Nantwich Museums Privacy Statement

www.natwichmuseum.org.uk is provided by Nantwich Museum, Pillory Street, Nantwich, CW5 5BQ.

The museum trustees act as the data controller for pages starting www.nantwichmuseum.org.uk

The data controller determines how and why personal data is processed.

What data we collect

The personal data we collect from you includes:

• questions, queries or feedback you leave, including your email address if you contact nantwichmuseum.org.uk
• your postcode and address if you use a nantwichmuseum.org.uk service that includes a postcode or address lookup function (such as delivery address look up)
• your email address and subscription preferences when you sign up to our email newsletter

Where you provide your consent, we use Google Analytics cookies to collect information about how you use nantwichmuseum.org.uk. This includes IP addresses.

Google Analytics processes information about:

• the pages you visit on www.natwichmuseum.org.uk
• how long you spend on each www.natwichmuseum.org.uk
• how you got to the site
• what you click on while you’re visiting the site

We make sure you cannot be directly identified by Google Analytics data. We do this by using Google Analytics’ IP address anonymisation feature and by removing any other personal data from the titles or URLs of the pages you visit.

We will not combine analytics information with other data sets in a way that would directly identify who you are.

Why we need your data

We collect your personal data in order to:

• gather feedback to improve our services
• respond to any feedback you send us, if you’ve asked us to
• send email newsletters to users who request them
• allow you to access our on-line shop and make transactions
• monitor use of the site to identify security threats
• monitor the performance of the site to identify inefficiencies and technical errors

Our legal basis for processing your data

The legal basis for processing personal data in relation to site security is our legitimate interests, and the legitimate interests of our users, in ensuring the security and integrity of www.nantwichmuseum.org.uk.

The legal basis for processing all other personal data is that it’s necessary to perform a task in the public interest.

What we do with your data

We will share your data if we are required to do so by law - for example, by court order, or to prevent fraud or other crime.

The data we collect with Google Analytics cookies is transferred and stored with Google where we analyse it with Google Analytics software (Universal Analytics). We do not allow Google to use or share this data for their own purposes.

We will not:

• sell or rent your data to third parties
• share your data with third parties for marketing purposes

How long we keep your data

We will only retain your personal data for as long as it is needed for the purposes set out in this document or for as long as the law requires us to.

We will:

• keep your email data until you unsubscribe
• keep your feedback data for 2 years
• delete access log data which contain your IP address after 120 days

Children’s privacy protection

Our services are not designed for, or intentionally targeted at, children 13 years of age or younger. We do not intentionally collect or maintain data about anyone under the age of 13.

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored.

All personal data is stored in the European Economic Area (EEA). Data collected by Google Analytics may be transferred outside the EEA for processing.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data - for example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

Your rights

You have the right to request:

• information about how your personal data is processed
• a copy of that personal data
• that anything inaccurate in your personal data is corrected immediately

You can also:

• raise an objection about how your personal data is processed

• request that your personal data is erased if there is no longer a justification for it

• ask that the processing of your personal data is restricted in certain circumstances

  If you have any of these requests, get in contact with the museum.