This Privacy Statement describes how your personal data is processed and protected when you consent to receive tailored electronic marketing and news updates from Institute for Sound and Music (“we” or “us”). Such communication may for example consist of newsletters, event info, invitations and information about the organisation. By consenting to receive electronic marketing from us, you confirm that you have been informed about how we process your personal data and that you consent to the processing of your personal data for the purposes set out in the box as further described in this Privacy Statement.
1. Who is responsible for the processing?
Institute for Sound and Music is the controller of the personal data that you provide to us, and is responsible for processing this data in accordance with local data protection law, implementing the EU Data Protection Directive 95/46/EC and in accordance with the General Data Protection Regulation 2016/679 (GDPR) from the date it applies.
2. How and why we process personal data
We collect personal data from you when you fill in a newsletter signup form, make a donation or contact us to volunteer to help at one of our events. The personal data we process in this regard is your name, address, e-mail, telephone number and any background/CV information provided (if volunteering).
We collect this data for sending you tailored marketing, sending out newsletters, campaigns and invitations to events, meetings. The legal basis on which we rely on to process your personal data for this purpose is your consent, that you have a right to withdraw at any time by contacting us at [email protected].
We will only share your personal data with our third-party service providers that perform business operations or work on our behalf and on our instructions as data processors for the purposes indicated in this Privacy Statement and in accordance with the relevant data processing agreement. This includes Stripe and Paypal for donations and Typeform for contact form information sent via our website.
3. How long is your personal data stored?
We store your personal data for as long as you are active with us (eg. an ISM member, volunteer or are in contact with our team), or up to 3 years after lack of contact or any other communication, unless we are required by law to retain the data for a longer period. Following that, your personal data is deleted.
4. Your rights
You have the right to at any time to get access to the personal data we have registered about you by contact us at [email protected]. If the personal data we keep about you are wrong, incorrect or irrelevant you can request to have them rectified or deleted. You also have the right to withdraw your consent at any time and/or object to profiling, by contacting us at [email protected]
In order to ensure that we give access to the correct person, we require that the access request is signed by you and filed through mail to our postal address or that identity is verified by other means.
5. Where we store personal data
We store your personal data within the EU/EEA and we use an external service provider established in the USA for processing your data on our behalf. The legal basis for such transfers is the processor’s binding corporate rules and EU-US Privacy Shield.
6. Information security
We have implemented appropriate technical and organizational measures to protect your personal data from loss, misuse or alteration. We limit access to personal data to personnel that have a clear business need.
7. Changes to this Privacy Statement
We will notify you through e-mail or in another clear way if we make and fundamental changes to this Privacy Statement or changes that may be relevant for and affect your rights, prior to making such changes. Any such change will be published in this Privacy Statement. If you do no longer wish to be registered with us following such changes, you can unregister by contact us at [email protected].
8. Information about the controller
Head of Privacy,
Institute for Sound & Music e.V.