Privacy & Cookie policies
Privacy statement
Privacy statement
Welsh National Opera ('we', 'us' or 'our') is committed to protecting your privacy. This policy provides detailed information on when and why we collect your personal information, and how we use and keep it secure. We will use all information that we collect about you in accordance with the General Data Protection Regulation, 2016 (GDPR) and the Privacy and Electronic Communications Regulations, 2003 (PECR).
Welsh National Opera is a Charity registered in England and Wales (number 221538). Its trustee is Welsh National Opera Ltd, a company limited by guarantee registered in England and Wales (number 454297).
If you have any queries regarding this policy please get in touch, our contact details are:
Address
Welsh National Opera
Wales Millennium Centre
Bute Place
Cardiff
CF10 5AL
Email
info@wno.org.uk
Phone
02920 635000
Website
https://www.wno.org.uk/
Data Protection Officer
Christopher Parsons – christopher.parsons@wno.org.uk
The Wales Millennium Centre Tessitura Consortium
When you purchase tickets from us or join one of our membership schemes, the information you provide is stored in a database managed by a consortium of venues, led by Wales Millennium Centre.
In 2007 the Wales Millennium Centre created a Consortium that makes it possible for other arts organisations to benefit from the same ticketing system they use, Tessitura, at a lower level of investment than would otherwise be required. They offer a collegiate approach to the use of Tessitura with consortium partners, sharing a system for mutual benefit rather than a more traditional corporate relationship.
The organisations in the Consortium are currently:
- Welsh National Opera
- National Dance Company Wales
Whilst all ‘organisation specific’ data is locked down to the appropriate organisation (ie transactional information, payment data, customer interactions, ticket history etc.), there is a general tab on a customer’s record which is shared amongst Consortium partners. This means that each consortium member can view the following information: Name, Address, Phone Number, E-mail Address.
However, under no circumstance are they allowed to make use of this information unless you have specifically given them permission to do so.
If you would like further information on our CRM System, Tessitura and the Consortium please contact us.
What personal information we collect
We collect personal information as defined by GDPR. This may include your:
- Name
- Address
- Date of birth
- Phone
- Payment card details (please note, we will not hold payment information for any longer than it takes to process your transaction)
- Preferred touring venue
- Preferred membership branch location
- Any post, phone or email correspondence with Welsh National Opera
We collect personal information when you:
- Purchase a ticket by a WMC Consortium Member website for a WNO production.
- Register on https://www.wno.org.uk/
- Join the WNO mailing list.
- Make a donation or purchase a membership.
- Contact WNO directly via phone, post, email, in person.
- Attend or are invited to attend one of WNO’s fundraising or cultivation events.
- Buy WNO merchandise.
Cookies
In order to make our website simpler to use and improve our service, we sometimes place small amounts of information on your computer. These are known as 'cookies' and they are used by most major websites.
Cookies are used to:
- Remember settings so you don't have to change them again every time you load a page.
- Recognise that you are logged in to an area of the web-site so you don't have to keep re-entering your username & password.
- Measure how you use the web-site so we can continue to improve it.
Find out more at www.wno.org.uk/cookies
Third Parties
We may receive data about you from third parties. This could include other artistic venues where you have seen Welsh National Opera’s work, or other partners that we work with where you have consented to share your information with Welsh National Opera.
We may also use external services such as PCA Predict address finder and Experian Intact data cleansing services to ensure that we keep contact information on our database up to date.
Social Media
We use social media to reply to any solicitations made directly to Welsh National Opera. We may also access information from social media services such as Meta Platforms, Inc if your settings give us permission to do so.
Fundraising
Welsh National Opera relies on charitable support in order to secure and maintain both its high quality and bold artistic programme. In order to ensure that we are able to provide a bespoke and personal service, for a small number of our audience and donors we may seek additional information to ensure that we only contact those who are willing and able to donate to a particular project or campaign.
We may use external profiling/screening companies to ensure our communications are relevant to you and your interests and to assess your interest in making, and likely ability to make, donations to Welsh National Opera. In addition to publicly available information from sources such as – but not limited to – Companies House, Linked In, Twitter, Facebook, company websites, news media, Rightmove and Zoopla, depending on your interaction with us and/or privacy settings.
Welsh National Opera may hold personal data that has been created by us from other personal data that we already hold about you, either from internal or external research/profiling. This may be carried out by automated or manual processes and enables us to better understand you as a supporter and make appropriate requests for support. A list of publicly available sources of information used by Welsh National Opera for the purposes detailed is available on request.
If you do not wish Welsh National Opera to undertake this activity, please email development@wno.org.uk
We may also be given information on potential donors via our trustees and key stakeholders for the purposes of fundraising events and other activity. Where this is the case, we will endeavour to send a copy of this privacy statement at the first point of contact, or at the latest within a month of receiving the information.
How we process personal information
The following processes are carried out in order to provide a service, carry out a contract with you or to carry out Welsh National Opera’s business:
- Fulfil ticket, donation and membership requests.
- Process Payments.
- Provide customer services and aid internal administration.
- Contact you with important information relating to your booking or purchase.
- Administer our website.
- Where you have solicited WNO for specific information.
The following processes are carried out where we have a legitimate interest or legal obligation:
- Contact audiences regarding their experience of any recent visits to work by Welsh National Opera.
- Use data to analyse and learn more about our audience and donors to ensure that we can continue to better understand our customers and improve our services.
- Use information gathered from publicly available sources to learn more about our customer and donors interests and preferences so that we only contact the right people, with relevant information relating to fundraising events, campaigns and other activity.
- To ensure that we keep our data up to date and accurate.
- To contact current donors with information about events, news, special offers or any relevant future fundraising activities or campaigns.
The following processes are carried out where we have your consent
- To contact you with information about events, news, special offers and supporting us.
- Where you have specifically given consent to do so we may share your data with other likeminded organisations.
Third Parties
We may provide your personal information to social media providers or third party advertisers in order to show you relevant advertising and also to help us identify potential customers.
We may also share your details with our suppliers, for example, mailing houses, to enable them to perform services on our behalf.
Welsh National Opera is not responsible for the privacy notices and practices of other websites even if accessed using links from www.wno.org.uk and recommends that you check the policy of each website you visit and contact its owner or data protection manager if you have any concerns or queries.
Despite all our precautions, no data transmission over the internet is 100% secure. So, we cannot guarantee the security of any information which you disclose to us and so wish to draw your attention to the fact that you do so at your own risk.
How we protect your personal information
As part of the services offered to you through the Welsh National Opera website, the personal information you provide may be transferred to countries outside the European Economic Area (EEA). By way of example, this may happen if any of the computer servers used to host our website are located in a country outside of the EEA. If Welsh National Opera transfers your personal information outside of the EEA in this way, we will take steps to ensure that your privacy rights continue to be protected as outlined in this privacy notice.
Welsh National Opera may transfer your data to the USA, to organizations such as Facebook, Google or Wordfly. The USA has weaker data protection laws than that of the EEA and therefore we will ensure that only organisations who are a part of the EU privacy shield initiative will handle your personal information. More details on this certification can be found at www.privacyshield.gov/welcome
We will keep your information only for as long as is reasonably necessary for the purposes set out in this privacy notice and to fulfil our legal obligations. We will not keep more information than we need. The retention period will vary according to the purpose, for example, for a ticket purchase we will cease to market to individuals who have not had any further interaction with WNO after a period of seven years. We will continue to use this data for analysis for a further eight years, but will remove after this point in time. However, for example, when a constituent that pledges a legacy to WNO, we will retain this information for as long is required to process the bequest, and for any future auditing and legislative requirements.
How you can control your personal information
You can update your personal information and communication preferences at any time by logging into www.wno.org.uk, or by phoning, writing or emailing WNO directly.
Every email we send you will include details on how to change your communications preferences or unsubscribe from future correspondence.
If you would like to view, update or remove any personal information we hold, you can do so by logging into www.wno.org.uk, or contacting us directly by phone, post or email. Please always send a clear description of the information required, and whether you want to view, update or remove it.
GDPR gives you the right to access information we hold about you (a ‘subject access request’). To exercise this right, or if you wish to initiate your ‘right to be forgotten’, please contact us at dataprotectionofficer@wno.org.uk or by post addressed to Data Protection Officer, Welsh National Opera, Wales Millennium Centre, Bute Place, Cardiff Bay CF10 5AL or by telephone on 02920 635053 and we will respond to you within one month of receipt of your request.
If you have any queries please contact us directly at info@wno.org.uk. You also have the right to lodge a complaint with the supervisory authority, The Information Commissioner’s Office – www.ico.org.uk
Updates to this privacy statement
This notice was updated on 21 April 2023. It may be updated to take into account changes at the Welsh National Opera for example to reflect changes to regulation or legislation.
Cookie policy
Cookie policy
This website uses something called cookies. A cookie is a small text file of letters and numbers that gets put onto your computer when you visit a website. This allows the site to distinguish you from other users.
A cookie isn't a computer program, can't read files on your computer, can't carry viruses and can't install malware onto your computer.
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout
Cookies you may encounter on Welsh National Opera’s website:
Craft
The content management system (Craft) used to power this site, uses cookies to help you navigate, and to remember any preferences you have and pages you've already visited.
Tessitura
Used by our booking platform (Tessitura) allowing you to undertake purchases. Tessitura cookies allow you to login, add multiple items to a shopping cart before purchasing tickets, merchandise and making donations.
Google Analytics
Used by Google Analytics allowing us to track pages you visit, and basic details about your web browsers. They cannot identify you personally.
For further information about these cookies or any other cookies found within this site, please contact info@wno.org.uk
By browsing Welsh National Opera’s website, you are accepting the cookies as mentioned above plus any others deemed essential for the best user experience. You can manage cookies in your browser; however, if you decline or delete cookies, areas of the site may not function properly or may behave unexpectedly.
| Cookie | Domain | Description | Duration | Type |
|---|---|---|---|---|
| CraftSessionId | wno.org.uk | This cookie is used to maintain sessions across web requests via the PHP session cookie. | session | Necessary |
| cid_* | .ctnsnet.com | Crimtan sets this cookie as remarketing cookie that is used to send relevant ads to users on subsequent sites. | 1 year | Marketing |
| _ga | .wno.org.uk | Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors. | 1 year 1 month 4 days | Analytics |
| _gid | .wno.org.uk | Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website's performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously. | 1 day | Analytics |
| _gat_UA-* | .wno.org.uk | Google Analytics sets this cookie for user behaviour tracking. | 1 minute | Analytics |
| _ga_* | .wno.org.uk | Google Analytics sets this cookie to store and count page views. | 1 year 1 month 4 days | Analytics |
| XANDR_PANID | .adnxs.com | No description | 3 months | Other |
| receive-cookie-deprecation | .adnxs.com | No description | 1 year 1 month 4 days | Other |
| uuid2 | .adnxs.com | The uuid2 cookie is set by AppNexus and records information that helps differentiate between devices and browsers. This information is used to pick out ads delivered by the platform and assess the ad performance and its attribute payment. | 3 months | Marketing |
| anj | .adnxs.com | AppNexus sets the anj cookie that contains data stating whether a cookie ID is synced with partners. | 3 months | Marketing |
| test_cookie | .doubleclick.net | doubleclick.net sets this cookie to determine if the user's browser supports cookies. | 15 minutes | Marketing |
| ar_debug | .doubleclick.net | No description | 1 month | Other |
| cid | .ctnsnet.com | The cid cookie helps to identify unique visitors and understand their site behaviour at different times. | 1 year | Analytics |
| _fbp | .wno.org.uk | Facebook sets this cookie to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising after visiting the website. | 3 months | Analytics |
| vuex | wno.org.uk | No description available. | never | Other |
Recruitment privacy notice
Welsh National Opera (“We”, “Us” or “Our”) are committed to protecting and respecting your privacy. This Privacy Notice (together with any other documents referred to herein) sets out the basis on which the personal data collected from you, or that you provide to Us, will be processed by Us in connection with our recruitment processes. Please read the following carefully to understand our views and practices regarding your personal data and how We will treat it.
For the purpose of the General Data Protection Regulation (“GDPR”) and the United Kingdom General Data Protection Regulation (“UK GDPR”) and the UK Data Protection Act 2018, the Data Controller is Welsh National Opera.
Welsh National Opera is a Charity registered in England and Wales (number 221538). Its trustee is Welsh National Opera Ltd, a company limited by guarantee registered in England and Wales (number 454297).
We use iTrent software supplied by MHR Global to assist with our recruitment process. We use iTrent to process personal information as a data processor on our behalf. MHR Global is only entitled to process your personal data in accordance with our instructions.
Where you apply for a job opening posted by Us, these Privacy Notice provisions will apply to our processing of your personal information in addition to our other Privacy Notice which has been provided to you separately or is available on our website.
Where you apply for a job opening via the application function on a job site or similar online service provider (“Partner”), you should note that the relevant Partner may retain your personal data and may also collect data from Us in respect of the progress of your application. Any use by the Partner of your data will be in accordance with the Partner’s Privacy Notice.
Your personal information
Information We collect from you
We collect and process some or all of the following types of information from you:
- Information that you provide when you apply for a role. This includes information provided through an online job site, via email, in person at interviews and/or by any other method.
- We process personal details such as name, email address, address, telephone number, date of birth, qualifications, experience, information relating to your employment history, skills experience inc. Welsh language skills, that you provide to Us.
- Where required, we may collect health information to meet our legal obligations in relation to employment, health and safety, and workplace adjustments.
- If you contact Us, we may keep a record of that correspondence.
- A record of your progress through any hiring process that we may conduct.
- Details of your visits to iTrent’s pages
- We may on occasion source information from sources other than yourself such as LinkedIn and / or other social media profiles or Government departments such as HMRC.
- We may receive your personal data from a third party who recommend you as a candidate for a specific job opening or for our business more generally
Uses made of your information
Lawful basis for processing
We rely on legitimate interest as the lawful basis on which We collect and use your personal data. Our legitimate interest is the recruitment of staff for our business.
Purposes of processing
We use information held about you in the following ways:
- To consider your application in respect of the role for which you have applied.
- To consider your application in respect of other roles.
- To communicate with you in respect of the recruitment process.
- To enhance any information that we receive from you with information obtained from third party data providers.
- To find appropriate candidates to fill our job openings.
- To help our service providers (such as MHR Global and its processors and data providers) and Partners (such as the job sites through which you may have applied) improve and develop their services (including the use of aggregate data).
- Anonymised data may be used to meet reporting requirement (Statutory or otherwise)
Automated decision making
Welsh National Opera do not currently use automated decision making with the recruitment process however we reserve the right to introduce a level of automation should it be deemed appropriate at a future point in time. Should automation be introduced the final decision as to who to engage to fill a job would remain with the Recruitment Manager.
Disclosure of your information
As set out above, we pass your information to our third-party service providers, including MHR Global, who use it only in accordance with our instructions and as otherwise required by law.
Where you have applied for a job opening through a third party we may disclose certain personal data that We hold, including but not limited to a unique identifier used by them to identify you, and information about your progress through our hiring process for the applicable job opening, as well as tangible, intangible, visual, electronic, present, or future information that we hold about you, such as your name, contact details and other information involving analysis of data relating to you as an applicant for employment (collectively “Disposition Data”).
Where you have applied to a job opening through another service provider, we may disclose data similar to the Disposition Data defined above to such service provider. The service provider shall be the data controller of this data and shall therefore be responsible for complying with all applicable law in respect of the use of that data following its transfer by Us.
How We store your personal data
Security
We take appropriate measures to ensure that all personal data is kept secure, including security measures to prevent personal data from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where We are legally required to do so.
Unfortunately, the transmission of information via the internet is not completely secure. Although We will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through any online means, therefore any transmission remains at your own risk.
Where We store your personal data
Welsh National Opera stores your personal data in iTrent which is hosted by MHR Global, the data is stored primarily in the UK, including in their own data centre and on cloud platforms like Microsoft Azure. MHR Global may use third party providers for specific services like CRM, with all locations and parties detailed in their privacy statements
We will not knowingly transfer your personal data outside of the United Kingdom or EEA or to any organisation (or subordinate bodies) governed by public international law or which is set up under any agreement between two or more countries.
If you would like further information, please contact Us (see ‘Contact’ below).
How long We keep your personal data
As standard we will retain unsuccessful applicant data for 12 months, successful candidate data will form the basis of the HR Employee Record and legislative retention periods will apply.
The note above does not affect your GDPR rights as explained below
Your rights
Under GDPR legislation, you have a number of important rights free of charge. In summary, those include rights to:
- access to your personal data and to certain other supplementary information that this Privacy Notice is already designed to address
- require Us to correct any mistakes in your information which We hold
- require the erasure of personal data concerning you in certain situations
- receive the personal data concerning you which you have provided to Us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
- object at any time to processing of personal data concerning you for direct marketing
- object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- object in certain other situations to our continued processing of your personal data
- otherwise restrict our processing of your personal data in certain circumstances
- claim compensation for damages caused by our breach of any data protection laws.
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the UK GDPR.
If you would like to exercise any of those rights, please:
- contact us using our contact details below
- let Us have enough information to identify you,
- let Us have proof of your identity and address, and
- let Us know the information to which your request relates.
How to complain
We hope that We can resolve any query or concern you raise about our use of your information quickly and effectively. If you have a complaint about the use of your personal data in the first instance, please contact us direct, our contact details are below.
If you are unhappy with our response, you have the right to complain to the Information Commissioner’s Office (ICO).
Contact
All questions, comments and requests regarding this Privacy Notice should be addressed to:
Welsh National Opera
HR Administration
Wales Millennium Centre
Bute Place
Cardiff
CF10 5AL
Email: People&Culture@wno.org.uk