Last updated: 4 July 2018
This policy applies to all those with whom we have contact, including therefore composers as well as those on our mailing list and visitors to our website.
UYMP is the controller and responsible for your personal data.
Postal address: University of York Music Press, Department of Music, University of York, Heslington, York, YO10 5DD
Telephone number: +44 (0)1904 322434
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
We collect personal information from visitors to our website (www.uymp.co.uk) through the use of online forms, when you e-mail us your details and if you sign up to any of our mailchimp managed newsletters. In addition, we automatically collect information about your visit to our website.
Our website is not intended for children and we do not knowingly collect data relating to children. We do not actively collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. However, in some circumstances, we may collect or process information, from which it is possible to infer sensitive personal information about you, for the purposes specified in this policy.
Use of personal information
We will only use your personal data when the law allows us to.
Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
We process personal information for the purposes of:
- providing and personalising our services;
- dealing with your enquiries and requests;
- maintaining information as a reference tool or general resource;
- carrying out market research campaigns;
- contacting you by email (mailchimp) with information regarding our composers’ latest news, publications and performances;
Generally, we do not rely on consent as a legal basis for processing your personal data. We will never knowingly pass on your information to any third-party companies. In relation to our newsletters (mailchimp), you have the right to withdraw consent to marketing or change your communication preferences at any time through the link placed at the bottom of each newsletter, through the mailchimp website (www.mailchimp.com), or through notifying us directly utilising our aforementioned contact details.
Cookies are text files which contain small amounts of information which are downloaded to your computer or Internet device when you visit a website. They are then sent back to the original website on each subsequent visit. More information about cookies can be found at http://www.aboutcookies.org/
You can change your browser settings to remove, block or withdraw your consent for cookies at any time. But in some cases, this may impact on your ability to use our website. Browsers recognise different types of cookies and allow you to treat them differently.
There are two main types of cookies, first and third party: First Party Cookies are those set by the website you are viewing. Third party cookies are set by other sites; for example if a video has been embedded from YouTube, YouTube may set a cookie of its own.
Cookies can also last for different durations. Session cookies last until you leave the site, others may last for days or months so the site can recognise you and your preferences on subsequent visits.
We use a number of different cookies on this site, these are:
- necessary cookies that are essential in helping users to move around the website and use its features; such as filling in forms; and
- performance cookies, that collect information about how users use the site, such as which pages are the most visited. These cookies collect anonymous information only and only use any information to improve the site.
We use a number of third party service providers on this site, some of which may set cookies on your computer when you use the facility. For each providers’ privacy policies please see the below links:
We will only disclose personal information to other companies, for example our printing and sales partners at Music Sales and Hal Leonard, (to the extent you consent to this), government bodies, law enforcement agencies and future owners of our business, as well as suppliers we engage to process data on our behalf.
We do not accept any responsibility or liability for the privacy practices of such third-party websites and your use of such websites is at your own risk.
Right of Access
You have the right to obtain:
- confirmation that we are processing your data;
- access to your personal data; and
- other supplementary information.
You can request information verbally or in writing. UYMP will normally provide a copy of the information free of charge; however, we may charge a reasonable fee when a request is:
- manifestly unfounded or excessive, particularly if it is repetitive (in which instances UYMP may choose to refuse to respond); or
- for further copies of the same information (that’s previously been provided).
Any fee will be based on the administrative cost of providing the information.
Right to rectification and data quality
You have the right to have personal data rectified if it is inaccurate, or completed if it is incomplete.
Right to erasure including retention and disposal
You have the right to be forgotten and can request the erasure of personal data when:
it is no longer necessary for the purpose originally collected/ processed for;
- you withdraw consent where consent is the lawful basis for processing;
- we are relying on legitimate interests as the basis for processing, and you object to the processing of your data, and there is no overriding legitimate interest to continue this processing;
- we are processing the personal data for direct marketing purposes and you object to that processing;
- it was unlawfully processed;
- it has to be erased in order to comply with a legal obligation; or
- it is processed for information society services to a child.
UYMP may refuse to comply with a request for erasure if we are processing the personal data for the following reasons:
- to exercise the right of freedom of expression and information;
- to comply with a legal obligation; or
- to exercise or defence of legal claims.
Right to restrict processing
You have a right to block or restrict the processing of your personal data.
When processing is restricted, we may store the personal data, but not further process it. We can retain just enough information about you to ensure that the restriction is respected in the future.
If we have disclosed the personal data to other organisations, we will inform them about the restriction, unless it is impossible or involves disproportionate effort to do so.
We will inform you if we decide to lift a restriction on processing.
Right to data portability
The right to data portability allows you to obtain and reuse your personal data for your own purposes across different services. You can receive personal data or easily move, copy or transfer that data from UYMP to another business in a safe and secure way.
The right to data portability only applies:
- to personal data you have provided to UYMP as data controller;
- where the processing is based on your consent or for the performance of a contract; and
- where the processing is carried out by automated means.
We will provide the personal data in a structured, commonly used and machine-readable format.
We will provide this information free of charge. If you request it, we will transmit the data directly to another business where this is technically feasible.
Right to object
You have a right to object to the processing of your personal data in certain circumstances. Whether it applies depends on our purposes for processing and our lawful basis for processing. We will inform individuals of their right to object at the point of first communication as well as here in our privacy notice.
If the right to object does apply, it is not always absolute. Whether it is an absolute right depends on our purposes for processing the data.
You have an absolute right to object to any processing undertaken for the purposes of direct marketing. We will stop processing for direct marketing as soon as we receive an objection.
You can object, on grounds relating to your particular situation to processing based on our legitimate interests. In these circumstances, the right to object is not absolute. We will stop processing the personal data unless:
- we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or
- the processing is for the establishment, exercise or defence of legal claims.
We will not be liable for any claims, penalties, losses, damages, costs or expenses arising from the use of or inability to use, interruption or availability of, this website, its operation or transmission, computer viruses or any unauthorised access to or alteration of the website. We do not warrant that the contents of this website are compatible with all computer systems and browsers.
We do not guarantee that any email sent to us will be received or that the contents will remain private during transmission. If you are concerned about this, please consider other means of communication. You are responsible for ensuring any electronic message or information you send to us is free from any virus or defect that may harm our systems in any way.
We will normally respond to all requests within one calendar month of receiving a request. We may extend this by a further two months for complex or numerous requests in which case we will inform you and give an explanation.
We will verify the identity of the person making the request, using reasonable means.
Requests can be made verbally or in writing. If the request is made electronically, we will provide the information in a commonly used electronic format.