Mercury Musical Developments (“MMD”) and Musical Theatre Network (“MTN”) respect your privacy and are committed to protecting your personal data. MMD and MTN (together, “we”, “our”, or “us”) operate as a joint consortium, with shared staff and resources (including our contacts database), and are jointly responsible as controllers of your personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications (EC Regulations) 2003.
This means that MMD shares responsibility with MTN for the way in which your personal data is held and processed, and you can exercise your legal rights with respect to your personal data against either organisation. As MMD and MTN operate as a consortium, with shared staff and resources, including our contacts database, it is only possible to share your data with both organisations or neither.
How you can contact MMD and MTN about your personal data
What purposes we use personal data for
We will only use your personal data lawfully. Most commonly, we will use your personal data in the following circumstances:
How do we process personal data?
What is our lawful basis for this processing?
Providing services to our members and keeping in touch with them about their membership.
Performance of our contracts with our members.
Sending newsletters about certain opportunities, events and the relevant activities of the wider membership (such as our Friday Mail-Out).
Consent* (please note if you signed up as a member before 25 May 2018 and have not opted out of receiving these newsletters since then, we will take this as your consent to continue receiving those newsletters).
Keeping an industry database of relevant organisational representatives and freelance practitioners within the theatre industry (who have either attended one of our past events, met with us, been employed us and/or supplied us with goods/services, and have indicated that they would like to be kept informed of our activities, e.g. by emailing us or providing us with their business card), and contacting these individuals about industry events of events of particular relevance (e.g. the UK Musical Theatre Conference and BEAM industry showcases).
Our legitimate interest of inviting industry peers to our events and furthering industry-wide discussions on relevant topics and matters concerning musical theatre.**
Only if required by law, maintaining a record of individuals who attend our live events (e.g. for contact tracing during the COVID-19 pandemic).
Our legal obligation.
For contact tracing of individuals who visit our offices for meetings (or meet with us at a pre-arranged external location) or to undertake works/services at our offices during the COVID-19 pandemic.
This is in the legitimate interests of the visiting individuals, our staff, and the wider national public health efforts to tackle COVID-19**.
* You can withdraw your consent and unsubscribe from such communications at any time. We will always include an unsubscribe option on any such communications sent, so you can cease to receive these at any point. Please note that, where you opt out of receiving any marketing communications form us, this will not apply to your personal data that we are required to process if you have signed up as a member (and are still a member) in order to continue providing services to you.
** You have a right to request the erasure of these details or request the restriction of our processing of this personal data. Please see below for details on how to exercise this right.
Will we ever share your contact details with a third party?
As MMD and MTN operate jointly as a consortium for many of our activities and communicate mostly to the members of both organisations at the same time (for example when we send the Friday Mailout), we operate a shared contacts database, so it is only possible for both organisations to hold your individual contact details and have permission to communicate with you.
We will never share your contact details with a third party outside the consortium for marketing purposes without prior written consent from you.
When will your contact data be updated or deleted?
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
If you cease to be a member and/or unsubscribe from receiving further communication from us, we will delete your contact details from our database in a timely manner.
If you cease to be in the professional role within which we had contact with you as a professional industry peer, and do not move into a role indicating similar legitimate interest in our activities, we will delete your contact details from our database once we are aware of this.
What information of yours do we hold, and where?
Upon signing up to MMD or MTN, our members provide us with the following details:
– Email address
– Postal address
– Telephone number
– Job title/role
And the following optional details:
– How you heard about MMD/MTN?
– PayPal details (for automatic renewals)
– Profile image
– Details of your website
These details are retained on our Membership Database, an electronic file which is only accessible to the staff of MMD and MTN. Name and emails are also kept on our subscribers emailing list on Mailchimp, which is a secure account accessible only to the staff of MMD and MTN. Members making payments via our websites will have the following information attached to those transactions: name, email address and (in some cases) postal address – these details are stored securely in the backstage area of our websites and are only accessible to MMD and MTN staff processing those payments. These details are essential to online processing of those transactions.
(b) Newsletter subscribers
Upon signing up to receive the MMD/MTN weekly mailout, subscribers provide us with:
– Email address
These details are retained on our subscribers emailing list on Mailchimp, which is a secure account accessible only to the staff of MTN and MMD.
(c) Industry database
After professional contact with theatre industry peers/suppliers who we understand to have expressed a legitimate interest in being kept informed of our activities/new musical theatre, we will sometimes retain the following contact details in order to do so appropriately:
– Job title/role
– Email address
– Postal address
– Telephone number
These details are retained in our Industry Database, and replicated on the Mailchimp platform for sending emails, both are electronic files which are only accessible to the staff of MMD and MTN. As with all contact details, you can request that these be deleted at any time, and we will always include an unsubscribe option on emails.
Cookies and Third-Party Websites
International transfers of your personal data
In order to send out newsletters and other email communications to our members, we use a service called Mailchimp, which can be used to create, send, and manage emails and which is provided by the Rocket Science Group LLC (“Mailchimp”). Mailchimp is headquartered in the United States and its servers are also located in the United States. This means that, in order to send our newsletters and email communications to you, we send your name and email address outside of the UK to Mailchimp. Mailchimp does not sell, rent, or trade user data and has implemented encryption technologies across its infrastructure. Any transfers of your personal information that we make to Mailchimp are subject to standard contractual clauses approved for use in the UK that are designed to safeguard your privacy rights and provide you with remedies in the unlikely event of a misuse of your personal information. If you would like further information on these transfers, please contact us using the details provided above.
What rights do you have?
Individuals have several rights under GDPR and Data Protection Act 2018, which MMD and MTN will adhere to; these are listed below:
Right to be informed:
Individuals can be informed of how their data is collected, stored and processed in a clear, accessible way.
Right of access:
Individuals can request access to a copy of their data in electronic form and details of how it is processed.
Right to rectification:
Individuals are entitled to have their data corrected if it is inaccurate or incomplete.
Right to erasure:
Also known as ‘the right to be forgotten’, this permits individuals to request the deletion of their data.
Right to restrict processing:
Individuals can, in certain circumstances, request a halt on processing if they object to accuracy or purpose.
Right to data portability:
Individuals can request their data in a suitable digital format, sent either directly to them or to a third party.
Right to object:
Individuals can, in certain cases, object to the processing of their data, e.g. in direct marketing.
Rights in relation to automated decision making:
Individuals can object to potentially damaging decisions being taken against them based only on automated data processing.
Before processing any data requests concerning the rights above, we will require valid proof of identification from the individual before proceeding with the request.
To exercise any of the above rights, please contact our Membership & Communications Manager at firstname.lastname@example.org
You will not have to pay a fee to exercise any of the above rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
We hope that we can resolve any query or concern you raise about our use of your information. The UK GDPR also gives you the right to lodge a complaint with regarding any alleged infringement of data protection law with the Information Commissioner, who may be contacted at https://ico.org.uk/concerns/ or on (+44) (0) 303 123 1113.