Privacy Policy
Privacy Policy
Last updated: 18 July 2024
Baltic Centre for Contemporary Art is made up of Baltic Flour Mills Visual Arts Trust, a registered charity registered in the UK, (charity no: 1076251 and Baltic Contemporary Visual Arts Trading Ltd (Registration Number: 4345367).
These two legal entities act as one company, this policy extends to both parts equally and is not considered data sharing.
Respecting your privacy and safeguarding your data
Baltic is committed to upholding your privacy and taking care of your personal data. This policy outlines what, why and how Baltic collects, processes and stores your personal data securely in compliance with the General Data Protection Regulation (25 May 2018).
What personal data does Baltic collect from you?
When signing up to Baltic or Baltic Shop’s mailing list you will be asked for:
- Name
- Post code
- Date of birth
- If you are under 16 declaration that your parent/guardian have consented for you to sign-up.
When signing up to Baltic mailing list you will also be asked for your preferences to communications messages and e-mails.
If you sign up for an account or make a purchase from our online store you will be asked to provide your name and title, your postal and email address along with any alternate delivery addresses and your preferred contact method, this information may be used to deliver your orders or to contact you.
We may also collect data on the times and dates of purchases, details of products you have bought and whether you used a discount code.
What other data does Baltic collect?
When booking a ticket for one of our events, workshops or talks through Eventbrite:
- Transactional data so we may process the payment
- Personal data so that we may contact you should the event be cancelled or postponed
- Your express permission whether we share your data with a named third party we are presenting an event in partnership with.
Images
If you appear in an image on our website and you want the image to be taken down please contact [javascript protected email address].
Cookies
When browsing our website(s) at www.baltic.art, http://archive.balticmill.com, https://shop.balticmill.com, www.bxnu.institute anonymous data is collected by cookies. A cookie is a small piece of data that is sent from Baltic’s web server to your browser. It is stored on your hard drive. A cookie cannot read data off your hard disk other than the cookie itself, files created by other websites, and will not damage your system. You can reset your browser to refuse cookies or alert you when a cookie is being sent. Baltic does not use cookies to identify you.
Website
In order to improve our website(s), we may analyse information about how you use it and the content you interact with. We use Google Analytics to do this but this data is anonymous.
External Links
This website contains links to other websites. Although the majority of them are Baltic’s cultural partners Baltic are not responsible for the privacy practices of other organisations and you should read their own privacy information. The information and usage described here, applies only to personal data collected by Baltic or Baltic Shop.
Buying tickets
When your purchase tickets (including paid for, free or donations tickets) for Baltic events we collect data via a third-party ticketing platform, Eventbrite. This includes legally required generic financial transaction information which is stored. Baltic does not use this data to identify you. Baltic will only store the details that Baltic requires to process the payment or comply with UK law.
Your personal data is only added to Baltic’s Mailing list if you give consent for us to do so. Personal data given when reserving free tickets will also be stored. Personal and transactional data is permanently deleted after 12 months. Personal data will be used to contact you if we need to let you know that an event has been cancelled or re-scheduled.
How does Baltic use your data?
- Once you have consented for your data to be shared with Baltic we use it to be able to send you marketing e-mails from Baltic about upcoming or current exhibitions, artist talks and events or other specified interests when given specific permission to do so.
- Baltic processes your sales data where we believe there is a legitimate business requirement for us to do so. We produce weekly sales reports, including sales by volume, value and product type. We generate statistical reports that give us information including average spend per head and numbers of new and returning customers. These reports do not include any personal data.
- We may use statistical data taken on the number of visitors to Baltic’s website(s) to prepare statistical reports to organisations or project funders such as Arts Council. This will not include any personal data.
How does Baltic collect your data?
Digitally
- When you choose to sign up to Baltic mailing list via Baltic’s website(s) sign-up form(s)
- on www.baltic.art
- on shop.balticmill.com
- on bxnu.institute
- When you book tickets via our event ticketing platform Eventbrite
- When you make a donation via our donations platform Donorbox
- If you apply or submit to any of our open calls or artist opportunities via Submittable
In-person/in-venue
- Choose to sign up to Baltic mailing list after receiving an e-mail asking if you wanted to sign up to Baltic’s mailing list after receiving one hour’s free access to Wi-Fi at Baltic Centre for Contemporary Art, Gateshead.
- Choose to sign up to Baltic mailing list when asked if you participate in our exit surveys (quantitative research) conducted by Morris Hargreaves McIntyre at Baltic Centre for Contemporary Art, Gateshead.
How does Baltic store your data?
Depending on your interactions with Baltic, your data is held securely in Salesforce, Customer.io, Mailchimp, Eventbrite, Donorbox, Shopify or Submittable platforms in compliance with GDPR rules.
How do you update the data Baltic holds on you?
Baltic endeavours to keep your personal data accurate and up to date. You can update your communications preferences by clicking on the bottom of our e-mails or can unsubscribe completely.
If you become aware of errors or inaccuracies, please e-mail [javascript protected email address] with “UPDATE MY RECORDS” in the e-mail subject line or alternatively call 0191 440 4212.
What are your rights?
Your rights: What does it mean
Right of Access: To know if Baltic have your data and to see it.
Right to Rectify: To correct your data if you believe it is inaccurate.
Right of Portability: The right to request a copy of your data in a common machine readable format that can be transferred to another organisation or database.
Right of Erasure: To have some or all of your data delete (where legally possible) - Right not to be Profiled: The right not be subject to a decision based on automated processing.
Right to Restrict Processing: To opt out of processing your data in a particular way without necessarily deleting it.
Right to withdraw consent: If you have provided consent, you may withdraw this at any time.
Right to Object: You have the right to register and objection if an organisation continues to process your data or send you direct marketing on the grounds of scientific/historical research or legitimate interests or public interest.
You can exercise your rights at any time by contacting Baltic’s Data Controller at [javascript protected email address]
Who does Baltic share your data with?
Baltic does not share your data with anyone unless you have provided express permission to do so when purchasing a ticket for an event we are presenting in partnership with a third party. This permission is requested at the point of ticket purchase.
There are certain circumstances under which we may need to disclose your personal information to third parties.
These circumstances would be allowing access to it by our chosen service providers who process data on our behalf and on our instructions (for example our ticketing partner Eventbrite). In these cases, we require that these third-party companies comply strictly with our instructions and with data protection laws, particularly around the security of personal data.
Baltic use such services as Salesforce, Customer.io, Submittable, Eventbrite, Mailchimp, Donorbox, Shopify, Virgin Money, Payter, Elavon, Webmis, Worldpay, Optomany, Yorkshire Bank, HRMC and Google analytics, to deliver products and services to you. Baltic only use secure service providers who comply with GDPR.
How do i unsubscribe from e-mail from Baltic?
If you no longer wish to receive e-mail communications from Baltic or you can unsubscribe by clicking “unsubscribe” from the link in any of the e-mails receive from us. Alternatively, if you would like the data collected by Baltic via any of the channels or methods listed above to be permanently deleted, send an e-mail to [javascript protected email address] with “PERMANENTLY DELETE” in the e-mail subject line or call 0191 440 4212.
Retention Period
The data Baltic has stored is reviewed every 12 months and either deleted, archived or consent for it to be kept for another 12 months is sought. Personal data processed for any purpose(s) shall not be kept for longer than is deemed necessary.
Further Information
Should you have any questions on anything in this policy please e-mail Baltic’s data controller on [javascript protected email address] or 0191 440 4913.