Privacy Policy
Privacy Policy
About this policy
Here, at the City of Birmingham Symphony Orchestra, we take your privacy seriously. We promise to respect any personal data you share with us and keep it safe.
This policy explains who we are, what information we collect, how and why we use it, how it is stored, how we fundraise, which partners we work with, and your rights regarding any information you share with us.
We will use any personal information we collect about you in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act (DPA), and the Privacy and Electronic Communications Regulations (PECR). We aim to be clear when we handle your data, and not do anything you wouldn’t reasonably expect.
By visiting www.cbso.co.uk you are accepting and consenting to the practices described in this policy.
This privacy policy outlines how we process data for our:
- Ticket buyers, online users, members, and donors
- Participants in our Learning and Participation activities and members of our ensembles
- Suppliers, customers, and industry contacts
- Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra
Please read this information carefully, as by providing your data to us you acknowledge you have read this policy and understand we will process your data in accordance with its terms.
Who we are
The City of Birmingham Symphony Orchestra (CBSO) is a registered Arts Charity (number 506276) that processes data for purposes necessary to fulfil its aims and charitable objectives.
City of Birmingham Symphony Orchestra (ICO registration Z5724328) is the Data Controller for any personal information we process.
For this policy “CBSO,” “we, “us,” and “our” refer to the City of Birmingham Symphony Orchestra.
Contact us
Questions, comments, and requests regarding this Privacy Policy are welcomed.
Email us: mydata@cbso.co.uk
Write to us: City of Birmingham Symphony Orchestra, CBSO Centre, Berkley Street, Birmingham, B1 2LF
Data collection
We may collect personal data from you when you buy a ticket via B:Music, join or renew a membership with the CBSO, ask us to send you information, make a donation, pledge a legacy, attend an event, visit our premises, volunteer or participate in a project or group, supply goods/services to us, pay us for goods/services or apply for a job. The ways in which we collect data from you are listed below:
Ticket buyers, online users, members and donors
We may collect or store the following information from you when you buy a ticket or other item from us, join a membership scheme, donate, attend a concert or event, visit our website or premises, or contact us with an enquiry.
- Title, first name and last name
- Contact details including organisation/company name and job title (if appropriate), postal address, email address and telephone number(s)
- Communication preferences
- Interests
- Membership level and voting rights
- Ticketing, membership, and/or donation history
- Transaction history including billing and payment card information (first six digits and last four digits, card expiry data, card type)
- Bank details including account name, number, and sort code if you set up a direct debit with us
- Gift Aid declaration
- Passport details for members attending events abroad
- Social media handle
- Image and likeness (as captured on our CCTV cameras, and in photographs and videos we may use for promotional purposes)
- Any other information you provide to us by email, letter, telephone, social media, via our website, or in person
Sensitive information
This includes health information (if supplied) related to your booking or membership such as access need, allergy, or dietary requirements (for you or your party).
We sometimes request sensitive personal data in our audience and members surveys to assist us with our diversity monitoring. This data is not obligatory to provide, is analysed anonymously, and not linked to individual customer records.
Online information
We keep a record of the communications we send you, and we may track whether you receive or open electronic communications so that we can ensure we are sending you the most relevant information.
We use social media to provide updates on our activities, to promote events and projects, or to communicate with you about the activities in which you are involved. We may tailor adverts on social media and elsewhere online relevant to your interests. Depending on your own privacy settings with each social media provider, you can control the CBSO’s permission to access information via social media platforms.
Data from third parties
We may also obtain or collect personal information about you from other third-party sources, for example:
- CBSO is the resident orchestra of B:Music – when you book your ticket for one of our events via their box office, your data is passed to us to provide you with information as outlined in the Use of Data section below.
- If we engage an external photographer or videographer to capture events.
- When you donate via JustGiving, they will share your username and donation amount.
- From our Board of Trustees, CBSO Community Board, CBSO Development Trust, or member of CBSO staff e.g., if they wish to invite you to a concert or event.
- Publicly available online information, such as information found in places such as Companies House, your biography on your work website, or information that has been published in articles/ newspapers.
- From an organisation which funds or works in partnership with the CBSO, for example, if you attend one of our events or meet with us as a representative of your organisation.
Participants in our Learning and Participation activities and members of our ensembles
We may collect or store the following information from you when you participate in one of our activities, apply to join one of our ensembles, attend a concert or event, visit our website or premises, or contact us with an enquiry.
- First name and last name of participant and parent/guardian/carer where required
- Contact details of participant including postal address, email address and telephone number(s) and parent/guardian/carer where required
- Emergency/Next of Kin contact first name, last name, telephone number(s), and relationship to participant
- Date of birth and age
- Gender, place of birth, and nationality
- School/place of education name, address, email address(s), headteacher first name and last name, teacher first name and last name, school year, and school group
- Employer name (if a member of the CBSO Chorus)
- Instrument/voice part and grade
- Communication preferences
- Musical/singing experience and/or career experience
- Bank details including account name, number, and sort code when submitting travel claims
- Passport details for members attending events abroad
- Image and likeness (as captured on our CCTV cameras, and in photographs and videos we may use for promotional purposes)
- Any other information you provide to us by email, letter, telephone, social media, via our website, or in person
Sensitive information
This includes health information (if supplied) related to your participation with CBSO such as access need, allergy, or dietary requirements (for you or your party). We may also ask you for information about your ethnicity and sexuality; if you prefer to opt out, you can.
Data from third parties
We may also obtain or collect personal information about you from other third-party sources, for example:
- Music teachers and referees may provide information to us about your experience and competence.
- We may ask parents/guardians/carers or schools to supply information about under 18s for participation in our projects or for performance licensing purposes.
- If we engage an external photographer or videographer to capture events.
- If your details are given as an emergency contact for a member of one of our ensembles, or projects.
Suppliers, customers and industry contacts
We may collect or store the following information from you when you supply goods/services to us, purchase services from us e.g., hire the CBSO Centre, are recommended to us, attend a concert or event, visit our website or premises, or contact us with an enquiry.
- Company/organisation name
- Designated contact first name and last name
- Contact details including postal address, email address(es) and telephone number(s)
- Bank details including account number and sort code
- VAT and Tax numbers
- Record of goods/services provided/received
- Communication preferences
- Image and likeness (as captured on our CCTV cameras)
- Any other information you provide to us by email, letter, telephone, social media, via our website, or in person
Data from third parties
We may also obtain or collect personal information about you from other third-party sources, for example:
- Recommendations from other organisations/clients.
- If we engage an external photographer or videographer to capture events.
- Publicly available online information, such as information found in places such as Companies House, your biography on your work website, or information that has been published in articles/ newspapers.
Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra
We may collect or store the following information from you when you apply for a job or a paid opportunity with us, apply to do work experience with us, visit our website or premises, or contact us with an enquiry.
- Title, first name, and last name
- Contact details including postal address, email address, and telephone number(s)
- Musical experience, education, and career information
- Date of birth
- Gender
- Nationality
- Image and likeness as captured on our CCTV cameras and on audition videos
- Any other information you provide to us by email, letter, telephone, social media, via our website, or in person
Sensitive information
This includes health information (if supplied) such as access need, allergy, or dietary requirements, and any other information specific to the opportunity you are applying for. We may also ask you for information about your ethnicity and sexuality; if you prefer to opt out, you can.
Data from third parties
We may also obtain or collect personal information about you from other third-party sources, for example:
- Referees may provide information to us about your experience and competence.
- Contact details and employment history from recruitment agencies, when used to fill a position.
- Publicly available online information, such as information found in places such as Companies House, your biography on your work website, or information that has been published in articles/ newspapers.
Use of Data
We will use your information for the purposes listed below under one of the following lawful bases:
- Performance of a contract between us and you
- Your consent (where we require it)
- To comply with a legal obligation
- Our legitimate interests (except where such interests are overridden by the interests, rights, or freedoms of the individual)
The ways in which we use your data are listed below:
Ticket buyers, online users, members, and donors
We use the information we hold to:
Keep a record of the relationship we have with you and how you wish to be contacted | Legitimate interests |
Ensure we cater for any specific needs you may have such as allergies or dietary or access requirements | Consent |
Inform you of any change to or provide additional information regarding a booking, visit, or membership | Performance of a contract |
Deliver membership and corporate partner benefits | Performance of a contract |
Send you a gift (such as a book, gift voucher, or membership) bought by another person | Performance of a contract |
Analyse your personal information to create a profile of your interests and preferences so that we can contact you with information most relevant to you | Legitimate interests |
Inform you about relevant concerts, events, and news we believe will be of interest, as well as opportunities to support our work when you sign up to our mailing list via CBSO or a third party | Consent |
Inform you about relevant concerts, events, and news we believe will be of interests, as well as opportunities to support our work (when you make a purchase via CBSO) | Legitimate interests |
Inform you about relevant concerts, events, and news we believe will be of interests, as well as opportunities to support our work (when you make a purchase via B:Music) | Consent |
Manage and keep a record of Trust funding applications | Legitimate interests |
Manage events taking place at the CBSO Centre | Performance of a contract |
Process and record donations and payments | Performance of a contract |
Process and record Gift Aid claims | Legal obligation |
Thank our donors and supporters | Legitimate interests |
Manage guest lists for CBSO events | Legitimate interests |
Assist us with reporting and analysis for our own business needs, and those of our funding partners | Legitimate interests |
Undertake research relating to your purchase, event experience, or membership | Performance of a contract |
Undertake general customer and membership research | Legitimate interests |
Research prospective donors including undertaking wealth screening | Legitimate interests |
Administer prizes for competition winners | Consent |
Respond to queries, complaints, and feedback received via post, email, telephone, social media, or in person | Legitimate interests |
Use your image to promote our work to funders, supports and the public via media and social media | Legitimate interests / Parental Consent (if under 18) |
Use quotes from your social media content to promote the work of CBSO via our website, marketing materials, and social media | Consent |
Archive photographs and video for heritage purposes | Legitimate interests |
Promote our work to funders, supporters, and the public via media and social media outlets | Legitimate interests |
Profile ticket bookers and donors to inform future fundraising approaches | Legitimate interests |
Ensure compliance with policies, procedures, and laws | Legal obligation |
Maintain the security of property and individuals in and around our building using CCTV footage | Legitimate interests |
Fundraising and profiling
As a charity, the CBSO depends on donations to support our work. We aim to identify ticket buyers and existing donors who might be interested in giving additional support. To do this efficiently, we may use publicly available information (gathered by us or third parties) to see if you might want to donate more. This helps us make appropriate and tailored requests. We do not let third parties use your data for other purposes.
We might look at publicly available details about your wealth (like house price values), if you are a trustee of a charity, have donated to similar causes, or raised funds for charitable purposes, in addition to your interests in the arts.
We understand not everyone wants this, and you can ask us to stop at any time by contacting mydata@cbso.co.uk. If you do, we will delete the information we have collected about you for these purposes.
Participants in our Learning and Participation activities and members of our ensembles
We use the information we hold to:
Enable the offer of an audition and manage the audition process | Legitimate interests |
Keep a record of the relationship we have with you and how you wish to be contacted | Legitimate interests |
Ensure we cater for any specific needs you may have such as allergies or dietary or access requirements | Consent |
Keep you fully informed of all arrangements relating to your involvement with the CBSO, including rehearsals and concerts | Consent |
Keep a record of those who wish to be informed of future auditions | Consent |
Keep in touch with alumni and invite them to participate in specific projects | Legitimate interests |
Keep you informed of ticket offers for ensemble members when available | Legitimate interests |
Ensure we cater for any specific needs you may have such as allergies or dietary or access requirements | Consent |
Facilitate with touring | Contract |
Process payments when required | Performance of a contract |
Process bursary applications when required | Legitimate interests |
Ensure we have the appropriate information needed for when applying for licences | Consent |
Apply for appropriate licensing for child performers where necessary | Legal obligation |
Publish lists of participants and ensembles in our printed programmes | Legitimate interests |
Promote our work to funders, supporters and the public via media and social media outlets | Legitimate interests |
Undertake evaluation of our projects | Legitimate interests |
Ensure compliance with policies, procedures, and laws | Legal obligation |
Maintain the security of property and individuals using CCTV footage | Legitimate interests |
Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra
We use the information we hold to:
Process your application and communicate with you regarding the selection and interview process | Consent |
Ensure we cater for any specific needs you may have such as dietary or access requirements | Legitimate interests |
Ensure compliance with policies, procedures, and laws | Legal obligation |
Maintain the security of property and individuals using CCTV footage | Legitimate interests |
Sharing your data with third parties
Unless you give us your consent, the personal information that you give us will only be shared with third parties where we are obliged or permitted by law to disclose it, we need to use the services of ‘data processors’ to fulfil your requirements, to support analysis and research for the CBSO or the Arts Sector, or for reporting to our funders.
As part of the services offered to you, the personal information you provide may be transferred to countries outside the European Economic Area (EEA). For example, this may happen if any of the computer servers used to host our ticketing system are in a country outside of the EEA. If the CBSO transfers your personal information outside of the EEA in this way, we will take steps to ensure that your privacy rights continue to be protected as outlined in this Privacy Policy. For more details, please see Use of Data section above.
The ways in which we share data with third party organisations are listed below:
Ticket buyers, online users, members, and donors
We may share your data with third party organisations as follows:
Third Party Processors providing services to the CBSO e.g., our CRM system, email platform etc. | Performance of a contract |
Funders such as Arts Council England for analysis and reporting purposes (anonymised data only) | Performance of a contract |
Agencies such as the British Association of Orchestras for analysis and research purposes (anonymised data only) | Legitimate interests |
Companies House, Charity Commission, our auditors and professional advisers, and other regulatory bodies | Legal obligation |
Fundraising Prospect Companies | Consent |
Social media | Legitimate interests |
Tour operators if you are a member attending one of our events abroad | Legitimate interests |
We publish lists of supporters and donors in our printed programmes. If you do not wish for your details to be included, please contact mydata@cbso.co.uk
To collect and share data with Google to utilise Google reCAPTCHA API for security purposes on our website.
Participants in our Learning and Participation activities and members of our ensembles
We may share your data with third party organisations as follows:
Third Party Processors providing services to the CBSO e.g., our CRM system, email platform etc. | Performance of a contract |
Chaperones and Workshop Leaders | Legitimate interests |
Birmingham City University and Royal Birmingham Conservatoire for partnership activities | Legitimate interests |
Tour operators if you are performing abroad with the CBSO | Legitimate interests |
Funders such as Arts Council England for analysis and reporting purposes (anonymised data only) | Performance of a contract |
Agencies such as the British Association of Orchestras for analysis and research purposes (anonymised data only) | Legitimate interests |
Companies House, Charity Commission, our auditors and professional advisers, and other regulatory bodies | Legal obligation |
Social media | Legitimate interests |
Appropriate organisations when recommending your services | Legitimate interests |
We publish lists of participants and ensembles in our printed programmes. If you do not wish for your details to be included, please contact mydata@cbso.co.uk
Suppliers, customers, and industry contacts
We may share your data with third party organisations as follows:
Third Party Processors providing services to the CBSO e.g., our CRM system, email platform etc. | Performance of a contract |
Companies House, Charity Commission, our auditors and professional advisers, and other regulatory bodies | Legal obligation |
Social media | Legitimate interests |
Appropriate organisations when recommending your services | Legitimate interests |
Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra
We may share your data with third party organisations as follows:
Third Party Processors providing services to the CBSO e.g., our CRM system, email platform etc. | Performance of a contract |
External advisors as part of the recruitment and interview process | Legitimate interests |
Keeping your data secure
We take every precaution to protect your personal data, and we hold regular security reviews to ensure that the website is safe and secure for your protection. Your data is processed in secure systems and digital environments. Only authorised and trained employees and approved contractors/developers are granted access to personally identifiable information. This will be from time to time, and only when they need to perform a specific job or task. If we need to share personal data with a third party, we ensure that the appropriate data sharing agreements are in place.
How long we keep your data
We will keep personal data for no longer than is strictly necessary, having regard to the original purpose for which the data was processed. Our retention periods are detailed below:
Ticket buyers, online users, members and donors
We will store data in our database system(s) for a maximum of seven years after your last engagement with us, through ticket, gift voucher or membership purchases, or making donations. At that point your data will be deleted, no longer processed, and you will cease to receive communications from us, unless there is an outstanding issue, claim or dispute requiring us to keep such information until resolution.
Participants in our Learning and Participation activities and members of our ensembles
We will store data in our database system(s) for a maximum of five years after your last engagement with us, through participating in our work, or requesting to be kept up to date with our activities. At that point your data will be deleted, no longer processed, and you will cease to receive communications from us, unless there is an outstanding issue, claim or dispute requiring us to keep such information until resolution.
Suppliers, customers, and industry contacts
We will store data in our database and finance system(s) for as long as you continue to purchase services from us, supply us with goods and/or services, or 6 years plus the current tax year, where the relationship is not ongoing. At that point your data will be deleted and no longer processed, unless there is an outstanding issue, claim or dispute requiring us to keep such information until resolution.
Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra
For unsuccessful candidates, we will store data in our HR systems for 6 months following your application, at which point it will be deleted, unless:
- There is an outstanding issue, claim or dispute requiring us to keep such information until resolution.
- You consent to our keeping your data on file to keep you informed of other suitable opportunities.
Giving you control
How to update your data
Ticket buyers, online users, members and donors
- You can manage your own details in your online CBSO Account
- Contact mydata@cbso.co.uk
- Use the unsubscribe link in our emails
Participants in our Learning and Participation activities and members of our ensembles
- Contact mydata@cbso.co.uk or your regular CBSO contact
- Use the unsubscribe link in our emails
Suppliers, customers, and industry contacts
- If you are a supplier, contact cbsofinance@cbso.co.uk or your regular CBSO contact
- If you are an industry contact email mydata@cbso.co.uk
Job/paid for opportunity applicants, work experience applicants, and those auditioning for the Orchestra
- Contact mydata@cbso.co.uk
Your individual rights
Under data protection law, you have rights including:
- Your right of access: you have the right to ask us for copies of your personal information.
- Your right to rectification: you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure: you have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing: you have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing: you have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
- Your right related to automated decision-making including profiling: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Where you have provided your consent to the collection, processing, and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us as set out at the beginning of this Privacy Policy. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to.
How to make a complaint
If you wish to make a complaint about how we are using your data, please email mydata@cbso.co.uk.
Where you take the view that your personal data is processed in a way that does not comply with the UK GDPR, you have a specific right to lodge a complaint with the Information Commissioner’s Office (ICO). They will then inform you of the progress and outcome of your complaint. You can contact the ICO at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
Changes to this policy
We may change or update this Privacy Policy from time to time. Any significant changes will be communicated on our website or by contacting you directly.
Last updated 14 March 2025