Privacy statement

Privacy statement Stichting Theaterfestival Boulevard ’s-Hertogenbosch
Our organization – Stichting Theaterfestival Boulevard, part of Stichting Bosse Nova and located at St. Josephstraat 18 in ‘s-Hertogenbosch – processes personal data. This privacy policy describes which data we process, how we guarantee your privacy as a customer and how and why we use cookies. Unfortunately, we cannot avoid using a number of legal terms in this text, but we try to describe everything as clearly as possible. Let it be clear: all data that we collect is for use by Theaterfestival Boulevard. We do not make them available to third parties, unless we are legally obliged to do so, for example on the basis of a court order or judgment.

If you have any questions, please contact us via privacy@festivalboulevard.nl.

1. What customer data do we process
When you visit our website, we place cookies. See point 12 for more information about cookies. When you buy a ticket from us as a customer, we ask you for the following data:
– Name
– Address, postcode, city and country
– Email address
– Phone number
– Date of birth (optional)

You can choose to buy tickets with or without an account. Without an account, you only order your ticket(s). With an account, you can always access your e-tickets and change the settings. You can also choose to sign up for one or more newsletters.

We store your data in the database of our ticketing provider, Ticketworks. If you have ordered tickets online, information about the payment method is stored, such as a bank account number, credit card or gift card. This allows us to quickly refund your purchase amount in the event of a cancellation.

In addition to customer data, we manage data from relationships, such as business relationships and press. Relationships are managed in our relationship database. 

2. Purposes and legal grounds for processing
We would like to make it clear to you why we process the personal data mentioned, and what we do with your data:

• Name: this data is necessary for the execution of the agreement. Without a name it is not possible to place an order.
• Address, postcode and city: this data is necessary for the execution of the agreement, for example when you want to receive ticket(s) by post at home. In addition, they are necessary for a legitimate interest, to be able to test to what extent we meet the assignment of our sponsors to reach as broad and diverse an audience as possible. We use your postcode and city anonymously in visitor analyses.
  
  If you have indicated that you want to receive information and printed matter, we will send it to you, based on the basis of consent. In addition, it may happen that we send our loyal customers a postal mailing based on the basis of legitimate interest. As a loyal customer, we assume that you appreciate information, which we carefully compile based on your preferences. 
• Email address: this information is necessary for the execution of the agreement. We use your email address to send the e-ticket(s) and to send you a service email about the performance you are going to visit. You can also access your account on our website via your email address, if you have chosen to create an account. For some performances, we send an evaluation email after the event. We do this on the basis of legitimate interest. Evaluating and processing feedback from our visitors is very important to us. If you have registered for our newsletters, we will send you email newsletters based on your preferences and/or visit history on the basis of consent. You can easily withdraw this consent by unsubscribing at the bottom of the relevant newsletter.
• Telephone number: this information is necessary for the execution of the agreement. We can use your telephone number in the event of changes, cancellations or calamities at the performance(s) you have booked. 
• Date of birth: this data is necessary for the promotion of a legitimate interest, to be able to test to what extent we meet the mandate of our sponsors to reach as broad and diverse an audience as possible. We use your date of birth anonymously in visitor analyses.
   

3. How long do we store your data?
We store data from ticket buyers in our database for 7 years. We do this because this is the only way we can make anonymised visitor analyses and trend analyses. In addition to a group of regular customers, many customers only visit us once every few years. Only by being able to analyse over a longer period of time can we map out visitor analyses and trends, which we need to be able to determine to what extent we are meeting the assignment of our funding to reach as broad and diverse an audience as possible.

4. Buying tickets anonymously
If, despite our careful handling of your data, you do not want to end up in our database, we offer you the option of buying tickets anonymously at the Tickets & Info box office during the festival. If you choose this option, we cannot inform you about changes, cancellations or calamities regarding your visit. If you lose your tickets, we unfortunately cannot do anything for you in this case either. You can find the opening hours of the box office in the frequently asked questions (FAQ).

5. Friend, partner or donor
If you are a friend, partner or donor, we need the following:

• Your name and address details
• Email address
• IBAN

We store this information in the designated Boulevard system, in contracts and in the financial administration. The information is not shared with third parties, with the exception of the party that is engaged for the administrative processing.

6. Applicants of Boulevard
If you apply to Boulevard, we will process the following data from you:

• Name
• Address
• Date of birth
• Telephone number
• E-mail address
• Education
• Work experience
• References
• Contact and telephone notes

The data is stored in the Boulevard mail system. If you do not come to work for us, we will delete this data 4 weeks after our last contact, unless we have made a different arrangement with you.

If you become an employee of ours, we will complement the data to create a full personnel file. This includes:

• Citizen service number
• Copy of identification
• Copy of work permit, residence permit
• Possibly copies of policies, diplomas and other documents
• Employment contract
• Assessments
• Vacation and absence registration

You are responsible for the accuracy and relevance of the data you provide.

The data is stored in your personnel file, to which only the authorized employee and you have access. We share data only with contracted or obligated third parties, unless we are legally obliged to do so, for example on the basis of a court order or judgment. We only record special personal data if this is necessary to comply with our legal obligations or if you have given us permission to do so.

7. Forms on www.festivalboulevard.nl
On various parts of this website, forms may be placed that request personal data. These personal data are stored in Elocus CMS of TheCre8ion.Lab (on Dutch servers under Dutch jurisdiction) and are only downloaded by the employee of Theaterfestival Boulevard who must process the data. After downloading, the form is stored on a shielded and secured server. The forms can only be downloaded by selected employees of Theaterfestival Boulevard. All employees of the festival have a confidentiality obligation in their contract.

The data is only used in accordance with the stated purpose upon registration. In addition to the data that the visitor enters themselves, the time, the IP address and the relevant page are stored to provide more context for the form submission.

8. Rights of those involved
We would like to point out your rights when it comes to the processing of personal data in our database:

• Right to information: you have the right to ask us whether your personal data is being processed.
• Right to access: you have the right to view your data.
• Right to correction: you have the right to submit a request to correct your data.
• Right to object or limit or delete personal data: you have the right to ask us to delete your data from our database. This right only applies if the data is no longer necessary for the performance of the agreement. For example, if you visit a concert or performance with us, your data will remain in our database until the visit. We will then anonymize your data in accordance with your request and delete all traceable personal data.
• Right to pass on information (data portability): you have the right to have data made available in such a way that you can easily pass it on to another controller. 
• The right to file a complaint with the Dutch Data Protection Authority: you have the right to file a complaint via the website of the Dutch Data Protection Authority.

If you wish to exercise your rights as a data subject, please send us an email stating which right(s) you wish to exercise via privacy@festivalboulevard.nl. After receiving your message, we will respond to your request as soon as possible, but no later than the statutory period of four weeks.

9. Processor agreement
A processor agreement or cooperation agreement has been concluded with the parties with whom we collaborate when it comes to the processing of personal data. These agreements include, among other things, which party is responsible for the processing and how to act in the event of a (possible) data leak. This concerns parties such as:

• Supplier of ticket sales software and related hosting
• Hosting provider of our own website
• Supplier of ERP system and related software hosting
• Payment platform

10. Sharing data with third parties
We share your data – in addition to the parties with whom we have a mutual processing or cooperation agreement – ​​with third parties only when you have given explicit permission to do so. In such a case, this will be explicitly stated.

11. Security measures
Our organization is constantly working to optimize the security of customer data. For example, our website can only be visited in a secure connection (HTTPS) and data storage and the server are managed according to ISO 27001 standards.

12. Data leaks
Although we handle personal data very carefully, it is possible that unauthorized persons gain access to personal data. In that case, we speak of a data leak. When a data leak has occurred, immediate action is taken based on the internal data leak protocol. If you are a data subject in this data leak and your privacy, rights or freedoms are at stake, we will inform you within 72 hours after the report has been made known to us.

13. Contact regarding privacy or data protection
If you have any questions, concerns or other comments regarding privacy or data protection, you can send an email to privacy@festivalboulevard.nl. An employee will contact you as soon as possible, but within the statutory period of 4 weeks.

14. Use of cameras
Boulevard or a media partner may make (or have made) image and/or sound recordings during the festival. Boulevard may use these recordings on the website or to promote the event via social media, such as Facebook, Instagram, YouTube, LinkedIn, X or Vimeo. In addition, the recordings may be used on the media channels of the media partner(s), including radio and/or television. The data will not be used for purposes other than those described above. Please contact Boulevard if you want to have a photo published online removed.

15. What are cookies?
Cookies are small text files that your browser stores when you use our website. By using cookies, we ensure, for example, that:

• You do not receive or have to enter the same information every time you place an order via our website;
• We can offer special functionalities such as the favourites list and the shopping cart;
• We can measure how our website is used and where we can improve it;

16. Types of cookies
We place standard functional or necessary cookies. These cookies ensure that our website functions. Think for example of functionalities such as the shopping cart and checkout.

With your permission we place:

• Analytical cookies: with analytical cookies we collect statistics about the use of our website with the help of Google Analytics. By measuring website usage we can continue to improve our website for the benefit of our users. The data is used anonymously (data sharing is disabled) and a processing agreement has been concluded with Google. All data is processed anonymously and encrypted and automatically deleted after 26 months.
• Other third-party cookies: sometimes we add extra functionality to our website, permanently or temporarily, to improve the experience. Think for example of integration with streaming or social media platforms. These platforms then place a cookie, with your permission.

You can manage your permission for these optional cookies during your first visit via the cookie popup. Also look at our cookie policy.

17. Adjust browser settings
If you do not want websites to be able to store cookies on your device, adjust your browser settings. You will then receive a warning before cookies are placed. You can also set your preferences so that your browser refuses specific cookies, such as those from third parties. More information about adjusting browser settings can be found on the website or manual of your browser.

We would like to point out that the necessary cookies must always be accepted in order to open the website properly. When you first visit the website, you can choose to accept only the necessary cookies or all cookies.

If you want to disable cookies from specific parties, you can do so via www.youronlinechoices.com.