What Personal Data the Company might collect on you.
How long might the Company hold on to your Personal Data.
How the Company might collect your Personal Data.
The grounds on which the Company may store and use your Personal Data.
The way(s) in which the Company might use your Personal Data.
The measures the Company has in place to protect your Personal Data.
How you can contact the Company.
Side Street Boyz representative CES Entertainment (the “Company”) is a company in England and Wales. The Company’s registered office is: 128 Lowedges Crescent, Sheffield, UK, S8 7LQ.
The GDPR defines “Personal Data” as any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. This includes, but is not limited to, name, email address, postal address location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
The Personal Data that the Company may collect from you is listed in section 2 below.
The Company is committed to protecting and respecting your privacy, and would welcome any feedback you have to: email@example.com.
2. What Personal Data the Company might collect on you.
2.1 The Company might collect the following Personal Data from you:
i) Your name, age/date of birth and gender;
ii) Your contact details, including: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and e-mail address;
iii) Details of purchases and/or orders made by you;
iv) Details of events attended by you;
v) Your communication and marketing preferences;
vi) Your interests, preferences, feedback and survey responses;
vii) Your correspondence and communications with the Company;
viii) Other publicly available Personal Data, including any which you have shared via a public platform (such as a Twitter feed, public Facebook page or a company website).
2.2 The Company’s website is not intended for children and the Company does not knowingly collect data relating to children.
2.3 This list is not exhaustive and, in specific instances, the Company may need to collect additional data for the purposes set out in this Policy. The Company may also collect Personal Data from third parties who have your consent to pass your details to the Company, or from publicly available sources.
3. How long might the Company hold on to your Personal Data.
The Company will not retain your Personal Data for longer than necessary for the purposes set out in this Policy.
4. How the Company might collect your Personal Data.
The Company may collect your Personal Data in the following ways:
i) Via the Company’s website (e.g. when you opt-in to join the Side Street Club);
ii) Via ticketing agents who sell tickets to Side Street Boyz shows, and you opt-in to receive communication direct from the Company;
iii) Via any additional means the Company deems reasonable.
5. The grounds on which the Company may store and use your Personal Data.
The Company might store and use your Personal Data on the following legal grounds:
- for example, if you have opted in to receive marketing communications and/or news from the Company, the Company might store your data and contact you with a roundup of Side Street Boyz recent news and events.
5.2 Fulfilment of a Contractual Obligation
- for example, if you have purchased an item via the website, the Company will store and process your data insofar as it is necessary to fulfil such order.
5.3 Legitimate Interest
- for example, if you have previously provided the Company with your contact details in the course of sale of goods/services (for example a ticket to a Side Street Boyz concert), the Company may send you electronic communications relating to similar upcoming event ticket sales. You will always be given the opportunity to opt-out of this form of communication. If relying on legitimate interest as a lawful ground for processing your Personal Data, the Company will always take into account your rights and interests prior to sending any such communications.
6. The way(s) in which the Company might use your Personal Data.
The Company (and trusted partners acting on our behalf) might use your Personal Data:
i) to provide goods and services to you;
ii) to make a tailored website available to you;
iii) to manage any registered account(s) that you hold with us;
iv) to verify your identity;
v) for crime and fraud prevention, detection and related purposes;
vi) to contact you electronically about news/events and/or products which the Company thinks may interest you;
vii) for market research purposes - to better understand your needs;
viii) where the Company has a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).
The Company might use your Personal Data for electronic marketing purposes (with your consent) and may send you postal mail to update you on the latest events/ work of Side Street Boyz.
The Company aims to update you about items which are of interest and relevance to you as an individual.
You have the right to opt-out of receiving communications at any time, by:
i) making use of the simple “unsubscribe” link in emails; or
ii) contacting the Company via email to firstname.lastname@example.org or via post to the registered office (listed in section 1 above).
6.3 Sharing data with third parties
i) Our service providers and suppliers
In order to make certain services available to you, the Company may need to share your Personal Data with some of our service providers/partners. These could include IT, delivery and marketing service providers.
The Company only allows its service providers/partners to handle your Personal Data when the Company has confirmed that they apply appropriate data protection and security controls. The Company also imposes contractual obligations on service providers/partners relating to data protection and security, which mean they can only use your Personal Data to provide services to the Company and to you, and for no other purposes.
ii) Other third parties
Aside from our service providers/partners, the Company will not disclose your Personal Data to any third party, except as set out below. The Company will never sell or rent your Personal Data to other organisations for marketing purposes.
We may share your data with:
- credit reference agencies where necessary for card payments;
- governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where the Company is required to do so: -
-- to comply with our legal obligations;
-- to exercise our legal rights (for example in court cases);
-- for the prevention, detection, investigation of crime or prosecution of offenders; and
-- for the protection of our employees and customers.
7. The measures the Company has in place to protect your Personal Data.
The Company strives to maintain the highest standards of data privacy and security to protect your personal details and other information about you.
The Company shall ensure that Personal Data is stored securely using modern software that is kept-up-to-date.
Access to Personal Data shall be limited to personnel who need access and appropriate security should be in place to avoid unauthorised sharing of information.
When Personal Data is deleted this should be done safely such that the data is irrecoverable.
Appropriate back-up and disaster recovery solutions shall be in place.
The Company regularly reviews our processes and procedures to protect your information from unauthorised access and use, accidental loss and/or destruction.
8. Your rights
You have the following rights in respect of the Personal Data that the Company holds:
8.1 the right to ask for a copy of Personal Data that the Company holds about you (the right of access);
8.2 the right (in certain circumstances) to request that the Company deletes Personal Data held on you; where the Company no longer has any legal reason to retain it (the right of erasure or to be forgotten);
8.3 the right to ask the Company to update and correct any out-of-date or incorrect Personal Data that the Company holds about you (the right of rectification);
8.4 the right to opt out of any marketing communications that the Company may send you and to object to the Company using / holding your Personal Data if the Company has no legitimate reasons to do so (the right to object);
8.5 the right (in certain circumstances) to ask the Company to ‘restrict processing of data’; which means that the Company would need to secure and retain the data for your benefit but not otherwise use it (the right to restrict processing); and
8.6 the right (in certain circumstances) to ask the Company to supply you with some of the Personal Data that the Company holds about you in a structured machine-readable format and/or to provide a copy of the data in such a format to another organisation (the right to data portability).
The Company may update this Policy to reflect changes in how it collects, stores and/or uses your Personal Data. The most recent version of the Policy will always be available via the Company’s website. Where appropriate, the Company will provide you with notice of any significant changes to how it uses your information.
11. How you can contact the Company.
If you have any questions on the contents of this Policy please contact email@example.com or if you would rather get in touch by post, please write to: Website Team, CES Entertainment Group, 128 Lowedges Crescent, Sheffield, UK, S8 7LQ.