Mosi-O-Tunya Gallery values the personal information you provide to us. This Data Privacy Notice explains how we protect your personal data and how you can control how we use your personal information. If you want to change the way in which we use your data or if you have a question about how your personal information is used please contact us using the methods below:
The information we collect
We only collect information that you give us in the course of us providing you with a service that you have requested, or when you ask us to contact you. Ordinarily we will only ask for the following information:
The legal basis for processing your personal data
In general the reason we will be processing your data is because it is necessary for the performance of a contract between us.
Cookies are small text files that we use to improve your experience of our website. The cookie file is generated by our website and is accepted and processed by your computer’s browser software. You can disable the cookies using your browser’s options, although if you do this you may not be able to use some of the services shown on this site.
Mosi-O-Tunya sets no third-party (tracking) cookies in your browser.
First-party cookies are those set by our server. Third-party cookies are set by a server outside our control. Mosi-O-Tunya only sets first-party cookies to store any custom preferences. First-party cookies are set by our web server and shared only to our domain.
First-Party cookies we set are:
How we use your data
We use the information you give us in the following ways:
Who we share your data with
We will not share your data to any other company without your prior consent. We will never sell your data to another company.
However, we do use the following companies for our business operations who process your data under our control:
We do not transfer any data outside the EEA.
Under some circumstances we may be required to disclose or share your information without your consent, for example if we are required to by the police, the courts, or for other legal reasons.
Keeping your information safe
We take data protection and data security very seriously. We have implemented a number of organisational and technical measures to ensure that only the people who need to see the data are allowed access and that the data is protected when stored and transmitted.
Our data retention policy details the length of time we keep the various types of personal data for. There are some statutory data retention periods that we must comply with, e.g. financial information must be kept of 6 years, but in general if we have not been in contact with you for 2 years, we shall delete the personal data we collected from you from our systems.
Data Subject Rights
There are a number of rights that a data subject has and here is information about them. You can exercise these rights by contacting us using the methods below:
Please note that we will always verify your identity before acceding to your request.
Right to Access (Subject Access Requests)
It is your right to know what personal data we hold about you. If you want to find out this information then please write or email us to make your request. Once we have verified that it was you who has made the request we shall respond within a month.
Right to Rectification
It is your right to ensure that the data we hold about you is accurate and up to date. If your contact details change then please let us know so that we can amend our records.
Right to Erasure
If you don’t want us to hold personal data about you anymore you can request for the data to be deleted. As long as there are not statutory reasons for us retaining the data for a certain period, e.g. financial transaction data must be retained for 6 years, then we will remove your data immediately we have verified that it was you who made this request.
Right to Restriction of Processing
If you believe that the data we hold about you is inaccurate, or that the processing is unlawful, and you do not want the personal data to be erased and / or we cannot erase the data for legal reasons, then you have the right to restrict the processing of your personal data to storage only.
Right to Data Portability
You have the right to request that we should send the personal data that we have collected about you to another controller. We shall comply by sending this information electronically.
Right to Object
If you don’t want us to process your personal data, including for marketing purposes, then please let us know. We shall comply unless there is a competing legitimate interest or another legal basis.
Right to Object to Automated Decision-making and Profiling
Currently we do not carry out any automated decision-making processing, or profiling.
What if you don’t want to hear from us?
If you decide that you don’t want to receive information from us anymore, send a request to stop emailing to firstname.lastname@example.org. We will then stop sending you emails immediately.
If you have a complaint please contact us at email@example.com who will deal with your request promptly. If you are still not satisfied with the way your complaint was handled, you can refer your complaint to UK Information Commissioner’s Office. https://ico.org.uk/concerns/
We review this Data Privacy Notice regularly. This version was uploaded on 6th October 2021.
Join our mailing list to be the first to hear about new exhibitions, upcoming gallery events and artwork for sale.