Privacy Notice for Gallery Visitors

The Courtauld will only collect information that is necessary to run the Gallery, fulfil our obligations to you, and keep you informed about the Gallery and its activities. The personal information we collect may include:

• your name, title, gender, and date of birth;
• your email address, phone number, postal address, billing address, home address;
• (in the case of members of our Friends and/or Patrons’ membership schemes) any named joint members;family and spouse/partner details, relationships to other Courtauld supporters,  including other Patrons and Friends
• (in the case of gift membership purchases) the contact details of gift membership recipients;
• current interests and preferences;
• Contact preferences (email, post, etc.)
• feedback you may have submitted related to Gallery services and products;
• ticket purchase and event registration/attendance;
• product selections and purchases of goods or services;
• donations you have made to the Gallery or in support of Gallery activities;
• credit card or other payment information (we only store this for as long as we need to process payment);
• bank details for setting up a regular direct debit;
• Gift Aid declaration details;
• details of correspondence sent to you, or received from you;
• any other information provided by you to The Courtauld Institute of Art;
• images captured on film or photography taken in the Gallery; and
• MAC (Media Access Control) addresses of any device(s) you bring with you to the Gallery, whether or not you have connected to the Gallery’s free public Wi-Fi service. MAC addresses are identifiers which any Wi-Fi enabled device transmits when searching for a Wi-Fi connection.

The Courtauld will only process your information if we have a legal basis for doing so under current UK data protection legislation, including:

• Processing your information because it is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract, for example:
  • To process payments;
  • To fulfil orders for tickets or other events or services; or
  • To provide members of our Friends’ and Patrons’ (Samuel Courtauld Society) membership schemes with the benefits which you are contractually entitled to receive.
• • Where processing your information is necessary for our legitimate interests, for example:
    • Where we are required by law to process your information, for example:

     

    • To make a Gift Aid claim.

     

    • Where we have your consent to process your information, for example:
    • Where you have agreed to receive email updates in relation to the Gallery;
    • Where you have asked to receive information about our education events for teachers, our research events, or our national programme events; or
    • Where you have agreed to participate in a Gallery-based research project

    Where you have given consent to the processing of your data you may withdraw it at any time. See below ‘What rights do you have in relation to your personal information?’

  • To process donations;
  • Where we combine information we hold about you to better understand your interests and preferences so that we can target communications we send to you in line with the information contained in this privacy policy;
  • Where we conduct analysis and research in relation to our supporters. This could include in-gallery visitor interviews, which are used to improve our offering..
  • Where we collect MAC addresses for the purposes of monitoring and analysing the usage of, and maintaining, our free public Wi-Fi service, and also analysing (in an aggregated and anonymous format) visitor movements around the Gallery to improve our visitor experience;
  • Where we collect and view images recorded on our CCTV cameras.,The CCTV system installed at The Courtauld is for the primary purpose of ensuring the protection and safety of The Courtauld’s property, the collection of paintings and artifacts within, workers, students and visitors while consistent with respect for an individual’s privacy.
  • Where (from time to time) we (or a third party) carry out any filming, including interviews or filming/photographing of talks or events in the Gallery. Where particular areas of the Gallery are going to be used for filming or photography, we will always flag this in advance with clear signage or otherwise make you aware of the filming in advance, so that you can avoid being filmed or photographed.

We will not sell your personal information to any third parties or external organisations.

Sharing your information with the Samuel Courtauld Trust Enterprises Ltd. 

NHS Test and Trace

If contacted by NHS Test and Trace about positive Covid-19 cases in The Courtauld Gallery, we will share the contact details of visitors to the Gallery on the relevant day or at the relevant time, solely for the purposes of NHS Test and Trace alerting them to the fact they may have been exposed to a positive Covid-19 case.

We may also share your data to comply with any applicable Government guidance around monitoring visitor access to Courtauld premises.

We share information with the Samuel Courtauld Trust Enterprises Ltd., which runs the shops and venue hire in the Gallery, and oversees the running of the cafes and restaurants in the Gallery. Complaints and feedback we receive about the shops, restaurants, cafes, and audio guides may be shared with the Company and in the event of a security incident taking place in a shop, cafe, or restaurant, or at a venue hire event which is run by the Company, CCTV footage may be shared with the Company.

The Samuel Courtauld Trust Enterprises Ltd. Is a wholly owned subsidiary of The Courtauld Institute of Art.

You may receive news of promotions and offers from The Samuel Courtauld Trust, as part of the email news communications from The Courtauld Gallery, should you agree to receive these communications.

Sharing your information with our service providers/external data processors 

We may share some of your personal information with our service providers/external data processors, to carry work out on our behalf. Examples of such service providers/data processors include:

• Our ticketing service provider, who process ticket bookings, ticket purchases and membership transactions on our behalf, including membership sales, renewals and our member self-service area;
• Our mailing house who sends out our Membership welcome and renewal packs;
• Our email distribution service provider who sends out our marketing emails;
• Our research agency, which conducts research on behalf of The Courtauld Gallery.
• Our service provider enabling us to evaluate our education programmes; and
• Our third-party Wi-Fi infrastructure provider who collects and processes MAC addresses and information regarding usage of our Wi-Fi service on our behalf.
• Any such companies are acting as our data processors and the contracts we enter into with them require them to comply with UK data protection laws, to process only for the purposes we specify, and ensure they have the appropriate controls in place to protect the security of your information.

To help us to provide you with the Gallery services described above and to keep in touch, please let us know about any changes to your contact details.

You can find more information about our approach to data protection in our Privacy Policy. This includes:

• Our grounds for processing your personal data
• Sensitive Data
• Your data protection rights
• International Transfers
• Data Security
• Data Retention
• How to contact our DPO
• How to complain