Who we are
Hill Art Foundation respects your privacy and seeks to protect your personal data. Our website address is: https://hillartfoundation.org.
What personal data we collect and why we collect it
1. We keep to a minimum the amount of information we hold about you.
2. We use your data to respond to your enquiries and provide you with information that we believe you would like to receive about the Foundation, our artists, available artworks and our events (the lawful basis for this is “legitimate interest”).
3. We also use your data to complete transactions with you on our website and also via our galleries and other affiliated businesses (the lawful basis for this is “contract”).
4. We also use your data to communicate with you where you have signed up and opted in to receive information from us (the lawful basis for this is “consent”).
5. We only hold your data for as long as necessary.
6. We apply appropriate security mechanisms to protect your personal data.
7. Our legitimate business interests are balanced with your interests, rights and freedoms and your consent.
What information does Hill Art Foundation collect about me?
We may collect some (or all) of the following: your name, email address, IP address, information about you (for example, age, gender, socio-economic status), data provided by cookies and other similar technologies, functional data such as registration and system data.
Why does Hill Art Foundation need my information?
We use your data to help us provide the best experience of our Foundation, which includes using data to improve (and, where possible, personalise) your experiences. We use your data to communicate with you, for example, informing you about new shows, events and gallery updates.
Can I opt-out of sharing my information with Hill Art Foundation?
Yes, you do not have to share your information with us that you do not want us to process and you may opt-out to receive communications from us at any time by contacting us at email@example.com. We will respect your rights under the GDPR in this regard.
How do I delete my personal data from Hill Art Foundation and what are the consequences?
You can email firstname.lastname@example.org to request that your data be deleted. However, please note, by deleting your personal data, you may impact your experience of the Foundation. We will not delete data which is needed to fulfil a contract until that contract is completed or unless we agree to terminate the contract. We will inform you if deleting your data will impact our ability to perform a contract in case this affects your decision.
Google Analytics cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve our site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
How long do we store your data for?
We will store your personal information for as long as necessary.
We are required by law to keep information about financial transactions for the current financial year plus an additional six years.
We may store your information on our databases for reference and to record any preferences you have notified to us, for example in relation to your opt-in status to receive marketing communications. The information may be retained and used by the Foundation to answer queries or resolve problems, provide improved and new services, to respect your rights under the GDPR and for any data retention requirements of the law. This means we may retain information after you cease interacting with Hill Art Foundation.
We store your information securely to prevent unauthorised use.
Who do we share your information with?
We work with third parties in the provision of some of our services and it may be necessary for us to share your information with them in order to provide those services.
On request, and when relevant, we will provide details of which third parties we work with. We will also discuss and agree on any specific security questions or requirements you may have during the provision of our services.
The third parties we work with are encouraged to meet the requirements of the GDPR. When we contract with third parties we enter into agreements that encourage GDPR compliance. For example, for marketing purposes we store your data with Mailchimp.
Contacting you via email alerts, notices and newsletters
The Foundation only sends marketing information to those persons the Foundation believes it has a legitimate business interest to contact. This means that, from time to time, we may send you email newsletters or other notifications in relation to the Foundation. If you wish to stop receiving some, or all, of our marketing communications, follow the instructions included in our emails or contact email@example.com.
If you supply us with your postal address or telephone number you may receive periodic mailings or calls from us with information on new products and services or upcoming events. If you do not wish to receive such updates, please let us know by emailing us at firstname.lastname@example.org.
The GDPR allows you to request to see any information held about you, and to correct any inaccuracies.
Tuesday, December 18, 2018