Railway museum privacy notice
Who do you keep information about?
We keep information on those who have signed up on our website to receive emails from us, who have purchased a ticket or tickets to gain entry to the museum, who have made a monetary donation, donated an artefact, purchased an annual pass, or hired a space. We also keep information on schools for which we have delivered educational activities.
Why do you keep information about me?
We keep information about you to facilitate booking your timed entry slot to the museum and for marketing purposes.
Legal basis
There are four bases under which we may process your data:
Contract purposes
When you make a purchase from us or make a donation to us, you are entering into a contract with us. To perform this contract we need to process your data. For example we may need to contact you by email, post or telephone in the case of the closure of the museum, or in the case of problems with your payment.
Legitimate interests
In certain situations we collect and process your personal data for the purposes of our legitimate organisational interests. However we only do this if there is no overriding prejudice to you by using your personal information in this way. We describe below all situations where we may use this basis for processing.
With your consent
For any situations where the two bases above are not appropriate, we will instead ask for your consent before using your personal information in that specific situation.
Marketing communications
We aim to communicate with you about the work that we do in ways that you find relevant, timely and respectful. To do this we use data that we have stored about you, such as what events you have booked for in the past, as well as any preferences you may have told us about.
We use our legitimate interest as the legal basis for communications by post. You may object to receiving these at any time using the contacting us by telephone on 01325 405060 or emailing [email protected].
In the case of email, we use the consent basis to communicate marketing messages to customers. We will give you an opportunity to opt in to receive them during your first purchase with us via Eventbrite (and any times in the future when/if we update our contact preferences). If you do opt in, we will provide you with an option to unsubscribe in every email that we subsequently send you, or you can alternatively contact us by telephone on 01325 405060 or email [email protected].
Surveys
We may from time to time send out surveys.
Who can see my information?
Relevant employees of Darlington Borough Council who require access to your data to carry out their role will have access to your information.
Third parties
There are certain circumstances under which we may disclose your personal information to third parties. These are as follows:
- To our own service providers who process data on our behalf and on our instructions (for example our ticketing system software provider). In these cases we require that these third parties comply strictly with our instructions and with data protection laws, for example around security of personal data.
- Where we are under a duty to disclose your personal information to comply with any legal obligation (for example to government bodies and law enforcement agencies).
- To mailing houses to process large scale direct mail runs.
How do you store the information you keep about me?
Security of your personal information
Your data is held securely by Eventbrite, our ticketing software provider. We have put in place appropriate safeguards (both in terms of our procedures and the technology we use) to keep your personal information as secure as possible. We will ensure that any third parties we use for processing your personal information do the same.
Your debit and credit card information
If you use your credit or debit card to purchase from us or to make a donation, we will ensure that this is carried out securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).
Is my information transferred to a third country or international organisation?
We do not transfer your information to a third country or international organisations.
How long do you keep information about me?
We store your personal information for seven years from last purchase.
What sort of information do you keep?
We may use the following information about you to make sure that we provide you with the right service, advice or support.
Personal data
- Name
- Identification number
- Location data
- Online identifier
Special categories of personal data
Data concerning health
NHS Test and Trace
For info on Test and Trace see Darlington Borough Council’s COVID-19 privacy notice [link].