PRIVACY NOTICE VERSION 1 DATED 23rd October 2023

WHAT IS THIS PRIVACY NOTICE FOR?

This Privacy Notice sets out the key information that it is essential for people to know prior to providing personal data and information (personal data) to Voix de Vivre.

We provide this Privacy Notice as the data controller for your personal data. We are responsible to you for how we process it. By using our website and services or becoming a member we will collect and use your personal data in the ways outlined in this Privacy Notice.

We are committed to protecting your personal data and will use any personal data we collect from you in accordance with data protection legislation. If you do not agree with the ways we will use your personal data then please do not use our website or services.

We may make changes to our Privacy Notice and when we do we will post our changed Privacy Notice on our website and it will then apply. We will always put the date and version of our Privacy Notice in its header so that you can easily find this information.

WHAT’S PERSONAL DATA?

Personal data is any information about a living individual that can be used to identify the individual, such as name, address, date of birth, email address, photographs or videos. It may also include special categories of personal data. This is information concerning: racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic or biometric data; health data; data concerning a person’s sex life or sexual orientation.

WHAT PERSONAL DATA DO WE COLLECT AND WHAT DO WE USE IT FOR?

Voix de Vivre will only collect and use your personal data when the law allows us to. The type of personal data we collect includes:

Name Email address Phone number Address Emergency contact details

Gift Aid Declarations Age/gender DBS checks Bank details Photos/video footage

The law also allows us to collect special categories of personal data with your explicit consent. Where we do so we will ask for your consent before we process your personal data. You are under no obligation to give consent if we ask for it. Where you do provide consent you may withdraw it at anytime.

WHAT DO WE COLLECT AND USE YOUR PERSONAL DATA FOR?

The most common bases for processing your personal data is as follows:

MEMBERS: FOR OUR LEGITIMATE INTERESTS TO ADMINISTER MEMBERSHIP AND RUN OUR ACTIVITIES

We will process members’ personal data for our legitimate interests: to help us plan, organise and run the day-to-day operations of Voix de Vivre (e.g. co-ordinating rehearsals, organising concerts or collecting subscription payments); and to promote and market the Chorus’ activities (e.g. marketing mailing lists and photography/video capture). When you join Voix de Vivre as a member, and during your membership, or when you complete a  concert information registration form from our website we will collect personal data on you to enable us to carry out our legitimate interests.

If you give us your consent to do so, we may also use your contact details to send you Voix de Vivre’s marketing/promotional communications such as our newsletter and to organise social or fundraising events. Any marketing/promotional communication we send you will include a clear option to withdraw your consent (e.g. to ‘opt out’ of future emails) and you can also withdraw consent at any point by contacting our Data Protection Co-ordinator info@voixdevivre.org

EVENT ATTENDEES: FOR PROCESSING AND MANAGING TICKETS FOR EVENTS

Where our events are ticketed it will be necessary for us to collect and use your personal data in order to complete all our tasks under the booking contract we will have with you. So we will need to collect your personal data when making a booking (name and email) so that we can send you a confirmation of your reservation/purchase. This data will only be used for administering your access to the event/s for which you have booked and will not be used to send you marketing/promotional messages from Voix de Vivre unless you have also provided your consent to receive these (see below).

EMPLOYEES: FOR LEGAL, ADMINISTRATIVE OR REGULATORY PURPOSES

We may need to collect employee personal data to perform the employment contract we have entered into with an employee or when we need to comply with a legal obligation such as complying with tax and other regulatory requirements.

ARTISTS, PERFORMERS AND SUPPLIERS: FOR CONTRACT OR OTHER LEGAL PURPOSES

We will collect artists, performers and suppliers personal data, such as name, address and email contact details when we enter into a contract to work with them. This will be used to contact them about the arrangements relating to their contract with us and to enable us to process payments to them.

MAILING LIST SUBSCRIBERS: FOR MARKETING AND PROMOTION

We offer everybody the opportunity to consent to receive marketing and promotional information on our events and activities, such as emails about forthcoming events and our newsletter.

When you sign-up to our marketing mailing list we will ask for your name, email, phone number, address and will use this data to send you marketing information. We will only send you information that is related to Voix de Vivre and we will not use your data to send you marketing messages from 3rd parties, such as associated choirs, unless you have consented to receiving them.

Anything we send you will include a clear option to withdraw your consent and you can also do so at any time by contacting our Data Protection Officer.

WEBSITE VISITORS: FOR RUNNING AND IMPROVING OUR WEBSITE

We use cookie technology when a person visits our website to collect and analyse anonymised data on how many people have visited, what pages they have looked at and other statistical information.

We use a pop-up banner to let users know about this on their first visit, and they can at any time disable cookies in their browser if they do not wish their (anonymised) data to be tracked.

You can find out more about cookies in our cookie policy.

We use Google Analytics to track social shares made from our website. Google automatically collects and stores certain information in their server logs, including device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral URL, cookies that may uniquely identify your browser or your Google Account, in accordance with their data privacy policy: https://policies.google.com/privacy

SOCIAL SHARING

We embed a Facebook widget to allow you to see number of likes/shares/recommends and “like/share/recommend” from our webpages. This widget may collect your IP address, your web browser User Agent, store and retrieve cookies on your browser, embed additional tracking, and monitor your interaction with the widget, including correlating your Facebook account with whatever action you take within the widget (such as “liking/sharing/recommending” our webpage), if you are logged in to Facebook. For more information about how this data may be used, please see Facebook’s data privacy policy: https://www.facebook.com/about/privacy/update

We use a Twitter Tweet widget on our website. As a result, our website makes requests to Twitter’s servers for you to be able to tweet our webpages using your Twitter account. These requests make your IP address visible to Twitter, who may use it in accordance with their data privacy policy: https://twitter.com/en/privacy#update

We use a GooglePlus widget on our website. As a result, our website makes requests to Google’s servers for you to be able to share our webpages using your GooglePlus account. These requests make your IP address visible to Google, who may use it in accordance with their data privacy policy: https://policies.google.com/privacy

DO WE SHARE YOUR DATA WITH ANYONE ELSE?

We may pass your personal data to related third parties, for example we share it with Mail Chimp as it manages our supporters database. Mail Chimp and the other third parties we share your personal data with are required to take appropriate security measures to protect your personal data. We do not allow third parties to use and process your personal data for their own purposes and we only permit them to use and process your personal data for specific purposes in accordance with our instructions. If a third party operates outside the European Economic Area we require them to put in place appropriate measures to protect your personal data.

ARE THERE SPECIAL MEASURES FOR CHILDREN’S PERSONAL DATA?

We do not knowingly collect or store any personal data about children under the age of 16.

HOW CAN YOU UPDATE YOUR PERSONAL DATA?

You can contact us at any time at info@voixdevivre.org to update or correct the personal data we hold on you.

HOW LONG WILL WE HOLD YOUR PERSONAL DATA?

We will not keep your personal data for longer than is necessary for the purposes set out in this Privacy Notice or as required by applicable law, which, for, for example, tax purposes requires us to keep personal data for a minimum period of six years.

HOW WE PROTECT YOUR PERSONAL DATA

The security of your personal data is very important to us. We will ensure that we have in place appropriate organisational and technical measures to prevent unauthorised access, improper use, alteration, destruction or accidental loss of your personal data.

WHAT RIGHTS DO YOU HAVE?

Under the GDPR, you have the following rights over your personal data and its use:

• The right to be informed about what personal data we are collecting on you and how we will use it
• The right of access – you can ask to see the personal data we hold on you
• The right to rectification – you can ask that we update or correct your personal data
• The right to object – you can ask that we stop using your personal data for a particular purpose
• The right to erasure – you can ask us to delete the personal data we hold on you
• The right to restrict processing – you can ask that we temporarily stop using your personal data while the reason for its use or its accuracy are investigated
• Though unlikely to apply to the personal data we hold and process on you, you also have rights related to portability and automated decision making (including profiling)

All requests related to your rights should be made to the Data Protection Co-ordinator at info@voixdevivre.org We will respond within one month.

WHO TO CONTACT FOR MORE INFORMATION OR TO COMPLAIN?

Please contact our Data Protection Co-ordinator info@voixdevivre.org if you require more information about how we handle your personal data or should you wish to complain about how we have used it. The Information Commissioner’s Office (ICO) will be able to provide you with general information about data protection matters and your data protection rights. You can also make any complaints about our handling of your personal data to the ICO. The ICO can be contacted at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AFT and by clicking on the attached link you can enter their website: Information Commission’s Office website