit card details) and public social media handles. We use Google Analytics to see which pages you have visited on our three websites [banksidegallery.com, royalwatercoloursociety.com & re-printmakers.com].
How Does Bankside Gallery Receive Your Data?
BG receives your data when you decide to interact with us. We collect information in a number of ways which are listed below:
- Hand writing your name and email address in the visitors’ book at the front desk as a means of signing-up to the e-newsletter.
- Hand writing your name, email address and information preferences on the e-newsletter sign-up pad at the front desk and posting it into the donations box.
- Purchasing an artwork (with a sales form), a Friends subscription or a Print Collectors Club subscription and consenting to us using this data for direct marketing.
- Hiring the gallery for an event or exhibition and consenting to us using your data for direct marketing.
- Entering a competition run by the Royal Watercolour Society (RWS) or Royal Society of Painter-Printmakers (RE) and consenting to us using your data for direct marketing.
- Signing-up for an educational event run by the societies but administrated by Bankside Gallery
- Signing-up for the e-newsletter online via banksidegallery.com [for the BG list with information preferences] or royalwatercoloursociety.co.uk [for the RWS list].
- Requesting a sign-up to the emailing list via firstname.lastname@example.org or directly to a member of staff’s email address.
- Via word of mouth to a member of staff who adds you directly to the database then and there.
- Social Media: depending on your settings or the privacy policies for social media platforms on Facebook, Instagram and Twitter, you may give us permission to access information posted on those platforms, or interact with those accounts, but we will not store information displayed there away from the platform unless you ask us to.
How Will We Keep Your Data?
We will keep your data securely on an Artlogic** database and treat it with respect. We will not share your data with third parties without your prior consent, and we never sell it on. This consent is given via the following section of the sales form:
Should you purchase a print order of one of the original prints available for sale at Bankside Gallery and wish to have that print sent directly to your home, we will send the relevant artist your contact details so they can post the print to you. These details will be sent to the artist as an emailed scan of the paper sales form, or as a photocopy of the form through the post if the artist does not use email. After we have sent them your name and contact details to the artist, they become responsible for storing your data in accordance with The General Data Protection Regulation, and not Bankside Gallery. They may use your contact details to send you direct marketing about their work and non-Bankside Gallery related exhibitions etc. A few of the artists also live outside the European Economic Area [EEA].
If you do not wish for the artists to receive your name, postal address, email and phone number, as just described, you can instead have the print sent to Bankside Gallery for collection at your convenience. You will be given this choice at point of purchase.
We import your email address and your name into Mailchimp*** in order to send you e-newsletters, assuming you are happy to receive these emails. You can unsubscribe from Mailchimp and have your data removed from our database at any point. See ‘How to Change Your Data Preferences’ below.
**artlogic.net. Registered business address: Artlogic Media Limited, Unit 16, 16 Porteus Place London, SW4 0AS
***mailchimp.com. Registered business address: The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, US
Why Are We Keeping Your Data?
To carry out our business and to provide a service you have contracted us to do:
- To fulfil an educational event or workshop booking you have made, a Friends / Print Collectors Club membership request or an entry to one of the Royal Watercolour Society and Royal Society of Painter-Printmakers’ competitions, which Bankside Gallery administrates on their behalf.
- To provide the best possible customer service, e.g. reminding you of key competition dates.
- To contact you with important information relating to your booking or purchase, such as confirming the arrival of your order, reminding you of an upcoming event you have booked or letting you know about circumstances that may affect your booking, e.g, tutor illness.
To keep you informed (where we have your consent):
- Send you updates by email about what’s on, offers and news or ways of supporting us.
- Email you about a specific topic on which you have requested updates.
To keep you informed (where we have a Legitimate Interest in processing your data to promote our business and improve our services to you which outweighs your interest in your data not being processed by us):
- Learn about your interests and preferences so that we can contact you with information that is relevant to you.
- Target our marketing communications and adverts so that they are more relevant to you.
- Use your pseudonymised details to show you events, exhibitions, artwork and Bankside Gallery related news on such Social Media platforms as Facebook, Instagram and Twitter.
- Measure and understand how our audiences respond to a variety of marketing activity so we can ensure such activity is well targeted, relevant and effective.
- To keep our database accurate and relevant.
How Long Will We Keep Your Data?
How Do We Handle Your Information and Other Organisations?
Bankside Gallery will never sell, rent or trade your personal information. We will only give third parties access to your data if we have your consent. This access by our service providers is so they can perform services and process your data on our behalf. Payment processing by Global Payments, who process your debit or credit card via the hand terminals at the front desk is a good example. We also store your data on an Artlogic database and export your email addresses to Mailchimp in order to send you updates via email. We make sure anyone who provides a service to Bankside Gallery enters into an agreement with us that meets our standards for data security. They will not use your data for anything other than the clearly defined purpose relating to the service that they are providing to Bankside Gallery.
We will share your data without consent should we be required to do so by law following a request by the police or a regulatory or government authority investigating illegal activities.
Despite all our precautions, no data transmission over the internet is 100% secure. So, we cannot guarantee the security of any information which you disclose to us and so wish to draw your attention to the fact that you do so at your own risk. That said, Bankside Gallery is committed to protecting the personal information you entrust to us. We adopt robust and appropriate technologies and systems for storing our data, so the information we have about you is protected from unauthorised access and improper use.
As part of the services offered to you through the Bankside Gallery, Royal Watercolour Society & Royal Society of Painter-Printmakers websites, the personal information you provide may be transferred to countries outside the European Economic Area (EEA). By way of example, this will happen when your email address and name is transferred to Mailchimp, which is located in the USA and therefore outside of the EEA. If Bankside Gallery transfers your personal information outside of the EEA in this way, we will take steps to ensure that your privacy rights continue to be protected as outlined in this privacy notice by ensuring that at least one of the following safeguards is implemented:
- We may transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data by the European Commission.
- Where we use service providers outside Europe, we may use specific contracts approved by the European Commission, which give Personal Data the same protection it has in Europe.
Where we use service providers based in the U.S., we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to Personal Data shared between Europe and the U.S. More details on this certification can be found at www.privacyshield.gov/welcome.
What Are Your Rights & How to Change Your Data Preferences and Other Rights You Have Regarding Your Data:
You should find it easy to amend the personal information that we hold on you, or request that we stop contacting you. It is your data and we want to make sure you feel in control of it. Every email we send to you will include details on how to change your communications preferences or how to unsubscribe from future communications. The unsubscribe link will always be found at the very bottom of the email in the smaller print. You can also contact us by phone, email, or by writing to us using the contact details below.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact the Director of Bankside Gallery, Angela Parker. Please send a description of the information you would like to see, together with proof of your identity to email@example.com. We will delete the proof of identity from this email address after we have dealt with your request and it will not be kept on file. We will respond to your request within 30 days.
To reiterate, you have the right to withdraw your consent regarding any of your data we hold on you and to have information held by us about you corrected. If you have any concerns about the accuracy of your personal data, please let us know using the contact details below.
You have the right to access the data we hold on you. In certain circumstances you also have the right to:
- request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
- to object to processing of your personal data. This right exists where we are relying on a legitimate interest as the legal basis for our processing and there is something about your particular situation, which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.
- request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
- request the transfer of your personal data. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
We will respond to requests to exercise these rights free of charge within a month of receiving your request. Should we not honour these rights, you have the right to lodge a complaint with the supervisory authority, The Information Commissioner’s Office: www.ico.org.uk
For all of the above, please contact us here:
Bankside Gallery, 48 Hopton Street, London SE1 9JH, 020 7928 7521, firstname.lastname@example.org
Reporting a Breach of Your Data to the Information Commissioner’s Office [ICO]:
In the extremely unlikely event that we accidently send your personal contact details to the wrong recipient, and if this breach of your data is deemed to be a severe risk to your rights and freedoms as a data subject, you will be informed and your case will be reported to the ICO, who have measures in place to take the case further. Bankside Staff are trained in the data breach notification procedure. Please be reassured that given the limited amount of data we hold on you, that an incident of this severity is very unlikely to occur, but we have measures in place as part of our compliance with GDPR.
This notice was last updated on 24May 2018. It may be updated again to take into account changes at Bankside Gallery and the two societies it administrates or, for example, to reflect changes to regulation or legislation.
Updates to this policy will be made to this document and posted on www.banksidegallery.com. Please check back from time to time. We may also inform you of any changes where we hold an appropriate email address for you.
Further information on data protection regulations and laws can be found here:
- Data Protection: https://ico.org.uk/for-the-public