PRIVACY POLICY
EXPLANATION OF PRIVACY POLICY NEED AND PURPOSE
Movies @ Cinemas is subject to certain laws that regulate how Movies @ Cinemas can collect, store, use, or otherwise process your personal data. At Movies @ Cinemas we value the importance of protecting privacy and personal data. While we have to reserve the right to update this privacy policy at any time without prior notice, our data processing will always remain fair, transparent, and lawful. This policy is Movies @ Cinemas public affirmation of how we intend to fulfil that goal.
ORGANISATION IDENTITY
Movies @ Cinemas – Movies @ Dundrum/Swords/Gorey/Dungarvan are company’s located at Dundrum Town Centre, Sandyford Road, Dundrum, Dublin 16, and Pavilions Shopping Centre, Swords, Dublin, and Courtown Road, Gorey, Co. Wexford, and High street, Dungarvan Co Waterford.
Email: [email protected]
The assigned Data Protection Controller is Graham Spurling.
SCOPE
This policy only concerns itself with the processing of personal data. The types of personal data that Movies @ Cinemas may process will vary and depend on the interactions that a person has with Movies @ Cinemas. Specific policies may apply to your relationship with Movies @ Cinemas in addition to this general statement of policy, for example if you are an employee with specific policies to your role. Those specific policies will take precedence over any conflicting provision in this Privacy Policy. If you are unsure or would like to ask what policies we consider apply to your relationship with Movies @ Cinemas please send an email to our data protection officer at: [email protected].
DEFINITIONS
Personal data is data that relates to an identified or identifiable person. If data does not permit us or another party to identify a person, directly or indirectly, then it is not personal data. The law does not require, and it is not Movies @ Cinemas practice, to acquire extra, unnecessary information solely for the purpose of identifying persons.
When this policy talks of processing, it means almost anything that can be done with personal data: collecting, storing, analysing, communicating, et cetera. This includes processing done with or without computers.
For purposes of this policy, the controller is Movies @ Cinemas. A processor is any vendor or service provider who processes personal data on behalf of Movies @ Cinemas.
Consent is a clear, unambiguous action by a person that they agree to a specific processing. In order for this consent to be valid, the person consenting has to understand the purpose, nature, and conditions of the processing, including, for example, if Movies @ Cinemas will be getting outside help to process personal data.
GDPR means the EU General Data Protection Regulation 2016/679 (as amended and replaced from time to time)
Sensitive Data means any personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation.
DATA PROTECTION PRINCIPLES
Movies @ Cinemas commits itself to operating on the basis of the following privacy principles:
- Lawfulness, Fairness, and Transparency –
- Beyond upholding your legal rights, our aim is to provide our services fairly to you, and to be transparent in the way we process your data.
- We will always provide you with a clear statement of the purpose behind a data processing.
- We will always provide you with a clear statement on how that processing is compatible with your legal rights, also known as the legal or lawful basis for processing.
- One common example of a lawful basis is where processing is necessary for a service or contract that you have requested. Another common basis is where we have a legal obligation to process your data, such as to protect against fraud. Your consent can sometimes also be a legal basis for processing.
Purpose limitation:
- We aim to collect your data only for specific, limited purposes that we will specify to you in advance as clearly as we can.
- Moreover, in the event we ever rearrange how we do things, we aim never to process your data in a way that is incompatible with the original purposes.
Data Minimisation:
- We try only to process the personal data that we really need –no more and no less.
Accuracy:
- We will try to correct or erase, depending on what is appropriate in the context, personal data that are inaccurate.
Storage Limitation:
- No one needs or wants their data floating around for eternity, so we try to delete data when we no longer need it.
Integrity and Confidentiality:
- We protect your data with the appropriate technologies and business practices. We guard against unauthorised or unlawful processing, and against accidental loss, destruction, or damage to your data.
Accountability:
- We aim to document, as necessary and appropriate, the things we do for your protection.
- You also have a number of rights that you can use to check up on us and hold us accountable.
- Finally, in addition to holding ourselves accountable, we also demand that our processors commit themselves to the protections you deserve. We aim to be transparent in our choice of processors so that you can hold them accountable too.
Booking Policy :
The Movies @ Cinemas Group highly values the privacy of our customers. This policy is intended to explain to you how we use any information that you may provide to us when visiting our website.
When purchasing tickets online a customer is asked for the following information:
- Name
- Phone Number
- Email Address
- Credit card details
If you choose to withhold any personal data requested it will not be possible to complete a transaction on our website.
The primary purpose of collecting your email address is so we can email your movie tickets directly to you. Your email and phone number are also collected for the purpose of notification if changes to schedule were to occur or if there was some other problem with your booking. Movies @ Cinemas use a third-party payment service to process online transactions. We do not store full card details. Information collected through booking and registration will not be sold to third parties for any purpose without your express consent. This information is automatically deleted once the information is no longer necessary.
WIFI
Where you are using a mobile device whilst in Movies @ Cinemas with its Wi-Fi capability switched on or have access to our free in-house Wi-Fi. We may additionally collect your MAC address and location data whilst you are within Movies @ Cinemas or immediately within its perimeters. If you do not want us to track your device or use your information in this way, please turn off the Wi-Fi capability on your phone or other electronic device within your settings.
As a function of offering free Wi-Fi, your devices MAC address is visible and is recorded within the system. We do not process this data or attempt to connect it to a user for any purpose. These MAC address and connection times are kept for 30 days for statistical reasons. MAC addresses and time schedules are deleted after 30 days.
RIGHTS TO OBJECT OR RESTRICT PROCESSING
You enjoy certain rights and privileges too that are important enough that they get their own section. We’d especially like to draw your attention to your rights to object and to restrict processing.
RIGHT TO OBJECT
European law provides you with a right to object. This means you have an absolute right to tell us to stop processing your personal data for direct marketing.
Where the processing is for purposes other than direct marketing, you should explain to us what it is you’re objecting to and why it is that you’re objecting. Movies @ Cinemas is then entitled at law to consider whether any legitimate grounds override those objections. If not, then Movies @ Cinemas will cease that processing right away.
RIGHT TO RESTRICT PROCESSING
European law also provides you with a right called restriction of processing. If objection is like a stop button, then restriction of processing is the pause button: It lets you put a pause on all or certain types of processing.
RIGHT TO WITHDRAW CONSENT AT ANY TIME
For any processing that is based on your consent, you can withdraw that consent at any time. This means that we will stop that processing, unless there is another basis to continue processing, such as a legal obligation. Withdrawing consent does not affect any processing that has already taken place.
FURTHER RIGHTS
You have further legal rights that Movies @ Cinemas must abide by. Here’s a listing of rights that you should keep in mind:
- Rights to Information and Access
- Right to correct inaccurate data, or supplement incomplete data
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to avoid automated individual decision-making
RIGHTS TO INFORMATION AND ACCESS
- “Who?” You have a legal right to know who we are, who our representative(s) is/are, who our data protection officer is, and contact information for each.
- “Who else??” You have the right to know who, if anyone will receive your information from us. If we didn’t get your personal data from you, we will tell you where we got it.
- “What are you doing?” You have the right to know in advance the purposes behind our data processing. Moreover, you have the legal right to know in advance the legal basis for our processing. We will always tell you where processing is necessary for our legitimate interests.
- “Why should I?” We will always tell you whether providing your personal data is voluntary or obligatory, and what would be the result if you choose not to provide your personal data. In particular, we will tell you if you are legally or contractually required to provide us with personal data.
- “Where?” Not all jurisdictions or countries provide the same legal protections for personal data and privacy as the European Union and its Member States. Therefore, you have the right to know if your data is being sent outside the EU and if so, what appropriate safeguards have been put in place especially to protect your data protection and privacy rights. Whenever this arises, we’ll tell you how to get a copy of the protections in place for your personal data. You have a right to receive other information too. We’ll always provide the following specifics to you at the appropriate, relevant time, but here’s a list of what you have a right to receive:
- “How long?” You have a right to know how long we’ll keep your data. If we can’t state a hard number, then we’ll tell you the criteria that will determine when we will delete your personal data.
- “What information does Movies @ Cinemas have?” You have a right to hear what it is that we have about you. If you see anything that needs correction or that you’d like deleted, please contact us through our Data Controller at [email protected]
- “I don’t consent.” If the basis for our processing is your consent, you have a right to withdraw that consent at any time. Withdrawing consent does not affect any processing we’ve already undertaken. It also doesn’t have any effect where processing is not based on your consent.
- “I’m still unhappy…” If you think your rights have been violated, you have a right to file a complaint with Ireland’s Data Protection Commissioner.
Right to correct inaccurate data, or supplement incomplete data:
We will take every reasonable step to ensure the personal data we process are accurate and up to date. You have the right to inform us of an inaccuracy in data that we process and expect that we will correct it without undue delay. Likewise, if you find that the data we’re processing is incomplete considering the purposes of the processing, you have to right to submit supplementary information. Depending on the circumstances, we might have to ask for some verification of your identity. We’ll do our best to keep those questions to a minimum and to avoid asking for new personal data we don’t already have.
Right to Erasure:
In many cases, you have the right to have your personal data deleted. For more information, email our Data Controller at [email protected]
DATA PORTABILITY
Right to Data Portability
We understand that sometimes you’ll need to take your data with you. At your request, we’ll provide you with a transferable copy of your data or send it directly (if possible) to your designated recipient. To make this request, please get in touch with the Data Controller at [email protected]
[NB: This only applies where the lawful basis was either consent or performance of a contract and processing was automated]
Right to Avoid Automated Individual Decision-Making:
At Movies @ Cinemas, all decisions that could affect your rights are human-made! While we use computers to help us in our work, all decisions are made by real people.
EXERCISING YOUR RIGHTS
The easiest way for you to exercise the rights above is to contact our Data Controller directly via email. Let our Data Controller know, if possible, what it is that you’re looking for, and what it is that you’d like us to do. If you have multiple requests, please do make sure you state them all clearly so we can act on them all.
We instruct all our employees to identify and appropriately escalate what appear to be subject requests based on the above rights. Employees should usually escalate requests to their Managers, who will be in touch with the Data Controller. The Data Controller may or may not require the assistance of legal advice.
SOURCES OF INFORMATION
We process the following information:
- Information you give us
- Information your computer shares with us
- Information from third party sources
Information you give us:
There are a number of ways that you can provide information to us for processing: When you subscribe to our newsletter, send us any sort of message (text, email, post), or ring us on the phone, you might provide us with information like:
- Your identity, including name and other information like mailing address
- Your credit card information, such as the card number, security code, billing address, and bank or issuer details
We will always process your information according to the privacy principles we explained above. In particular, we would like to say again that all our processing is limited to the specific purpose that we tell you at the time we collect your data, and is only stored for as long as is strictly necessary.
Information your computer shares with us:
In order for computers to be able to talk to each other, they absolutely have to disclose some minimum information. This can include technical information or practical information.
- Technical information means data like your IP address, browser type and version, any browser plug-ins, your time zone and language settings, any login information, and your operating system
- Practical information means information like whether you open or respond to our emails, whether you came to our website by clicking on a link at a different website, products or services you searched, browsed, or purchased.
Some of these data are necessary for us to run our website or to respond to your requests, like ticket bookings. Other data are a huge help to us in providing you with better services and maintaining a well-run company. We will always tell you what is necessary and what is voluntary.
Information other parties give us:
Sometimes we receive information about you from other parties. We process personal data received from those parties by the same rules and principles as personal data that you give us directly. Moreover, we will always tell you who gave us your information and their contact information. That way, if you prefer, you can instruct those parties to stop sharing your information (we don’t have the authority to do that).
HOW WE USE YOUR PERSONAL DATA
We and our partners process your data to do the following:
- Provide you with the information, products, or services that you have requested
- Fulfil our obligations to you, including:
- Provide you with Movies @ Cinemas services, products, and experiences
- Fulfil our legal obligations to you and financial or other institutions
- Improve and develop our business, such as our website, products, services, and experiences
- Provide you with information that we think would be of interest to you, sometimes pertaining to new products, services, and experiences
- To enforce our rights under our terms and conditions or any other contracts with you
- To prevent fraud
- To protect the rights, property, and safety of Movies @ Cinemas employees and customers or other relevant persons
- To respond, when necessary, to valid law enforcement requests
- To comply with applicable laws
- To gather your opinions and input
- To manage any situation where processing or other transactions are disputed
- To handle and resolve complaints
DATA SECURITY
We use the following technologies and measures to help protect your data:
- Encryption;
- Locked physical storage;
- Restricted access areas;
- Confidentiality agreements;
- Regular reviews for personal data we should delete because it’s outdated or unnecessary for the original purpose;
- Shredding and secure disposal;
While no system is absolutely secure, we take every reasonable precaution to protect your data and to respect your privacy.
CONFIDENTIALITY OF PERSONAL DATA
Movies @ Cinemas requires all its employees to maintain the confidentiality of the personal data they handle. Further, we expect you to voice or escalate any concerns you have about the way Movies @ Cinemas handles personal data. Data and privacy protections are only as strong as the weakest link, so we rely on a solid team effort!
RECIPIENTS
In order to provide the services and experiences that we offer, we rely on a little help from our partners to process your information, such as payments and communication. We will always tell you who those partners are for your specific situation, and what it is that they do. We will also always tell you whether or not they have any access to your personal data, or if they only handle your data in its encrypted form. Our contracts with these third parties require them to maintain the confidentiality of the personal information we provide to them, only act on our behalf and under our instructions, and not use information for purposes other than the product or service they’re providing to us or on our behalf.
REVIEW
We aim to review our data protection and privacy policies and procedures at least once a year, and more often if necessary to account for changes in the law or in the way we do things.
CCTV DISCLOSURE
Purpose of CCTV:
- The CCTV images are monitored for crime prevention and public safety only. Please contact [email protected] for any CCTV requests.
Retention period of CCTV footage:
- CCTV footage is stored for 30 days and then deleted.
Security arrangements for CCTV footage:
- CCTV footage is stored in a secure room with access only afforded to authorized personnel.
- A log of access is kept in order to ensure full security.
CCTV footage access request:
- Any person who is being recorded has the right to seek and be supplied with a copy of their own personal data from the footage
- The requester should email the Data Controller at [email protected] for any CCTV requests with the approximate time and the specific dates on which their image was recorded.
- Requesters should be aware that CCTV footage is deleted within one month of being recorded.
- If any other individuals are visible in the footage, their images would be redacted i.e. blur out the faces of other individuals.
- The access request will be responded within one month.
CCTV footage access request by state agencies (An Garda Síochána etc.):
- State agencies can request a copy of CCTV footage by contacting the Data Controller at [email protected].
- To expedite a request speedily in urgent situations, a verbal request may be sufficient; however any such verbal request must be followed by a formal written request on headed paper.
- A log of all An Garda Síochána will be kept by the Data Controller.
WEBSITE DATA PROCESSING
Here’s what we do on Movies @ Cinemas website:
1. Purpose – We collect and process your personal data to:
- Provide you with the services you seek from our website,
- Information you provide helps us respond to your customer service requests and support needs more efficiently.
- Improve our website and our services
- We may use the feedback you provide to improve our products and services.
- Ensure the security of our website.
- Improve our marketing.
- Send you periodic emails,
- We may use the email address to respond to enquiries, questions and other requests.
2. Relevant Cookies -Cookie/tracker types
- Required – Enable navigation and basic functionality
- Functional – Enable analysis of website usage to offer settings and personal experience
- Advertising – Enable us to assess the effectiveness of our marketing and advertising efforts. The cookies are from third-parties, but they are for our use, namely, to analyse and track site visit and sign-ups.
3. Categories of Personal Data
- Name
- Email Address
- Contact number
- Provided by data subject
- Without prior consent, will not make use of personal data such as IP address, device and browser information, or time and number of times you click on links or open emails.
4. Data Recipients
- We do not sell, or rent; do not share except as provided herein
- Social media features are governed by privacy policy of respective platforms
- Disclaim responsibility for links to third party references
- We respond to law enforcement requests, or to protect rights, personal property, or personal safety of Movies @ Cinemas, customers, or any third party.
5. Email Communication
- Only will email if you opt-in
- Can unsubscribe any time
- Can consent to let Movies @ Cinemas track success of email campaigns
- Limited access
- Limited purpose
6. Technical and Organisational Protection
- Use adequate physical and technological security measures to protect data
- Limit organisational use and access to personal data
- Provide instruction to employees on data protection and privacy best practices.
- Use reasonable efforts, but cannot guarantee absolute security.
7. Rights of data subjects:
- Withdraw Consent
- Information & Access
- The subject has the right to access their personal data at any time by sending an email to [email protected]
- Objection – The subject has the right to object to any of their personal data to be processed by Movies @ Cinemas.
- Data portability – The subject has the right to request Movies @ Cinemas to transfer their personal data to another controller in a plain simple electronic form by sending an email to [email protected]
8. Rights of state agency:
- A state agency can request to access subject data by sending an email to [email protected].
9. Contact Info
- General Contact: Movies @ Cinemas, Dundrum Town Centre, Sandyford, Dundrum, Dublin 16
Email address: [email protected]
- Data Controller: Graham Spurling, Movies @ Cinemas, Dundrum Town Centre, Sandyford, Dundrum, Dublin 16.