privacy | ALMALUSO

AlmaLuso is committed to protecting your personal data and being transparent about the data it holds about you.
The purpose of this policy is to explain how AlmaLuso collects, uses and protects any data we collect from you directly and from third parties.
You can opt-out of any or all of our communications at any point by simply contacting info@almaluso.org. Using personal data allows us to develop a better understanding of everyone who engages with us and in turn to provide you with relevant and timely information about the work that we do — both on and off stage. We use your data strictly in accordance with all applicable laws concerning the protection of personal data and you can be assured that any data provided will only be used in accordance with this privacy policy.

This policy explains:

Who we are
What data we may collect about you and when
How we may use your data
In what situations we may disclose your data to third parties
How we protect your data
How you can access your data
Our use of cookies to improve your use of our website

AlmaLuso is a non-profit organização with charitable aims not yet registered.
AlmaLuso is the data controller of your personal information.
The registered office is 4 Adair Road, Flat 7, London, W10 5ED. If you have any questions regarding your data or its use, please contact us by e-mail at info@almaluso.org.

What data we may collect and when

We collect personal data when you:

Subscribe to our mailing list via the website – name and e-mail address;

Join our membership scheme and/or make a donation – name, telephone number, e-mail and postal addresses, gift aid preference (unless requested to remain anonymous);
Respond to a survey – response data;
Apply for a workshop – name, telephone number, email and postal address;
Respond to a casting notice – name, telephone number, email and postal address;
Apply for a job or intern/work experience vacancy – your name, contact details including telephone number, email and postal address, details of your qualifications and educational history;
Visit our website – your IP address, geo-location, details of your behaviour and actions, cookies related to site performance and advertising;

Information on how we use cookies on our website can be found in our Cookies Policy.

We may also collect the following data from third parties:

Depending on your privacy settings, you may provide permission to collect data from social media and online services such as Facebook, Twitter, YouTube and Google;
When conducting fundraising research, use publicly available data about you for example, from LinkedIn, Companies House, Charity Commission and legitimate media sources;

Sensitive personal data

On occasion, and only when there is a clear reason to do so, we may collect additional data, which will be anonymised and would not be linked back to a specific individual.
This could include sensitive personal data, recognised under Data Protection law as information about health, ethnicity, religious beliefs and political opinions. We may request this information to adapt to the work environment for new employees or to analyse data required for funders.

How we may use your data

We only collect data that we need in order to carry out our business and to provide a service or carry out a contract with you. For example:

To fulfil donation and membership requests;
To provide the best possible customer services and to help us with internal administration;
To contact you with important information relating to a purchase;
To send customised online marketing (if applicable);

Legal basis

The basis under which we process any data could be one of three ways, see examples below:

Contract Basis

When you make a donation, a purchase, book a workshop or apply for a job you are entering into a contract with us. In order to perform this contract, we need to process and store your data.
For example, we may need to contact you by email or telephone in the case of problems with a purchase or payment.

Legitimate Interest

In certain situations, we collect and process your personal data for purposes that are in our legitimate organisational interests. However, we only do so if there is no overriding prejudice to you by using your personal data in this way. For example:

to manage and administer our relationship with you, such as keeping our database up to date and renewing your membership;
to alert you to opportunities to support AlmaLuso, to analyse the use of our services so that we can improve your experience;

Consent

Consent is explicitly requested to send you updates via email about what’s on, offers and news or about supporting us. For any other situation where the above two bases are not appropriate, we will instead ask for your explicit consent before using your personal data in that specific situation.

Third Parties

We may share your details with trusted service providers who are authorised to act on our behalf in the performance of a contract we enter into with them or you, for example, payment processing, database services, website hosting or email communication providers. We require all other organisations with whom we share your personal data to respect the security of your data and to treat it in accordance with the law. We do not allow our service providers to use your personal data for their own purposes. Other than as expressly set out in this Privacy Policy, we will not sell,
rent, trade or distribute your personal data to third parties without your express consent or are required by law to do so. We will collect and aggregate on anonymous basis information about you and your use of our services with information about other users of our services, such as statistical or demographic data, for analysis, reporting to stakeholders (such as Arts Council England) and to better understand our customers. For example, we may aggregate mailing list data to calculate the percentage of users accessing a specific feature on our website. However, if we combine or connect any of this type of data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data, which will be used in accordance with this privacy notice.

How we protect your data

We are committed to protecting the personal data you entrust to us. We adopt robust and appropriate technologies and policies, so the data we have about you is protected from unauthorized access and improper use. As part of the services offered to you through our website, the personal data you provide may be transferred to countries outside the European Economic Area (EEA).
By way of example, this may happen if any of the computer servers used to host the website are located in a country outside of the EEA. If we transfer your personal data outside of the EEA in this way, we will take steps to ensure that your privacy rights continue to be protected as outlined in this privacy notice. We may transfer your data to the USA to organizations such as Facebook, Google or Mailchimp. The USA has weaker data protection laws than that of the EEA and therefore we will ensure that only organisations that are part of the EU Privacy
Shield Initiative will handle your personal data. More details on this certification can be found at www.privacyshield.gov. We will keep your data only for as long as is reasonably necessary for the purposes set out in this privacy notice and to fulfil our legal obligations. We will not keep more data than we need. The retention period will vary according to the purpose, for example, if you made a donation then we will hold your details until notified by you. Where your data is no longer required, we will ensure it is disposed of, deleted or cached in a secure manner.

Cookies are small text files that are automatically placed onto your device by some websites that you visit. They are widely used to allow a website to function (for example keep track of your basket) as well as providing website operators with information on how the site is being used. We use cookies to identify how the website is being used and what improvements we could make. You can read our cookies policy here.

How you can access your data

You may request details of the personal data we hold about you under the General Data Protection Regulation. If you would like a copy of the data held please send a description of the data you would like to see, together with proof of your identity to info@almaluso.org.The accuracy of your personal data is important to us and you can help keep our records up to date by telling us when your contact details and other personal data changes, and if you change your mind about how we contact you. If you would like to update the details we hold or change your contact preferences please email info@almaluso.org. You can opt-out of email marketing at any time by clicking the unsubscribe link included at the bottom of every email.

Updates or changes to the Privacy Policy

This notice was updated on the 4th of May 2021. It may be updated to take into account changes at AlmaLuso or for example to reflect changes to regulation or legislation.