KARST is committed to safeguarding the privacy of our website users and visitors which is why we have developed this privacy policy, which sets out our data collection and processing practices in accordance with the EU General Data Protection Regulation (GDPR).
KARST, an independent charity and art gallery based in Plymouth, was incorporated in 2013 as a Private Limited Company by guarantee without share capital use of ‘Limited’ exemption (in England: No.08653315) and registered as a charity (in England: No.1157242).
The data we collect
KARST will collect basic personal data, such as name, job title, organisation and email address. We also may collect but do not retain data relating to race or ethnic origin, religious beliefs, physical or mental health or sexual preferences as requested by Arts Council England.
Data given to us directly by you – email
KARST collects personal identifiable information that is voluntarily provided to us in person at events or at our reception or by visitors to our website. The purpose of using this data is to send our subscribers communications about the work we are doing and information about and invitations to our public events.
By providing this personal data to us either via the website or in person and opting in, visitors are consenting to our use of their personal data. If you consent to receiving our communications, any information we use for this purpose will be held by us until you tell us you no longer wish to receive this information.
Should any subscriber subsequently choose to unsubscribe from the mailing list, we provide clear and easy instructions on the email specifying how to do this; alternatively a visitor may contact us at KARST or on
ku.gro.tsrak@ofni and request to be removed from the list.
Databases kept are:
- KARST email central database;
- KARST educational database (teachers, schools, universities etc) for specific learning activities; KARST information assistant/casual job list (students, volunteers etc.—those wishing to work for KARST; Data given to us directly by you – non email;
- KARST also collects personal identifiable information that is voluntarily provided to us in person at events or at our offices or by visitors to our website. The purpose of using this data is to send our subscribers details of the work we are doing and information about and invitations to our public events.
By providing this personal data to us either via the website or in person and opting in, visitors are consenting to our use of their personal data. If you consent to receiving our postal mail outs, any information we use for this purpose will be held by us until you tell us you no longer wish to receive this information.
Our database of postal addresses only has grown by those opting in and voluntarily giving us their data. The basis for processing this information is legitimate interest as we deem the use of their data necessary to fulfil our charitable objectives. This information is processed after we have conducted a balancing test which determines that our interests as an organisation do not override the individual’s interests, rights and freedoms. This type of data is held no longer than is necessary to perform our objectives, or until the individual asks to be removed.
All members of the postal database can always have their details removed. They can at any time ‘return to sender’ which is clear on all envelopes or they can be in touch with the KARST or email KARST at info@karst.org.uk and request to be removed from the database. All postal addresses which are returned by Royal Mail (i.e. people who have moved) are removed from the database.
Data publicly available
This may include individuals who hold public office roles, funders and potential partners for our exhibitions, educational projects and events. The legal basis for processing this information is legitimate interest as we deem the use of their data necessary to fulfil our charitable objectives. This information is processed after we have conducted a balancing test which determines that our interests as an organisation do not override the individual’s interests, rights and freedoms. This type of data is held no longer than is necessary to perform our objectives, or until the individual asks to be removed.
Data processed under contractual obligation
Data kept under contractual obligation includes basic personal information from our sponsors, funders and suppliers for us to provide our services. It is kept for a minimum of 6 years. After this time, it will be destroyed if it is no longer required for the purpose for which it was obtained.
Applications for job roles
We keep details of people who apply for a position with KARST, or send a speculative CV. The data is kept for no longer than six months from the closing date of the post applied for, or after receipt of the CV. All applications are then discarded securely. Our policy is to employ the best qualified person for the job advertised and to provide equality of opportunity to all.
Sharing your personal data
We do not share any contact details with partners we work with unless the member of the public specifically opts in to allow this to happen. For example, if we are hosting an event by a third party but KARST is managing the event and tickets are booked via KARST, we will ask not only if you would like to opt in to KARST’s email and mailing list, but also if you would like to opt in to the third party’s email and mailing list.
Security
KARST has appropriate IT safeguards to ensure that its data is kept secure in encrypted storage. Our employees are instructed to follow the KARST’s internal security policy, which include measures preventing the loss, destruction, misuse and unauthorised disclosure of any personal data kept on our database.
Individual Rights
Any individual can request to see the information we hold on them at any time. If you believe the information, we hold on you is incorrect, you will have the right to have this rectified or deleted accordingly.
A list of an individual’s rights under GDPR is as follows:
- The right to access the personal data we hold on you;
- The right to correct and update the personal data we hold on you;
- The right to have your personal data erased;
- The right to object to processing of your personal data;
- The right to data portability;
- The right to withdraw your consent to the processing at any time for any processing of personal data to which consent was sought;
- The right to object to the processing of personal data where applicable;
- The right to lodge a complaint with the Information Commissioners Office. You can contact the Information Commissioners Office via email, on 0303 123 1113, or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
If you would like to contact us to ask about your data, have questions or you do not feel that your concerns have been addressed in our privacy statement, please do not hesitate to contact us by email at
ku.gro.tsrak@ofni
Cookies
A Cookie is a small component of data a website stores on your PC which considers information about your navigation on that website. Cookies are used by us to get statistics on the use of our site through its users. This is done by analysing data such as the amount of time spent on each page and most visited pages. The data helps us to improve the quality of the website.
www.karst.org.uk uses Google Analytics cookies to help us analyse how visitors use our site. To opt out of Google Analytics cookies, please go to: tools.google.com/dlpage/gaoptout
Our website also uses cookies to help inform our marketing, by understanding what interests users and how we can tailor social media advertising that is relevant.
Facebook custom audiences
Tracking pixels are small pieces of javascript code which record information concerning the way visitors use a website, which then be used for ‘remarketing’ or ‘retargeting’ purposes. We have integrated Facebook Custom Pixel into the KARST website, which builds a profile of your interests based on what you view on our site. This information may then be used to show you relevant adverts on Facebook or other social media. As a result, you may see KARST events being promoted more frequently on social media after visiting the KARST website.
If you don’t wish to allow tracking pixels please choose ‘Essential cookies only’ when setting your cookie preferences for the KARST website.
Links to other sites
Other organisations’ websites have links on our site (such as artists or performers). If you link to their sites, they may collect information in accordance with their own privacy policies. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
For further information about cookies see the Information Commissioner’s Office advice.