Our Privacy Commitment
The Edinburgh International Festival Society (in this policy collectively ‘Edinburgh International Festival Society’, ‘Edinburgh International Festival’, ‘International Festival’, ‘we’, ‘us’ and ‘our’) is committed to protecting the information we gather that identifies you as an individual (your personal information). We understand that your information is important to you and that you may have concerns. We have developed this privacy policy to give you all the details you need about how we process your personal information, why we process it and the steps we take to keep it secure. We may update this privacy policy when our safeguards change and we recommend you check this page regularly. The current policy is effective from 26 of March 2019.
You do not need to share all of the information outlined below, but there may be some of our services you cannot use to a full extent if you choose to withhold information.
The Edinburgh International Festival Society delivers the Edinburgh International Festival every year. We are a charitable company limited by guarantee. The Edinburgh Festival Centre Ltd is a wholly-owned trading subsidiary of the Edinburgh International Festival Society. Our ticketing vendor, Hub Tickets, is part of the Edinburgh Festival Centre Ltd.
We are registered as the Edinburgh International Festival Society at the Information Commissioner’s Office and our data protection registration number is Z7668082. We are the data controller for the personal information you share with us and we operate in accordance with current data protection legislation.
Contact details for the Edinburgh International Festival Society:
The Hub
Castlehill
Edinburgh
EH1 2NE
You can contact us by telephone +44 (0)131 473 2099, through our website contact form and by email contact@eif.co.uk.
If you would like to speak to someone about your personal information and its use, please contact dataprotection@eif.co.uk.
Ticketing System and Online Accounts
Hub Tickets is our official ticketing vendor and they sell tickets to our events through the website tickets.eif.co.uk. They create an online account for you as part of the booking process and this account is hosted on the AudienceView platform. You can also access certain areas of your account through our website eif.co.uk.
Our official ticketing vendor is Hub Tickets, part of the Edinburgh Festival Centre Ltd and our wholly-owned trading subsidiary. Their ticketing system has been developed from the AudienceView platform. AudienceView is headquartered in Toronto, Canada. Personal information stored through the Hub Tickets system is located in a UK-based datacentre.
You can also access your account through our own website eif.co.uk. You can manage the events you have booked with us by favouriting, viewing and downloading International Festival event diaries.
How we collect your personal information
We collect your personal information in ways you would expect when you interact with the Edinburgh International Festival, such as when you book a ticket for one of our events, join us as a member or use our website.
We collect your personal information:
The Personal information we collect
We only collect personal information that is necessary to meet our business needs and to provide you with the services you have requested.
Creating an account or buying a ticket
When you create an account with us or buy a ticket to one of our events, our ticketing vendor Hub Tickets will obtain information directly from you including the following:
Hub Tickets is our data processor and this information will be shared with us here at the Edinburgh International Festival as we are the data controller.
Transactions and order fulfilment
When you buy a ticket through Hub Tickets, they obtain information from you in order to fulfil the sales transaction including the following:
Joining us as a member or donor
When you join us as a member or donor, we collect basic account information as above. We may also collect additional personal information including:
Card details will only be used for the purpose of handling your sales transaction. Card details and personal information will be passed to third-party processors to ensure the payments you make are authenticated, submitted and authorised.
Young Musician’s Passport
When you join our Young Musician’s Passport scheme, open to Edinburgh-based young musicians who are below 18 years of age, we collect basic account information as above. We also collect additional personal information as per the eligibility requirements of the scheme including:
Using our website
When you use our website, we obtain information from your session namely:
You can read more in the ‘Cookies’ section below.
How we use your personal information
We collect personal information from you where we have a valid legal basis for doing so, such as to fulfil a contract we have with you or because you have given your consent to the sharing. We will always explain to you our purposes for collecting personal information at the point of collection and we will let you know if our purposes change. We rely on legitimate interest for our marketing communications. For our bookers, members and donors, we will have to send a number of service emails related to sales and membership contracts.
Contracts
We use your information to meet our business needs, provide you with our services and to fulfil contracts. In relation to our bookers and members, we use your information to:
Consent - Marketing for our partner organisations
We will ask you if you want to receive additional marketing from our core venue partners by email. You can manage your marketing preferences at any time and more information is provided in the ‘Managing the personal information that we hold about you’ section.
Young Musician’s Passport - Parental consent
For participants of our Young Musician’s Passport scheme who are younger than 18 years of age, we ask that a parent or guardian give consent to your participation. We may also seek parental or guardian consent, where required, for participation in projects that are managed by our Creative Learning team.
Legitimate interests and legal obligations
We also use the information you provide for a number of legitimate purposes and to comply with legal obligations we may have.
General
Marketing
Donors and Members
We conduct Research to support a number of our fund-raising and income generation activities as a charity. This includes: ensuring that our membership and fund-raising campaigns, events and fund-raising communications are targeted in the most effective way; evaluating the effectiveness of these campaigns and making changes where required; determining whether certain individuals may be interested in supporting us, including as a major donor; ensuring we conduct campaigns and fund-raising activity in compliance with law and industry codes of practice; and ensuring that we have reasonable knowledge of prospective donors to minimise the risk of reputational damage to the International Festival.
We conduct the following research using existing supporter data and/or information from publicly available sources:
Membership. We conduct analysis of our audience by attendance, post code or other information on our own database to market our Membership Scheme to individuals who might be especially interested in joining our scheme to support us and take advantage of the benefits Membership can offer. This activity where our audience is segmented is not targeted at specifically identifiable individuals in the first instance. We use personal information such as contact details to send individuals information about the International Festival, the Membership Scheme and their Membership benefits in a targeted manner to make sure our Membership marketing budget is used effectively and appropriately.
Fund-raising. We conduct analysis of our audience by attendance, donations, postcode and other information on our own database to contact our supporters who might be interested in supporting our fund-raising campaigns (which could include donations, individual giving schemes and legacy giving schemes). This activity where our audience is segmented is not targeted at specifically identifiable individuals in the first instance and communications sent to individuals thereafter are done so in accordance with our legitimate interests.
Major Gift Prospects. For a smaller number of our audience, where we want to better understand their engagement with the International Festival and their potential interest in supporting us further, we carry out research on information in our own database such as their connections to ticket buying and history of giving to the International Festival and we may seek additional information from third party sources such as the following websites:
We endeavour to make sure that any research and data collection we do is only sourced from publicly available sources where an individual would, in our view, have reasonable expectation that their information may be freely read by the public or the individual has freely made information available in respect of their business and philanthropic interests. We do not seek to gather information where it is reasonable to conclude that the individual has made an effort to keep that information private such as information on family life or personal relationships that exist outside the business world.
We carefully balance our legitimate interests against your interests as an individual. You can exercise your rights over your personal information at any time.
How we share your personal information
We have clear agreements with all of our service providers who process your personal information on our behalf. They will only use your personal information for the purposes we specify and as outlined in this privacy policy.
Managing the personal information that we hold about you
We are committed to giving you control over the personal information you share with us. You can update and manage your personal information in different ways. Managing your information is as easy as sharing it.
You can easily manage the personal information we hold about you through your online account. Go to eif.co.uk and sign in via the ‘my account’ button. You have options to update your contact details and to manage your communications preferences for the Edinburgh International Festival and our core venue partners should you wish to. You can update your marketing preferences at any time.
Electronic marketing communications sent by the Edinburgh International Festival will include functions to opt-out of similar communications in the future. Communications will also contain information and links that will allow you to manage your account preferences as above.
If you prefer, you can contact us directly about amendments to your personal information using our contact information provided in the ‘Privacy Commitment’ section or by emailing us - contact@eif.co.uk.
Cookies
Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to distinguish you from other users which helps to provide you with a good experience when you browse that website.
The Edinburgh International Festival and Hub Tickets Online (eif.co.uk, tickets.eif.co.uk and hubtickets.co.uk) uses three types of cookies as set out below.
Strictly necessary cookies
Our website uses “session cookies” to provide our online booking service. These cookies are essential in order to enable you to move around the website and use its features, such as the shopping basket. Session cookies are created temporarily. Once you close the browser, all session cookies are deleted.
Analytical cookies
These cookies allow us to recognize and count the number of visitors in an anonymous form and to see how visitors move around the site when they’re using it. This helps us to improve the way our website works. In order to do this we use Google Analytics, a web analytics service provided by Google, Inc. (“Google”).
Google Analytics uses cookies to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. We will never (and will not allow any third party to) use Google Analytics to track or collect any personally identifiable information of visitors to our site. Neither we nor Google will link, or seek to link, an IP address with the identity of a computer user.
Some event promoters may also make use of analytical cookies to track the effectiveness of their online advertising campaigns. These cookies are used for analysis purposes to help optimise online advertising campaigns and ensure you only receive ads from those event promoters that are relevant to you.
Re-marketing cookies
We use cookies to remarket to visitors to our website. Adverts will appear across websites you visit, which are part of the Google Display Network, with the content of these adverts based on your browsing activity on our website, eif.co.uk. If you wish to opt out of receiving these re-marketing ads you can do so by visiting Google’s Ads Settings page
You can choose whether or not to allow the setting of cookies using the privacy settings of your browser; however, session cookies must be enabled in order for our online service to process your booking correctly. Find out more about how to control cookies here.
Security
We take the safeguarding of your information seriously. Our primary systems, including our internal systems and AudienceView, use servers located in the UK. Your personal information may also be shared with data processors in the USA. We only work with USA-based processors who are certified and comply within the EU-US Privacy Shield framework, or can provide a comparable level of data security that meets the requirements of European data protection law.
USA-based data processors we currently use are Freshdesk provided by FreshWorks Inc; Google Analytics provided by Google; Greenvelope; and MailChimp, part of the . To find out more about how these organisations process personal information, we recommend that you read their privacy policies and/or review their EU-US Privacy Shield Compliance.
Our own secure server ensures that your personal details stay personal.
Every credit card purchase you make at our website is done through our Secure Server Technology. This provides many security features, including:
Our online ticketing facility accepts:
MasterCard; American Express; Visa; Visa Debit and Maestro.
Our secure server software encrypts information, ensuring that Internet transactions stay private and protected.
If you have any questions or concerns about our security, please contact our box office boxoffice@hubtickets.co.uk.
Retention
We will only collect and retain personal information from you in order to meet our purposes outlined in this privacy policy.
We will not retain information that is unnecessary for our business purposes. Generally, we will retain ticket and membership purchase information for a minimum of seven years in order to comply with our financial auditing requirements. Should you wish to be removed from our marketing lists and those of our venue partners, we will have to retain a minimum amount of information about you on our system in order to fully comply with your request.
Your choices and rights
You can make choices and exercise your rights in relation to the personal information we hold about you.
Under the General Data Protection Regulation, you can request to see full details of the personal information that the Edinburgh International Festival Society holds about you. In order to initiate a request with us about your personal information, please send us a description of the information you would like to access using the contact details outlined in the ‘Privacy Commitment’ section or by emailing our data protection lead at dataprotection@eif.co.uk.
If you would like to lodge a complaint with the supervisory authority, please contact the Information Commissioner’s Office www.ico.org.uk.
This privacy policy was updated on 26 March 2018 at 15.35pm GMT.