The last update was on 27 Oct 2023.

What data do we collect?

The personal data we collect from you may include the following:

  • Questions, queries, or feedback you leave, including your email address if you contact Drawing University or sign up for our email alerts
  • Your name
  • Telephone numbers
  • How you use our emails – for example, whether you open them and which links you click on
  • Your Internet Protocol (IP) address, and details of which version of web browser you used
  • Information on how you use the site, using cookies and page tagging techniques

Third-party Cookies

We use third-party cookies, including Google Analytics, to collect information about how you use ulsterfestival.com. This includes IP addresses. The data is anonymized before being used for analytics processing.

This includes anonymized information about:

  • The pages you visit on ulsterfestival.com
  • How long you spend on each ulsterfestival.com page
  • How you got to the site
  • What you click on while you’re visiting the site

We do not store your personal information through analytics information (for example your name or address).

We will not identify you through analytics information, and we will not combine analytics information with other data sets in a way that would identify who you are.

We continuously test and monitor our data protection controls to ensure they’re effective and detect any weaknesses.


Why we need your data

We collect information to see how you use the site and our digital services.

We do this to help:

  • Make sure the site is meeting the needs of its users
  • Make improvements, for example, improving site search

We also collect data in order to:

  • Gather feedback to improve our services, for example, our email alerts
  • Respond to any feedback you send us, if you’ve asked us to
  • Send email alerts to users who request them
  • Provide you with information about Drawing University courses and services
  • Monitor the use of the site to identify security threats

Our legal basis for processing your data

The legal basis for processing personal data in relation to site security is our legitimate interests, and the legitimate interests of our users, in ensuring the security and integrity of ulsterfestival.com.

The legal basis for processing anonymized cookies data such as data for Google Analytics is your consent.

The legal basis for processing all other personal data is that it’s necessary:

  • To perform a task in the public interest
  • In the exercise of our functions

What we do with your data

The data we collect may be shared with other agencies and public bodies.

We will not:

  • Sell or rent your data to third parties
  • Share your data with third parties for marketing purposes
  • Use your data in analytics

We only allow 3rd parties to handle your data if we are satisfied they have taken appropriate measures to protect your data.  We also impose contractual obligations to ensure they protect your personal data.

We will share your data if we are required to do so by law – for example, by court order, or to prevent fraud or other crime.


How long we keep your data

We will only retain your personal data for as long as:

  • It is needed for the purposes set out in this document
  • The law requires us to

Children’s privacy protection

Our services are not designed for, or intentionally targeted at, children 13 years of age or younger.

We do not intentionally collect or maintain data about anyone under the age of 13.


Where your data is processed and stored

We design, build, and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored.

All personal data is stored in the European Economic Area (EEA).

Data collected by cookies and Google Analytics may be transferred outside the EEA for processing.


How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure.

We have set up systems and processes to prevent unauthorized access or disclosure of your data – for example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.


Your rights

You have the right to request:

  • Information about how your personal data is processed
  • A copy of that personal data
  • Anything inaccurate in your personal data is corrected immediately

You can also:

  • Raise an objection about how your personal data is processed
  • Request that your personal data be erased if there is no longer a justification for it
  • Ask that the processing of your personal data is restricted in certain circumstances

If you have any of these requests, get in contact with our Data Protection Officer.


Links to other websites

ulsterfestival.com contains links to other websites.

This privacy notice only applies to ulsterfestival.com.

Following a link to another website

If you go to another website from this one, read the privacy policy on that website to find out what it does with your information.

Following a link to ulsterfestival.com from another website

If you come to ulsterfestival.com from another website, we may receive personal information from the other website. You should read the privacy policy of the website you came from to find out more about this.


Contact us or make a complaint

Contact the Data Protection Officer if you:

  • Have a question about anything in this privacy notice
  • Think that your personal data has been misused or mishandled

The data protection officer can be contacted through our contact form.


Changes to this policy

We may change this privacy policy.

In that case, the “last updated” date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately. If these changes affect how your personal data is processed, Drawing University will take reasonable steps to let you know.

IMPORTANT:
Throughout this privacy policy, references to “ulsterfestival.com” or “Drawing University” are used interchangeably and refer to the same entity.