New EU regulations known as the General Data Protection Regulation (GDPR) will come into force on 25th May 2018. The GDPR places significant additional responsibilities, over and above those defined in the Data Protection Act 1998, on those who collect and process personal data to ensure that providers of personal data understand the lawful basis for the collection and processing of their data.
The Festival will not collect more data about you when you enter than it has done in the past, but you will in future need to give explicit consent for us to collect it. It is no longer sufficient for us to assume consent. The law will require us to issue a document known as a “Privacy Notice” explaining what data is to be collected and why, what we do with it, how it will be protected and your rights to have the data erased. In return, with your entry you will need to confirm that you have read and understood this document, and give a positive indication of consent (silence is no longer assumed to give such consent).
We do not expect this process to be onerous, and we will redesign entry forms to make it as painless as possible, but we do ask for your cooperation by completing all parts of the entry forms. Failure to do so, particularly those parts regarding the giving of consent, may mean we have to return the forms to you. The Privacy Notice will be published on our website in due course, and a copy will be sent out with the Syllabus in October.