How we use your information
Privacy notice for Arts Facilities and Galleries
The proper handling of personal information by Carmarthenshire County Council is very important to the delivery of our services and maintaining public confidence.
Personal data is any information that relates to a person who can be directly or indirectly identified from the information. The terms ‘information’ and ‘personal data’ are used throughout this privacy notice and have the same meaning.
To ensure that the Council treats personal information correctly, we seek to adhere in full to the requirements of Data Protection legislation.
This privacy notice has therefore been produced to explain as clearly as possible what we do with your personal data.
1. The purposes for which we use your personal data
The information we collect about you will be used for the purposes of:
- Providing you with an online shop and retail at Oriel Myrddin gallery.
The legal basis for the processing of personal data in relation to these purposes is to exercise our authority under Section 12 of the Public Libraries and Museums Act 1964, under which the Council has a discretionary power to maintain museums and art galleries
2. What type of information do we use?
We collect the following types of personal data about you to deliver this service:
Our customers:
- Name
- Address
- Email address
- Telephone number
- Bank/payment details
4. Transferring your information abroad
We use Microsoft Office 365 to process our electronic documents under the terms of a strict agreement, which safeguards your information. This personal data is hosted on servers outside of the UK, but only in EU countries which are subject to the General Data Protection Regulation.
We don’t transfer any other information about you outside of the UK.
5. Who has access to your information?
We use a local company, SCL Internet, to host the personal data that customers provide us via our online shop. SCL has access to your name, address, telephone number and email address.
Your payment details are also processed by our payment provider, Capita Pay360 and Royal Mail (who may deliver your products to you).
6. How long we will keep your information
We will keep your information while you are an active customer and for two years after your last contact with us, in accordance with Carmarthenshire County Council’s Retention Guidelines.
7. Your Data Protection rights
You have the right to:
- Obtain access to the personal data that Carmarthenshire Council is processing about you – you can make a request by using the contact details provided below
- Have any inaccurate or incomplete information rectified (corrected)
- Withdraw your consent to processing, where this is the only basis for the processing
Make a complaint to the Information Commissioner’s Office (ICO), the independent body in the UK which protects information rights.
In some circumstances, you may have the right to:
- Object to the processing of your personal information
- The erasure of your personal data
- Restrict the processing of your personal information
- Data portability
8. Contact details
For more information regarding this privacy notice and your rights, please contact:
Data Protection Officer,
Carmarthenshire County Council,
County Hall,
Carmarthen,
SA31 1JP
Email: dataprotection@carmarthenshire.gov.uk
Tel: 01267 224127
Contact details for the Information Commissioner’s Office along with further guidance on Data Protection legislation can be found on the ICO website: