Furtherfield is subject to English data protection legislation in respect of the personal information you submit to us, or which we collect. The personal details you submit to us will only be used for the specified purposes indicated to you and will not be passed onto unauthorised third parties without your explicit consent.

How we collect your personal data

We may collect personal information about you if you:

• contact Furtherfield, for example to request information or make an enquiry, via email, our social media pages etc.
• choose to provide us with your data through engagement and interactions with our activities, projects, online channels (websites, social media pages etc) and/or a digital artwork located, for example, in Furtherfield Gallery or on the Furtherfield website
• respond to a survey from Furtherfield
• sign up to the Furtherfield e-newsletter
• purchase tickets for Furtherfield events
• donate to Furtherfield
• choose to provide personal data when you interact with a digital artwork located, for example, in Furtherfield Gallery or on the Furtherfield website

We will take reasonable precautions to prevent the loss, misuse or alteration of information you give us.

The type of personal information we collect

• Audience, Participants and Visitors data
  Purpose: To be able to identify and record information related to participants and audiences for our activities
  Legal basis: Consent, Contract, Public Interest, Legitimate Interest

• Back ups
  Purpose: For business continuity and disaster recovery purposes.
  Legal basis: Legal Obligation.

• Board data, minutes and reports
  Purpose: To record meetings, inform the public and to comply with relevant legislation.
  Legal basis: Contract, Legal Obligation

• Complaints, enquiries, and feedback
  Purpose: To handle and respond to any complaints, enquiries and/or feedback you may have.
  Legal basis: Consent, Contract, Legal Obligation

• Exhibitions and events
  Purpose: To inform you of and for us to be able to organise, promote, and host events, exhibitions and activities.
  Legal basis: Consent, Legitimate Interest, Public Interest.

• Images and videos
  Purpose: To take, create, receive, edit (where applicable), store and use images for social media broadcast, online platforms, research, publications, and marketing purposes for the promotion of our activities. Please note that we may select images and videos for permanent storage and use.
  Legal basis: Consent, Contract, Public Interest.

• HR and admin data
  Purpose: To keep record of and carry out general administrative tasks required for the day-to-day running of the organisation
  Legal basis: Contract, Legal Obligation.

• Mailing lists

  Purpose: To send communications and newsletters to you where you have registered for our newsletters and/or other mailing lists. We also receive statistical data around newsletter interactions.
  Legal basis: Consent.

• Participants and Visitors records
  Purpose: To record visitors to our events for statistical purposes.
  Legal basis: Consent, Contract.

• Regulatory compliance
  Purpose: As Arts Council England NPO, we have the duty to communicate and comply with relevant regulations and legislation.
  Legal basis: Contract. Legal Obligation.

• Social media

  Purpose: To manage our social media accounts, inform the public of events and opportunities, and to communicate with you.
  Legal basis: Public Interest.

• Surveys

  Purpose: To receive feedback, opinions and responses on various projects and activities, for research and statistical purposes, and to aid us in understanding individual and public needs in relation to the work we do.
  Legal basis: Consent, Contract, Public Interest.

Children & Young People’s data

When we refer to children and young people’s data, please note that this may include data such as names, images (including images and videos, please see above) where children and young people attend our activities, and via the provision and administration of projects.

Should you have any queries or concerns around our processing of children’s data please email us at info@furtherfield.org

Criminal convictions and offences

In line with current legislation, any member of staff working with children and/or vulnerable persons will be DBS checked.

Google Analytics

We also collect information about your computer and about your visits to, and use of, this website through Google Analytics including: geographical location, browser type and version, operating system, referral source, length of visit and page views. This information is anonymous and cannot be used to identify you personally.

Third Parties websites

Our website may contain links to other websites which are outside of our control and are not covered by this privacy notice. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from ours.

How we store your personal information

Your information is securely stored on our server, on Google Workspace and Mailchimp.
We retain your personal data for no longer than is necessary for the purposes for which it was collected by us, or as required or permitted for legal, reporting, regulatory and legitimate business purposes. In determining retention periods, we take into account the purposes we collected your data for, along with the sensitivity and any legal or other requirements. We will then dispose of this information by deleting it permanently from our records and any backups.

How we keep your personal data secure

Furtherfield has implemented appropriate technical and organisational measures to keep personal data that you provide to us secure. We use reliable electronic systems that provide data minimisation, anonymisation, access controls, encryption and other features to protect your personal information.

Your data protection rights

Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at info@furtherfield.org if you wish to make a request.

How to complain

If you have any questions or concerns about how your data is used, please email us at info@furtherfield.org.

You can also complain directly to the ICO if you are unhappy with how we have used your data.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk