Orchestra of St Paul's Ltd (trading as Covent Garden Sinfonia) collects, stores and uses personal data as an essential part of our concert operations. In particular, we send occasional e-mails to our mailing list about forthcoming concerts that are considered to be of interest. We comply with all relevant legislation, and never share your personal information with any third parties. Our database is secure and password-protected. We aim to treat all our contacts in an open, respectful and courteous way; we will amend or delete the personal data we hold on you if you so request.
Orchestra of St Paul's Ltd collects and holds information on persons interested in attending our concerts. We use personal data only in legal ways, and never share information with third parties. We believe that our collection and use of contact information (primarily e-mails) conforms to the guidance from the Information Commissioner's Office (ICO): "Legitimate interest is likely to be most appropriate where you use people's data in ways they would reasonably expect and which have a minimal privacy impact, or where there is a compelling justification for the processing". We have applied the ICO tests as follows:
- Identify a legitimate interest: Our legitimate interest is the performance of orchestral music at our concerts, and that is the sole purpose of contacting our potential audience.
- The data processing is necessary to achieve it: The processing is primarily the collection, storage and responsible use of e-mail addresses. We collect e-mail addresses only where we have good reason to believe that the person is interested in being kept informed about the orchestral music performed at our concerts.
- Balance it against the individual's interests, rights and freedoms: We do not collect or hold sensitive information on our contacts, and take reasonable and appropriate steps to safeguard the information that we do hold. We consider our use of personal data to be low risk.
We consider that sending information about our forthcoming concerts by e-mail is not intrusive, especially since we provide a means to Unsubscribe. We therefore consider that any risks are more than outweighed by the benefits to our contacts in terms of the information they receive about our concerts, and that our practices are proportionate in complying with the requirements of the General Data Protection Directive. We will be pleased to provide anybody with copies of the information that hold about them. Requests should be sent to firstname.lastname@example.org.