Privacy Policy

Any data that you share with us through kilkennyarts.ie or our online ticketing partner Spektrix will be processed and stored in compliance with the EU General Data Protection Regulations, as enacted in the Data Protection Bill 2018.

This website may include links to other external sites. Kilkenny Arts Festival is not responsible for the content or quality of any material contained on these sites and links should not be taken as an endorsement. We would advise you to check the privacy policy of any website that you may have concerns about.

The purpose of this policy is to give you a clear explanation about how we collect and use the information we collect from you directly and from third parties. We use your information in accordance with all applicable laws concerning the protection of personal information. This policy explains:

• What information we may collect about you.
• How we may use that information.
• Our use of cookies to improve your use of our website.
• Information about how we keep your personal information secure, how we maintain it, what we retain it for and your rights to be able to access it.

We take all reasonable precautions to prevent the loss, misuse or alteration of Personal Data volunteered through the website, which has SSL encryption. We also employ appropriate physical and technical security measures, conduct staff training and generate awareness and undertake regular reviews of these responsibilities. You should note however, that internet transmissions are never completely private or secure.

If you have any queries about this policy, please contact us:

• Email us: marketing@kilkennyarts.ie
• Write to us: Data Protection, Kilkenny Arts Festival, 11 Patrick’s Court, Patrick Street, Kilkenny.

Who we are

Kilkenny Arts Festival is a company limited by guarantee and funded by the Arts Council, Fáilte Ireland and Kilkenny County Council as well as various Sponsors and Friends. Our Company Registration Office number is 654958.

Information Collection

We collect various types of information and in a number of ways:

• To process transactions for the express
  purpose of delivering the purchased tickets, products or services requested, contacting you as necessary about your order. We will also store a record of your purchases and donations.
• Information about your interactions with us. When you visit our website, we collect information about how you interact with our content and ads.
• To personalize your experience - your information helps us to better respond to your individual needs.
• To administer a contest, promotion or survey.
• To send marketing emails; provided you give us your consent, the email address you provide us may be used to send you information and updates. When we send you a mailing we store a record of this, and in the case of emails we keep a record of which ones you have opened and which links you have clicked on.

Legal Basis

There are three bases under which we may process your data:

Contract purposes

When you make a purchase from us or make a donation to us, you are entering into a contract with us. In order to honour this contract we need to process and store your data. For example we may need to contact you by email or telephone in the case of cancellation of a show, or in the case of problems with your payment.

Legitimate business interests

In certain situations we collect and process your personal data for purposes that are in our legitimate organisational interests. However we only do this if there is no overriding prejudice to you by using your personal information in this way.

With your explicit consent

For any situations where the two bases above are not appropriate, we will instead ask for your explicit consent before using your personal information in that specific situation.

How do I withdraw my consent?

You can change your contact preferences or withdraw consent at any time by:

• Email us: marketing@kilkennyarts.ie
  
• Write to us: Data Protection, Kilkenny Arts Festival, 11 Patrick’s Court, Patrick Street, Kilkenny.

Marketing communications

We aim to communicate with you about the work that we do in ways that you find relevant, timely and respectful. To do this we use data that we have stored about you, such as what events you have booked for in the past, as well as any preferences you may have told us about. We use our legitimate organisational interest as the legal basis for communications by post and email. In the case of postal mailings, you may object to receiving these at any time using the contact details in this policy. In the case of email, we will give you an opportunity to opt out of receiving them during your first purchase with us. If you do not opt out, we will provide you with an option to unsubscribe in every email that we subsequently send you, or you can use the contact details at the end of this policy.

How do we protect your information?

Kilkenny Arts Festival takes the security of your data very seriously and aims to be open and transparent about how your data is collected and used. We employ appropriate physical and technical security measures, conduct staff training and generate organisation-wide awareness and regular reviews of these responsibilities. We maintain two main databases where your information is stored. Next to each of these main databases are the platforms that we use to process and store the information:

• Customer data: Processed and hosted by Spektrix Ticketing System and Dotmailer Email System.
• Surveys: Survey Monkey

Each of these platforms has been carefully selected to provide these services to Kilkenny Arts Festival based on their suitability for our needs as well as their demonstrated commitment to the security and safety of our data. All of these databases are hosted offsite, not on servers on our premises. Only authorised, trained staff have access to these databases.

Using these platforms means that the data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us for the provision of support services. We have Data Processing Agreements in place with these third-party platforms and a Data Protection Impact assessment has been done on each of them to ensure that they are in line with 2018 GDPR legislation.

Kilkenny Arts Festival is PCI DSS compliant via AIB. The Payment Card Industry Data Security Standard (PCI DSS) is a set of requirements designed to ensure that merchants and service providers adequately protect cardholder data. It defines a standard of due care and enforcement for protecting sensitive cardholder information. The standard applies to all entities that store, process, transmit or access cardholder data. These data security standards are developed and managed by an independent body that was created by the major payment card brands (Visa, MasterCard, American Express, Discover and JCB) to improve transaction security. Compliance with the PCI DSS standards is required of all merchants and service providers who store, process or transmit cardholder data. The requirements apply to all payment channels, including retail shops, mail / telephone order companies and e-commerce businesses. There are different requirements depending on a range of criteria, such as cardholder data storage, processing channels, security protocols, transaction volume, and so on.

What information do we ask you for?

We collect personal information from you when you place an order, become a Friend, subscribe to our newsletter, fill out a form or survey, or apply for an employment opportunity. If you contact us, we may store your name, address and email address in order to respond to your enquiry or request.

We also use cookies on this website to gather technical information to help us deliver content in the best way for your device, monitor the way that the website is used and how effective and relevant our communications are. Cookies are explained in more detail below.

How do we collect & process your information?

Orders

All purchases (tickets and merchandise) made online, by phone or in person, are processed via Kilkennyarts.ie and through a secure and subdomain of Spektrix, our online ticketing partner.

When you make a booking, you will be asked for your name, email address, billing address and phone number. Our legal basis for collecting this information is that of ‘Contractual Necessity’, because we ask for this data in order to process transactions and fulfil your order or request – including keeping you updated about the event and any changes or cancellations. 

Any credit card payments made online, over the phone or in person are securely processed via Sagepay. Your details are inputted using portals provided, processed and retained by these third parties purely for the purpose of completing that transaction. Credit card details are not stored or accessible to Kilkenny Arts Festival once processed.

Friend scheme

When you sign up for one of our Friend schemes, we will ask you for your details so that we can deliver your benefits and ensure that our communications are relevant to your interests. Just like orders, this information is collected on the legal basis of ‘Contractual Necessity’. These details will be processed and using secure forms provided and processed by Spektrix.

Email newsletter

We use Dotmailer to create and send our email newsletters to keep you in touch with our news and information about upcoming events. Our legal basis for collecting and processing your information for this purpose is that of ‘Consent’. This means that we will only ever send you this newsletter if you have actively consented to us doing so in the following ways:

When you make an order, you will be given the opportunity to sign up for our email newsletters. You will actively need to give consent to be added to this list by ticking a box online or by verbal assent if you are speaking with one of our staff members.

You can also sign up for this list without making any purchase using the ‘Join Our Newsletter’ option.

You have the right to withdraw your consent. You can unsubscribe from this list at any time by using the unsubscribe link at the bottom of every email.

Post

When you make an order, you will be given the opportunity to sign up for updates by post. You will actively need to give consent to be added to this list by ticking a box online or by verbal assent if you are speaking with one of our staff members.

Forms and Surveys

When you fill out a form or survey, you will be asked to fill out an online form using our secure third party Survey Monkey. This information will only be used in conjunction with the specific purpose for which you supplied it, and will not be retained once this purpose is completed. As we are only processing your information due to your active submission of the survey, our legal basis for collecting the information is that of ‘Consent’.

Social media

Kilkenny Arts Festival has active Twitter, Facebook, Instagram and YouTube accounts. Screen grabs of certain posts may be used online and in hard copy for documentation and measurement – for example in a funding application or in a report.

Employment and Volunteer Opportunities

If you apply for any employment opportunities or apply to become a volunteer, you will be supplying us with personal information via email or using our secure online application forms. This information will only be used to process your application, and will not be retained beyond any time limits required by law or laid out in our Data Protection Policy. Our legal basis for collecting and processing your information for this purpose is that of ‘Contractual Necessity’ as you are submitting the information for the express aim/purpose of entering into a contract with Kilkenny Arts Festival.