Privacy Policy

About this policy

Here, at the City of Birmingham Symphony Orchestra, we take your privacy seriously. We promise to respect any personal data you share with us and keep it safe.

This policy explains who we are, what information we collect, how and why we use it, how it is stored, how we fundraise, which partners we work with, and your rights regarding any information you share with us.

We will use any personal information we collect about you in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act (DPA), and the Privacy and Electronic Communications Regulations (PECR). We aim to be clear when we handle your data, and not do anything you wouldn’t reasonably expect.

By visiting www.cbso.co.uk you are accepting and consenting to the practices described in this policy.

This privacy policy outlines how we process data for our:

  • Ticket buyers, online users, members, and donors
  • Participants in our Learning and Participation activities and members of our ensembles
  • Suppliers, customers, and industry contacts
  • Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra

Please read this information carefully, as by providing your data to us you acknowledge you have read this policy and understand we will process your data in accordance with its terms.


Who we are

The City of Birmingham Symphony Orchestra (CBSO) is a registered Arts Charity (number 506276) that processes data for purposes necessary to fulfil its aims and charitable objectives.

City of Birmingham Symphony Orchestra (ICO registration Z5724328) is the Data Controller for any personal information we process.

For this policy “CBSO,” “we, “us,” and “our” refer to the City of Birmingham Symphony Orchestra.

Contact us

Questions, comments, and requests regarding this Privacy Policy are welcomed.

Email us: mydata@cbso.co.uk

Write to us: City of Birmingham Symphony Orchestra, CBSO Centre, Berkley Street, Birmingham, B1 2LF

Data collection

We may collect personal data from you when you buy a ticket via B:Music, join or renew a membership with the CBSO, ask us to send you information, make a donation, pledge a legacy, attend an event, visit our premises, volunteer or participate in a project or group, supply goods/services to us, pay us for goods/services or apply for a job. The ways in which we collect data from you are listed below:


Ticket buyers, online users, members and donors

We may collect or store the following information from you when you buy a ticket or other item from us, join a membership scheme, donate, attend a concert or event, visit our website or premises, or contact us with an enquiry.

    • Title, first name and last name
    • Contact details including organisation/company name and job title (if appropriate), postal address, email address and telephone number(s)
    • Communication preferences
    • Interests
    • Membership level and voting rights
    • Ticketing, membership, and/or donation history
    • Transaction history including billing and payment card information (first six digits and last four digits, card expiry data, card type)
    • Bank details including account name, number, and sort code if you set up a direct debit with us
    • Gift Aid declaration
    • Passport details for members attending events abroad
    • Social media handle
    • Image and likeness (as captured on our CCTV cameras, and in photographs and videos we may use for promotional purposes)
    • Any other information you provide to us by email, letter, telephone, social media, via our website, or in person

Sensitive information

This includes health information (if supplied) related to your booking or membership such as access need, allergy, or dietary requirements (for you or your party).

We sometimes request sensitive personal data in our audience and members surveys to assist us with our diversity monitoring. This data is not obligatory to provide, is analysed anonymously, and not linked to individual customer records.

Online information

We keep a record of the communications we send you, and we may track whether you receive or open electronic communications so that we can ensure we are sending you the most relevant information.

We use social media to provide updates on our activities, to promote events and projects, or to communicate with you about the activities in which you are involved. We may tailor adverts on social media and elsewhere online relevant to your interests. Depending on your own privacy settings with each social media provider, you can control the CBSO’s permission to access information via social media platforms.

Data from third parties

We may also obtain or collect personal information about you from other third-party sources, for example:

  • CBSO is the resident orchestra of B:Music – when you book your ticket for one of our events via their box office, your data is passed to us to provide you with information as outlined in the Use of Data section below.
  • If we engage an external photographer or videographer to capture events.
  • When you donate via JustGiving, they will share your username and donation amount.
  • From our Board of Trustees, CBSO Community Board, CBSO Development Trust, or member of CBSO staff e.g., if they wish to invite you to a concert or event.
  • Publicly available online information, such as information found in places such as Companies House, your biography on your work website, or information that has been published in articles/ newspapers.
  • From an organisation which funds or works in partnership with the CBSO, for example, if you attend one of our events or meet with us as a representative of your organisation.


Participants in our Learning and Participation activities and members of our ensembles

We may collect or store the following information from you when you participate in one of our activities, apply to join one of our ensembles, attend a concert or event, visit our website or premises, or contact us with an enquiry.

  • First name and last name of participant and parent/guardian/carer where required
  • Contact details of participant including postal address, email address and telephone number(s) and parent/guardian/carer where required
  • Emergency/Next of Kin contact first name, last name, telephone number(s), and relationship to participant
  • Date of birth and age
  • Gender, place of birth, and nationality
  • School/place of education name, address, email address(s), headteacher first name and last name, teacher first name and last name, school year, and school group
  • Employer name (if a member of the CBSO Chorus)
  • Instrument/voice part and grade
  • Communication preferences
  • Musical/singing experience and/or career experience
  • Bank details including account name, number, and sort code when submitting travel claims
  • Passport details for members attending events abroad
  • Image and likeness (as captured on our CCTV cameras, and in photographs and videos we may use for promotional purposes)
  • Any other information you provide to us by email, letter, telephone, social media, via our website, or in person

Sensitive information

This includes health information (if supplied) related to your participation with CBSO such as access need, allergy, or dietary requirements (for you or your party). We may also ask you for information about your ethnicity and sexuality; if you prefer to opt out, you can.

Data from third parties

We may also obtain or collect personal information about you from other third-party sources, for example:

  • Music teachers and referees may provide information to us about your experience and competence.
  • We may ask parents/guardians/carers or schools to supply information about under 18s for participation in our projects or for performance licensing purposes.
  • If we engage an external photographer or videographer to capture events.
  • If your details are given as an emergency contact for a member of one of our ensembles, or projects.
Suppliers, customers and industry contacts

We may collect or store the following information from you when you supply goods/services to us, purchase services from us e.g., hire the CBSO Centre, are recommended to us, attend a concert or event, visit our website or premises, or contact us with an enquiry.

  • Company/organisation name
  • Designated contact first name and last name
  • Contact details including postal address, email address(es) and telephone number(s)
  • Bank details including account number and sort code
  • VAT and Tax numbers
  • Record of goods/services provided/received
  • Communication preferences
  • Image and likeness (as captured on our CCTV cameras)
  • Any other information you provide to us by email, letter, telephone, social media, via our website, or in person

Data from third parties

We may also obtain or collect personal information about you from other third-party sources, for example:

  • Recommendations from other organisations/clients.
  • If we engage an external photographer or videographer to capture events.
  • Publicly available online information, such as information found in places such as Companies House, your biography on your work website, or information that has been published in articles/ newspapers.
Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra

We may collect or store the following information from you when you apply for a job or a paid opportunity with us, apply to do work experience with us, visit our website or premises, or contact us with an enquiry.

  • Title, first name, and last name
  • Contact details including postal address, email address, and telephone number(s)
  • Musical experience, education, and career information
  • Date of birth
  • Gender
  • Nationality
  • Image and likeness as captured on our CCTV cameras and on audition videos
  • Any other information you provide to us by email, letter, telephone, social media, via our website, or in person

Sensitive information

This includes health information (if supplied) such as access need, allergy, or dietary requirements, and any other information specific to the opportunity you are applying for. We may also ask you for information about your ethnicity and sexuality; if you prefer to opt out, you can.


Data from third parties
We may also obtain or collect personal information about you from other third-party sources, for example:

  • Referees may provide information to us about your experience and competence.
  • Contact details and employment history from recruitment agencies, when used to fill a position.
  • Publicly available online information, such as information found in places such as Companies House, your biography on your work website, or information that has been published in articles/ newspapers.

Use of Data

We will use your information for the purposes listed below under one of the following lawful bases:

  • Performance of a contract between us and you
  • Your consent (where we require it)
  • To comply with a legal obligation
  • Our legitimate interests (except where such interests are overridden by the interests, rights, or freedoms of the individual)

The ways in which we use your data are listed below:

Ticket buyers, online users, members, and donors

We use the information we hold to:

Keep a record of the relationship we have with you and how you wish to be contacted

Legitimate interests

Ensure we cater for any specific needs you may have such as allergies or dietary or access requirements

Consent

Inform you of any change to or provide additional information regarding a booking, visit, or membership

Performance of a contract

Deliver membership and corporate partner benefits

Performance of a contract

Send you a gift (such as a book, gift voucher, or membership) bought by another person

Performance of a contract

Analyse your personal information to create a profile of your interests and preferences so that we can contact you with information most relevant to you

Legitimate interests

Inform you about relevant concerts, events, and news we believe will be of interest, as well as opportunities to support our work when you sign up to our mailing list via CBSO or a third party

Consent

Inform you about relevant concerts, events, and news we believe will be of interests, as well as opportunities to support our work (when you make a purchase via CBSO)

Legitimate interests

Inform you about relevant concerts, events, and news we believe will be of interests, as well as opportunities to support our work (when you make a purchase via B:Music)

Consent

Manage and keep a record of Trust funding applications

Legitimate interests

Manage events taking place at the CBSO Centre

Performance of a contract

Process and record donations and payments

Performance of a contract

Process and record Gift Aid claims

Legal obligation

Thank our donors and supporters

Legitimate interests

Manage guest lists for CBSO events

Legitimate interests

Assist us with reporting and analysis for our own business needs, and those of our funding partners

Legitimate interests

Undertake research relating to your purchase, event experience, or membership

Performance of a contract

Undertake general customer and membership research

Legitimate interests

Research prospective donors including undertaking wealth screening

Legitimate interests

Administer prizes for competition winners

Consent

Respond to queries, complaints, and feedback received via post, email, telephone, social media, or in person

Legitimate interests

Use your image to promote our work to funders, supports and the public via media and social media

Legitimate interests / Parental Consent (if under 18)

Use quotes from your social media content to promote the work of CBSO via our website, marketing materials, and social media

Consent

Archive photographs and video for heritage purposes

Legitimate interests

Promote our work to funders, supporters, and the public via media and social media outlets

Legitimate interests

Profile ticket bookers and donors to inform future fundraising approaches

Legitimate interests

Ensure compliance with policies, procedures, and laws

Legal obligation

Maintain the security of property and individuals in and around our building using CCTV footage

Legitimate interests


Fundraising and profiling

As a charity, the CBSO depends on donations to support our work. We aim to identify ticket buyers and existing donors who might be interested in giving additional support. To do this efficiently, we may use publicly available information (gathered by us or third parties) to see if you might want to donate more. This helps us make appropriate and tailored requests. We do not let third parties use your data for other purposes.

We might look at publicly available details about your wealth (like house price values), if you are a trustee of a charity, have donated to similar causes, or raised funds for charitable purposes, in addition to your interests in the arts.

We understand not everyone wants this, and you can ask us to stop at any time by contacting mydata@cbso.co.uk. If you do, we will delete the information we have collected about you for these purposes.

Participants in our Learning and Participation activities and members of our ensembles

We use the information we hold to:

Enable the offer of an audition and manage the audition process

Legitimate interests

Keep a record of the relationship we have with you and how you wish to be contacted

Legitimate interests

Ensure we cater for any specific needs you may have such as allergies or dietary or access requirements

Consent

Keep you fully informed of all arrangements relating to your involvement with the CBSO, including rehearsals and concerts

Consent

Keep a record of those who wish to be informed of future auditions

Consent

Keep in touch with alumni and invite them to participate in specific projects

Legitimate interests

Keep you informed of ticket offers for ensemble members when available

Legitimate interests

Ensure we cater for any specific needs you may have such as allergies or dietary or access requirements

Consent

Facilitate with touring

Contract

Process payments when required

Performance of a contract

Process bursary applications when required

Legitimate interests

Ensure we have the appropriate information needed for when applying for licences

Consent

Apply for appropriate licensing for child performers where necessary

Legal obligation

Publish lists of participants and ensembles in our printed programmes

Legitimate interests

Promote our work to funders, supporters and the public via media and social media outlets

Legitimate interests

Undertake evaluation of our projects

Legitimate interests

Ensure compliance with policies, procedures, and laws

Legal obligation

Maintain the security of property and individuals using CCTV footage

Legitimate interests


Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra

We use the information we hold to:

Process your application and communicate with you regarding the selection and interview process

Consent

Ensure we cater for any specific needs you may have such as dietary or access requirements

Legitimate interests

Ensure compliance with policies, procedures, and laws

Legal obligation

Maintain the security of property and individuals using CCTV footage

Legitimate interests

Sharing your data with third parties

Unless you give us your consent, the personal information that you give us will only be shared with third parties where we are obliged or permitted by law to disclose it, we need to use the services of ‘data processors’ to fulfil your requirements, to support analysis and research for the CBSO or the Arts Sector, or for reporting to our funders.

As part of the services offered to you, the personal information you provide may be transferred to countries outside the European Economic Area (EEA). For example, this may happen if any of the computer servers used to host our ticketing system are in a country outside of the EEA. If the CBSO transfers your personal information outside of the EEA in this way, we will take steps to ensure that your privacy rights continue to be protected as outlined in this Privacy Policy. For more details, please see Use of Data section above.

The ways in which we share data with third party organisations are listed below:

Ticket buyers, online users, members, and donors

We may share your data with third party organisations as follows:

Third Party Processors providing services to the CBSO e.g., our CRM system, email platform etc.

Performance of a contract

Funders such as Arts Council England for analysis and reporting purposes (anonymised data only)

Performance of a contract

Agencies such as the British Association of Orchestras for analysis and research purposes (anonymised data only)

Legitimate interests

Companies House, Charity Commission, our auditors and professional advisers, and other regulatory bodies

Legal obligation

Fundraising Prospect Companies

Consent

Social media

Legitimate interests

Tour operators if you are a member attending one of our events abroad

Legitimate interests

We publish lists of supporters and donors in our printed programmes. If you do not wish for your details to be included, please contact mydata@cbso.co.uk

To collect and share data with Google to utilise Google reCAPTCHA API for security purposes on our website.

Participants in our Learning and Participation activities and members of our ensembles

We may share your data with third party organisations as follows:

Third Party Processors providing services to the CBSO e.g., our CRM system, email platform etc.

Performance of a contract

Chaperones and Workshop Leaders

Legitimate interests

Birmingham City University and Royal Birmingham Conservatoire for partnership activities

Legitimate interests

Tour operators if you are performing abroad with the CBSO

Legitimate interests

Funders such as Arts Council England for analysis and reporting purposes (anonymised data only)

Performance of a contract

Agencies such as the British Association of Orchestras for analysis and research purposes (anonymised data only)

Legitimate interests

Companies House, Charity Commission, our auditors and professional advisers, and other regulatory bodies

Legal obligation

Social media

Legitimate interests

Appropriate organisations when recommending your services

Legitimate interests

We publish lists of participants and ensembles in our printed programmes. If you do not wish for your details to be included, please contact mydata@cbso.co.uk

Suppliers, customers, and industry contacts

We may share your data with third party organisations as follows:

Third Party Processors providing services to the CBSO e.g., our CRM system, email platform etc.

Performance of a contract

Companies House, Charity Commission, our auditors and professional advisers, and other regulatory bodies

Legal obligation

Social media

Legitimate interests

Appropriate organisations when recommending your services

Legitimate interests

Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra

We may share your data with third party organisations as follows:

Third Party Processors providing services to the CBSO e.g., our CRM system, email platform etc.

Performance of a contract

External advisors as part of the recruitment and interview process

Legitimate interests

Keeping your data secure

We take every precaution to protect your personal data, and we hold regular security reviews to ensure that the website is safe and secure for your protection. Your data is processed in secure systems and digital environments. Only authorised and trained employees and approved contractors/developers are granted access to personally identifiable information. This will be from time to time, and only when they need to perform a specific job or task. If we need to share personal data with a third party, we ensure that the appropriate data sharing agreements are in place.

How long we keep your data

We will keep personal data for no longer than is strictly necessary, having regard to the original purpose for which the data was processed. Our retention periods are detailed below:

Ticket buyers, online users, members and donors

We will store data in our database system(s) for a maximum of seven years after your last engagement with us, through ticket, gift voucher or membership purchases, or making donations. At that point your data will be deleted, no longer processed, and you will cease to receive communications from us, unless there is an outstanding issue, claim or dispute requiring us to keep such information until resolution.

Participants in our Learning and Participation activities and members of our ensembles

We will store data in our database system(s) for a maximum of five years after your last engagement with us, through participating in our work, or requesting to be kept up to date with our activities. At that point your data will be deleted, no longer processed, and you will cease to receive communications from us, unless there is an outstanding issue, claim or dispute requiring us to keep such information until resolution.

Suppliers, customers, and industry contacts

We will store data in our database and finance system(s) for as long as you continue to purchase services from us, supply us with goods and/or services, or 6 years plus the current tax year, where the relationship is not ongoing. At that point your data will be deleted and no longer processed, unless there is an outstanding issue, claim or dispute requiring us to keep such information until resolution.

Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra

For unsuccessful candidates, we will store data in our HR systems for 6 months following your application, at which point it will be deleted, unless:

  • There is an outstanding issue, claim or dispute requiring us to keep such information until resolution.
  • You consent to our keeping your data on file to keep you informed of other suitable opportunities.

Giving you control

How to update your data

Ticket buyers, online users, members and donors

  • You can manage your own details in your online CBSO Account
  • Contact mydata@cbso.co.uk
  • Use the unsubscribe link in our emails

Participants in our Learning and Participation activities and members of our ensembles

  • Contact mydata@cbso.co.uk or your regular CBSO contact
  • Use the unsubscribe link in our emails

Suppliers, customers, and industry contacts

Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra

Your individual rights

Under data protection law, you have rights including:

  • Your right of access: you have the right to ask us for copies of your personal information.
  • Your right to rectification: you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure: you have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing: you have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Your right to object to processing: you have the right to object to the processing of your personal information in certain circumstances.
  • Your right to data portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
  • Your right related to automated decision-making including profiling: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Where you have provided your consent to the collection, processing, and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us as set out at the beginning of this Privacy Policy. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to.

How to make a complaint

If you wish to make a complaint about how we are using your data, please email mydata@cbso.co.uk.

Where you take the view that your personal data is processed in a way that does not comply with the UK GDPR, you have a specific right to lodge a complaint with the Information Commissioner’s Office (ICO). They will then inform you of the progress and outcome of your complaint. You can contact the ICO at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

Changes to this policy

We may change or update this Privacy Policy from time to time. Any significant changes will be communicated on our website or by contacting you directly.

Last updated 14 March 2025