This privacy notice is designed to help you understand how and why North Yorkshire Council, processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK general data protection regulation (UK GDPR). Scarborough Spa is an entertainment and conferencing venue which offers a variety of services including banqueting, business events, room hire, weddings, cinema and theatre.
The council has appointed Veritau to be its data protection officer. Their contact details are:
Information Governance Office
Email: [email protected]
Tel: 01904 552848
The personal data we collect from you can include:
name and address
contact details (email address and phone number)
date of birth
your purchasing activity
your credit, or debit card or other payment information
information you give us when you contact our customer services team or when you sign up for any of our membership activities
information relating to your social media accounts when you engage with content on our social media platform or website (for example by tagging us in a post or liking/commenting on our content)
call recordings (you will be informed if your call is being recorded or monitored upon contacting the Council)
If you are using a mobile device and shopping with us online or browsing our website, we may collect:
IP address or other device identifier
browser type and version,
time zone setting
browser plug-in types and versions
operating system and platform
other portable device information
Also, if your electronic device has Wi-Fi enabled or you connect to the venue’s Wi-Fi, we may collect your MAC address and location data whilst you are within our venues or immediately within its perimeters.
Cookies are used on our websites and our mobile apps.
Our websites may contain links to other third-party websites that are not operated by the Council. The Council is not responsible for the content, security, or privacy practices of those third-party websites. Please view the privacy and cookie policies displayed on those third-party websites.
We collect your personal information for the following reasons:
for the delivery of service, you have requested e.g., to process room hire bookings
to communicate with you regarding the products and services that you purchase and respond to your questions and comments
to obtain customer feedback e.g., via surveys to help us measure customer satisfaction and improve our services and products.
to measure the effectiveness of our marketing and advertising campaigns by identifying usage trends and monitoring website activity
in some instances we will send specific offers to our customers based on their attendances or on a special occasion such as when we know it's your birthday
to fulfil our legal and compliance-related obligations
Where you have requested, we will provide you with marketing material via SMS, post and email that may be of interest to you. This may include information about our campaign activities, and promotions.
We rely on your consent to send direct SMS, postal and email marketing messages. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your marketing preferences at any time by contacting us via email or in writing.
You obtain information your personal information:
when you apply for our products and services
when you talk to us on the phone or at one of our reception areas
when you use our websites, mobile device apps
via email and letters
in customer surveys
if you take part in our consultations, questionnaires or promotions
when you engage with us on social media (by mentioning/tagging us or by contacting us directly)
We may need to pass your information to third parties who provide a service on our behalf under the council’s instruction.
Where you have uploaded product reviews, comments or content to our websites or services and made them publicly visible, we may link to, publish, or publicise these materials elsewhere including in our own advertisements.
Hard copy correspondence
E-marketing data base and newsletters
Until requested to be removed by the data subject
Social media competitions
Until the end of the relationship
E- marketing campaigns for business customers
3 years post campaign
North Yorkshire Council relies on the following lawful basis to process your personal data:
UK GDPR Article 6 (1)(a)- the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
UK GDPR Article 6 (1)(b)- processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. For example, room hire or event bookings.
UK GDPR Article 6 (1)(f)- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.