Club Nights - TramShed Cardiff

DATA PRIVACY NOTICE

TEG VENUES UK DATA PRIVACY NOTICE

Purpose of this data privacy notice

We are committed to protecting your personal data and being transparent about what information we hold about you.

Using personal data allows us to develop a better understanding of our patrons and in turn to provide you with relevant and timely information about the work that we do – both on and off stage.

The purpose of this policy is to give you a clear explanation about how we collect and use the information we collect from you directly and from third parties.

We use your information in accordance with all applicable laws concerning the protection of personal data. This policy explains:

What information we may collect about you
How we may use that information
In what situations we may disclose your details to third parties
Our use of cookies to improve your use of our website
Information about how we keep your personal data secure, how we maintain it for and your rights to be able to access it

Additional privacy information for talent, artists, musicians performers, sportspersons, their touring parties, agents, managers, and other related parties is also contained below.

Who we are

TEG Venue UK Limited is the data controller responsible for the collection and processing of your personal data. Our company number is 09331751 and we are registered with the Information Commissioner’s Office under reference ZB551123. We own and operate venues including Camden Assembly, The Globe, The Mill, Tramshed, and XOYO.

Information collection

We collect various types of information and in a number of ways. This may include:

Information you give to us

For example, when you attend one of our venues, or register on our website or purchase tickets from our event partners, we may store personal data you give us such as your name, email address, postal address, telephone number, gender, date of birth/age range;
We may also store records of your purchases, which we may aggregate and share with third parties;
Your age, for verification purposes;
Information you provide to us with when you contact us by phone, email, post, or when you communicate with us via social media;
Information you provide to us when you participate in competitions, surveys, promotions, or other marketing, promotional, or customer insight campaigns;
When you sign up to waitlists, to receive news, or offers, or sign up to an event, or to receive other marketing preference information; and
If you make an enquiry or complaint;

Information about your interactions with us and our event partners

for example, when you visit our website, we may collect information about the browser you’re using, your IP address (this is a number that identifies a specific network device on the internet and is required for your device to communicate with websites), what sites you came from and how you interact with our content.
when we send you an email, we may collect information on how you respond such as the number of times you have opened emails or the links in them that are clicked.
we may also hold information on interests and demographic categories inferred from your interactions with us in order to provide you a better service and to provide you with more focused information.
information such your Facebook page address, your Twitter handle, your Instagram handle and profile picture, together with information you may post to social media or other public forums. Social media companies may also provide information to us concerning you;
we may capture CCTV footage of you in attendance at our venues;
images of you from photographs and video taken at our venues and at events we organise;
information provided to us by bands, artists, teams, or other performers or their agents and managers, such information about event sign ups that they may have collected or guest list information;
with your consent or where necessary to protect vital interests, we may process information about your health (for example in relation to accessibility information or when we are investigating any incident which may have happened at one of our events or venues).
information about transactions you make with other companies in connection with our events and venues (including for example, ticket agents and venues, what they have provided to you, when and where and, if applicable, how much you paid).
other event attendance and sales information, including details of which of our events you have attended and where, either directly or from our ticketing agents or other third parties. We may collect similar information about other products, services, or merchandise you may have purchased from us, our ticketing agents, bands, DJs, or other performers;

Sources of personal data

We will receive your personal data when you provide it to us yourself or when you use or purchase one or more of our services.

We also receive personal data about you from third parties. Third parties who provide us with personal data about you include:

Marketing and digital services suppliers;
Research and development organisations;
Data partners and analytical consultants;
Ticket agents such as Ticketek, Eventbrite, Ticketmaster and others, who transfer personal data to us when you purchase a ticket from them for one of our events or venues;
Meta Platforms Inc., who, if you have consented, transfer personal data to us when you register for one of our services using your Facebook account; and
Other publicly available sources of information.

We may combine any personal data about you that we receive from you and from third parties. Also, from time-to-time, we collect personal data about individuals who are not customers. For example, where we collect the name and business contact details of a person who is the contact in a government agency or company with whom we deal. Our policy is to only use personal data collected from non-customers for the main business purpose for which it was collected.

How we collect, hold use, and disclose your personal data

We collect personal data in order to organise, hold, and promote events and our other business interests. When we collect and process personal data, we do it in ways permitted by data protection law. These are known as ‘lawful bases. Our lawful bases for processing your personal data include:

Consent. This may include, where you have given your consent:
- sending direct electronic marketing to you;
- processing information about your health, for example if you have an access requirement;
- sharing information with third parties for marketing purposes where you have clearly confirmed your wish for us to do this.

If we process your personal data based on your consent, you can withdraw your consent at any time.

Contractual obligations. This may include:
- collecting information to enable you to purchase a ticket to an event and to enable your access to that event once you have done so, or, where you do not need to buy a ticket in advance, we may collect personal data for security reasons when you access our venues;
- collecting information in support of any other product or service we may provide to you;
- contacting you about changes to events to which you have bought tickets;

Our legitimate interests. This may include:

processing necessary for providing our services;
contacting you with servicing messages about events to which you have bought tickets;
sharing information with event promoters, bands, DJs, agents, management, or other third parties who may need information concerning you for an event to run successfully, for example by letting us know your name for access purposes;
data processing for the purposes of marketing or making decisions about marketing where it is lawful to do so without your express consent;
dealing with any complaints or disputes that may arise;
conducting data analytics or other statistical or qualitative analysis
interacting with and respond to any communications you send us, including social media posts that you tag us in;
sharing personal data with third parties as described in this data privacy notice;
letting you know about important changes to our business and policies;
verifying your age and identity;
processing to ensure the security and optimisation of our websites and other technology systems;
processing for the good governance of our business;
processing to ensure appropriate safeguards at our venues and events, and to ensure the people who visit and work at our venues and events are safe and secure;
recording and investigating incidents which have happened or may have happened at one of our events;
access management;
monitoring and taking other actions for the prevention of abuses of ticket usage, breaches of terms and conditions of sale, or other behaviours inconsistent with ticket, event, venue, or other terms and conditions or law;

The protection of a vital interest. This may include:
- providing information to the police or medical services to prevent serious personal harm. We will not store this information for longer than it is needed.

Third Parties

There are certain circumstances under which we may disclose your personal data to third parties either to process personal data on our behalf or so that they can ‘control’ that personal data for their own purposes. These circumstances may include:

if we sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer of such business or assets where necessary;
if we (or substantially all of our assets) are acquired by a third party, in which case personal data held by us will be one of the transferred assets;
To our own service providers who process data on our behalf and on our instructions (for example ticketing agents and our customer relationship management technology providers, including Braze and Mailchimp);
event partners such as promoters and performers for the purposes of access management;
commercial partners, such as beverage and other consumable providers, sponsors, and other commercial partners, where we have aggregated personal data that may include information relating to you;
business infrastructure providers including Microsoft, Google, and Amazon Web Services;
Where we are under a duty to disclose your personal data in order to comply with any legal obligation (for example to government bodies and law enforcement agencies) or to similar bodies where it is in either our legitimate interests or the legitimate interests of a third party for us to do so; and
to event partners, sponsors, performers’ agents and management, authorised ticket on-sellers and resellers who where you have consented or where we have another lawful basis for that sharing.

TEG Group

We are part of an international group of companies within the TEG Pty Limited (TEG) group. We may disclose data to other TEG group companies and their contractors (such as data management providers). TEG group companies include TEG Live Europe Limited, Ticketek UK Limited, Ticketek Pty Ltd, Propaganda Promotions Limited, Imagine This (Live) Limited, TEG Dainty Pty Ltd, TEG Live Pty Ltd, and any entities that may in future become part of the TEG group of companies or in which TEG may have an interest. We may disclose your personal data to these entities for the purposes of, for example, responding to customer enquiries, ensuring that information collected is accurate, complete and up to date, producing anonymised and aggregated information for the benefit of other TEG companies, and enabling us and other TEG companies to better understand and meet your needs and interests. TEG may also use its affiliated companies and their contractors to process personal data on TEG’s behalf including where TEG has outsourced certain services to them – for example where we have one contact person within our group in the UK for data protection queries and compliance.

Security of your personal data

We have in place appropriate safeguards (both in terms of our procedures and the
technology we use) to keep your personal data as secure as possible. We will ensure that any third parties we use to process personal data on our behalf will do the same.

International transfers of your personal data

We are a part of a global group of companies and our events involve artists and other event partners from across the globe. As such, the data that we collect from you may be transferred to, and stored at, a destination outside the United Kingdom.

Your personal data may also be processed by staff operating in Australia or elsewhere outside the United Kingdom working for us or third-party data processors. Such staff or third parties may be engaged in, among other things, the provision of our services to you, the processing of transactions and/or the provision of support services.

Any such transfer will be performed with appropriate safeguards prescribed by data protection law. This will include transfers made where an ‘adequacy’ decision has been made by a relevant government or regulatory body, or the use of standard international data transfer agreements or standard contractual clauses endorsed by applicable governmental or regulatory bodies.

How long your personal data will be kept?

The length of time for which we retain your personal data will depend on the nature of the information and the reasons for its use. We will retain your information for as long as is necessary in order to enable you to attend our events or where you have asked us to send you promotional material concerning our events, for as long as you have provided your consent. We may need to keep some information for longer periods of time. For example, we may keep records of ticket sales for legal and accounting reasons for longer periods of time. We will not retain your personal data for any longer than is allowed by applicable data protection law.

In some circumstances we will retain your personal data for a shorter period, including recorded CCTV footage from our events and venues generally for no longer than 31 days, unless we are required to retain it for longer (for example, if we are investigating an incident, or have been asked to retain specific CCTV footage for a longer period by government or law enforcement officials).

Your rights

You have rights in relation to our use of personal data that concerns you. If you wish to exercise these rights, please contact us on the details provided in this data privacy notice.

You have the right to unsubscribe to marketing

You have the right to unsubscribe to direct electronic marketing messages at any time. Please follow the links on the emails you receive.

You have the right to be informed

We have a legal obligation to provide you with concise, transparent, intelligible, and easily accessible information about your personal data and our use of it. We have written this policy to do just that, but if you have any questions or require more specific information, you can get in touch with us.

You have the right to access your personal data

You have the right to ask us to confirm whether or not we hold any of your personal data. If we do, you have the right to have a copy of your information and to be informed of the following:

why we have been using your information;
what categories of information we were using;
who we have shared the information with; and
how long we envisage holding your information
To maintain the security of your information, we will have to verify your identity before we provide you with a copy of the information we hold.

You have the right to correct any inaccurate or incomplete personal data

You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. Please contact us if you wish to do so.

You may have the right to be forgotten

You have the right to ask us to erase your personal data in certain circumstances. We may not be able to delete your information if we are required to keep it for legal reasons or certain other reasons. If we cannot comply with your request, we will explain to you the reasons why.

You may have the restrict our data processing

You have the right to ask us to restrict the processing of your personal data in certain circumstances. We may not be able to delete your information if we are required to keep it for legal reasons or certain other reasons. If we cannot comply with your request, we will explain to you the reasons why.

You may have the right to data portability

You limited circumstances you may have the right to ask that we transfer the personal data you gave us to another organisation or to you. If we cannot comply with your request, we will explain to you the reasons why.

You have the right to withdraw your consent

If we are processing your personal data based on your consent for us to do so, you have the right to object at any time. To withdraw your consent to direct electronic marketing messages, please click on the link contained in the relevant message.

Changes to this privacy notice

If we change this data privacy notice, we will post the changes on this page and may place notices on other pages of the website.

Contacting us and making a complaint

If you would like to contact us or to complain about our collection or use of your personal data, you can do so:

By post – Data Protection Officer, TEG Venues UK Limited, 2^nd Floor, Bond Street, Bristol, BS1 3LG
By email – Legal@TEGEurope.com

The Information Commissioner’s Office is the supervisory authority for data protection in the United Kingdom. You can contact the Information Commissioner’s Office:

By post – Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
By telephone – on helpline number: 0303 123 1113 ICO

You can find more information at https://www.ico.org.uk

Additional privacy information for talent and touring parties

In the course of its business, TEG Live Europe may also processes personal data relating to talent, artists, musicians, performers, sportspersons, their touring parties, agents, managers, and other related parties. We may collect the following categories of personal data:

contact information (such as name, address, phone number, email address);
nationality, passport information, and visa details;
personal identification information (e.g., date of birth, gender);
professional background and experience;
financial information necessary for payments and reimbursements;
accommodation preferences and booking details;
transportation details (such as flight or travel itinerary);
health or medical information (e.g., medical conditions, allergies, or disabilities);
insurance details (if applicable);
social media profiles or handles (if collected for marketing or promotional purposes);
feedback or survey responses provided by attendees, viewers, or participants relating to a performance;
information collected through CCTV or video surveillance systems at the event venue;
communication records, such as email records;
performance-related data, including photographs and videos;
other relevant contractual or legal documentation related to the event (e.g., performer contracts, licensing agreements); and
any other information you or your related parties on your behalf voluntarily provide to us.

We may collect personal data directly from you or from authorised agents, representatives, or third parties involved in your engagement with us, such as talent agencies, management companies, or other companies with whom you may have a relationship. We may also collect personal data relating to you from publicly available sources.

Purposes of Data Processing

We process your personal data for the following purposes:

organising and promoting live events, including talent bookings and contractual arrangements;
obtaining necessary visas and permits for international performances;
facilitating payments and reimbursements;
providing information about upcoming events, promotions, and marketing communications;
managing ticket sales and distribution;
facilitating event logistics, including venue selection and setup;
communicating event updates, changes, or cancellations to attendees and participants;
conducting customer satisfaction surveys or feedback collection;
evaluating and selecting performers, artists, or athletes for future events;
conducting background checks or verification processes for staff, performers, or participants;
ensuring the safety and security of attendees and participants during the event;
handling customer enquiries, complaints, or support requests;
conducting market research and analysis to identify trends and opportunities in the industry;
conducting post-event analysis and reporting, including financial and performance metrics;
developing and maintaining relationships with sponsors, partners, or stakeholders
collaborating with third-party vendors or service providers involved in the event organisation process;
protecting against fraud, unauthorised access, or other security threats;
complying with health and safety regulations, including emergency response planning;
fulfilling contractual obligations with performers, sponsors, or other contractual parties;
complying with other legal obligations, such as tax and accounting requirements;
protecting our legal rights and interests; and
for other purposes particular to you that may be agreed between us and your authorised agents, management, or other representatives from time to time.

Legal Basis for Processing

We rely on the following legal bases for processing your personal data:

Performance of a contract: Processing your personal data is necessary for the performance of our contractual obligations with you, such as booking, paying for, and organising your performances;
Compliance with legal obligations: We may process your personal data to fulfil our legal obligations, such as tax and immigration requirements.
Consent: In certain circumstances we may rely on your consent to process your personal data, such as when we are dealing with matters relating to health
Legitimate interests: We may process your personal data based on our legitimate interests in promoting events and managing contractual relationships. In certain cases, we may rely on the legitimate interests of third parties to process personal data. For example, if we share personal data with sponsors or partners for marketing or promotional purposes, we would consider their legitimate interests in reaching their target audience. We will only rely on the legitimate interests of a third party or us when legitimate interests do not override your rights and interests.
Vital Interests: In cases where processing personal data is necessary to protect someone’s life or physical integrity, we may rely on the legal basis of vital interests. For example, in emergency situations or medical incidents during events.

Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

service providers and vendors who assist us in event organisation, visa processing, and other necessary tasks;
talent agencies, management companies, or other authorised representatives involved in your engagement with us;
government authorities, immigration agencies, and other regulatory bodies for obtaining visas and complying with legal requirements;
event venues for logistical purposes, such as setting up the event space, ensuring security measures, and managing on-site services;
travel and accommodation providers such as airlines, hotels, transportation companies, and other travel and accommodation providers to facilitate bookings, manage itineraries, and ensure a smooth travel experience for performers and participants;
sponsors and partners involved in the event for marketing and promotional purposes, collaboration on event-related activities, or fulfilling contractual obligations;
ticketing platforms and ticketing platforms or ticketing service providers to process ticket sales, handle customer inquiries, and manage entry to the event;
marketing and advertising agencies to facilitate promotional campaigns, target specific audiences, and measure the effectiveness of marketing efforts;
payment processors or financial institutions to facilitate payments and reimbursements;
data analytics providers in order to improve event planning, marketing strategies, and customer experiences;
legal advisors, auditors, and other professionals providing services to us; and
other TEG group companies.

Last updated 1 June 2023