Privacy Policy
1. Introduction
At swanseabayfestival.com (“we”, “us”, or “our”), your privacy is of paramount importance. We are committed to maintaining the trust and confidence of our users and visitors by responsibly managing and protecting your personal data. This Privacy Policy outlines how we collect, use, store, disclose, and protect your information consistent with applicable data protection laws, including the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other relevant privacy regulations. By accessing or using our website, you acknowledge and accept the practices described in this Policy.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to information collected through our website, swanseabayfestival.com, and any associated services or platforms operated by us. For purposes of the GDPR and other data protection laws, we are the “data controller” of your personal data. This means we determine the purposes and means of processing your data.
3. Categories of Data Processed
We may collect and process the following categories of personal data:
a. Usage Data
Information about your interaction with our website such as IP addresses, browser type/version, pages visited, geographic location, time zone settings, referring URLs, clickstream data, and session duration.
b. Account Data
Personal information you provide when creating an account or purchasing tickets, including your first and last name, billing/shipping addresses, email address, and telephone number.
c. Profile Data
Data about your preferences, past ticket purchases, browsing behavior, and user-defined interests related to our events and associated services.
d. Communication Data
Records of your interactions with us, including email correspondence, customer support inquiries, survey responses, and other messages that you send to us.
e. Technical Data
Device information such as operating system, device name, browser plug-ins, screen resolution, and system configurations.
f. Transaction Data
Details of purchases, including payment amounts, order history, payment methods (e.g., last four digits of credit cards, timestamps), and delivery information.
g. Preference Data
Your expressed preferences regarding marketing communications, newsletter subscriptions, notification permissions, and interests in specific types of events or promotions.
4. Legal Bases for Processing
We rely on the following legal grounds for the processing of your personal data:
– Contractual Necessity: Processing is necessary to fulfill a contract with you (e.g., when you purchase tickets or register for events).
– Legitimate Interest: We may process data based on our legitimate business interests, such as analytics, security, marketing, and service improvement, provided these interests are not overridden by your rights and freedoms.
– Consent: Where legally required, we will seek your explicit consent before processing your data—for example, to send promotional emails or drop non-essential cookies.
– Legal Obligation: We may process data when obligated to comply with legal or regulatory requirements.
5. Your Rights
You have the following rights regarding your personal data, subject to applicable legal obligations and exceptions:
– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure: You may request deletion of your personal data, subject to retention obligations.
– Right to Restriction: You may request limited use of your data under certain conditions.
– Right to Data Portability: You may request that we transfer your data to another data controller in a structured, commonly used, and machine-readable format.
– Right to Object: You may object to processing based on legitimate interests, direct marketing, or automated profiling.
To exercise any of these rights, please contact us using the information provided in Section 13 below.
6. Security Measures
We maintain appropriate technical and organizational safeguards to protect your data. These include:
– Data encryption at rest and in transit
– Role-based access restrictions and authentication procedures
– Regular security audits and system monitoring
– Secure data backup and disaster recovery protocols
– Privacy and security training for our staff and contractors
While we make every reasonable effort to protect your personal information, no system can guarantee absolute security.
7. International Data Transfers
If and when your data is transferred outside the European Economic Area (EEA) or your local jurisdiction, we ensure that such transfers comply with applicable data protection laws. This may include using:
– Standard Contractual Clauses approved by the European Commission
– Data Privacy Framework certifications (as applicable)
– Other lawful mechanisms to ensure protection of your information
8. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected, unless legal obligations require a longer retention period. For example:
– Account and transactional data: retained for 6 years for accounting and tax purposes.
– Communication data: retained for 2 years to manage customer support and complaints.
– Marketing data: retained until you withdraw consent or unsubscribe, up to a maximum of 2 years.
– Cookie data: retained based on cookie type (see Section 9) and user preferences.
Once retention periods expire, personal data is securely erased or anonymized.
9. Cookies and Similar Technologies
We use cookies and similar technologies to enhance user experience and analyze website usage. These include:
– Essential Cookies: Required for basic functionality such as navigation and ticket purchasing.
– Functional Cookies: Enable features such as remembering your preferences and pre-filled forms.
– Analytics Cookies: Help us understand how visitors interact with swanseabayfestival.com, using tools like Google Analytics.
– Performance/Optimization Cookies: Improve load times, usability, and interactive site features.
10. Cookie Management and Compliance
In accordance with the GDPR and CCPA, we provide you with the ability to control your cookie preferences through a consent management platform (CMP) when accessing swanseabayfestival.com. At any time, you may:
– Update cookie settings via the footer link labelled “Cookie Settings”
– Withdraw your consent or object to non-essential cookies
– Enable browser-level blocking of cookies entirely (note that this may impair some site features)
Under the CCPA, California residents may also opt out of the “sale” or “sharing” of personal information in the broader sense, including behavioral advertising and analytics tools using cookie trackers.
11. Children’s Privacy
Our website is not targeted toward or intended for use by children under the age of 13. We do not knowingly collect personal data from children. If you believe that we may have inadvertently collected such data, please contact us immediately at [email protected] so we can take corrective action.
12. Changes to this Policy
We may update this Privacy Policy periodically to reflect legal, regulatory, or operational changes. Where material changes occur, we will provide reasonable notice using available communication methods, which may include on-site banners, direct email communications (if applicable), or updates through the website.
Continued use of swanseabayfestival.com after such changes constitutes your acceptance of the revised policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your rights under applicable privacy laws, please contact us at:
Email: [email protected]
We are committed to resolving inquiries and complaints in a timely and transparent manner and welcome all privacy-related feedback.
Compliance Assurance
We strive to adhere fully to global privacy standards including the GDPR and CCPA, and we are committed to safeguarding your personal data through transparency, user control, and lawful data processing. For further assistance, please reach out to us at [email protected].