Privacy Policy
How we protect and manage your personal information in line with GDPR and Danish data protection laws.
Effective Date: 1 January 2025
Last Updated: 1 January 2025
Data Controller
This privacy policy applies to the website cantusbritaincor.info and all related services provided by Sangforeningen Cor Cantus. The data controller for this website is:
Lukasen A/S
Syrenvej 103
7620 Lemvig
Denmark
Registration Number: 25506200
VAT ID: DK25506200
Contact for Data Protection Matters:
Email: data@cantusbritaincor.info
Phone: +44 20 7946 0958
Information We Collect
Personal Information
- Contact Information: Name, email address, phone number when you contact us or register for workshops
- Registration Data: Workshop preferences, choral experience level, payment information for course registration
- Communication Records: Your correspondence with us via email, contact forms, or phone calls
- Account Information: Username and preferences if you create an account for accessing our resources
Technical Information
- Website Analytics: IP address, browser type, device information, pages visited, time spent on site
- Cookies: Session cookies for website functionality, analytics cookies (with your consent), and preference cookies
- Workshop Participation: Attendance records, participation in live sessions, access to materials
How We Use Your Information
Service Delivery
- Process workshop registrations and provide access to online sessions
- Send workshop materials, schedules, and session links
- Provide customer support and respond to your inquiries
- Process payments and manage your account
Communication
- Send important updates about workshops or schedule changes
- Notify you about new resources or workshops that may interest you
- Respond to your questions and provide educational support
Website Improvement
- Analyze website usage to improve our content and functionality
- Understand which resources are most valuable to our users
- Ensure website security and prevent misuse
Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:
- Contractual Necessity: To provide workshops and services you have registered for
- Legitimate Interest: To improve our website, analyse usage, and provide educational content
- Consent: For marketing communications and optional analytics cookies
- Legal Obligation: To comply with accounting, tax, and other legal requirements in Denmark and the UK
Data Sharing and Transfers
Third Party Services
We may share your information with trusted third parties who help us deliver our services:
- Payment Processors: Secure payment handling for workshop registrations
- Video Conferencing Platforms: To conduct online workshops (Zoom, Teams, or similar)
- Email Services: To send workshop materials and communications
- Web Analytics: To understand website usage (Google Analytics or similar, with anonymisation)
International Transfers
As a Danish company serving UK users, your data may be transferred between Denmark and the United Kingdom. Both countries provide adequate data protection under GDPR. Any transfers to other countries will only occur with appropriate safeguards in place.
Data Retention
- Contact Inquiries: Retained for 3 years after last contact
- Workshop Participants: Registration and participation data retained for 5 years for educational and accounting purposes
- Account Information: Retained until you request deletion or close your account
- Website Analytics: Anonymised data retained for 26 months
- Financial Records: Retained for 7 years as required by Danish accounting law
Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you
- Right of Rectification: Request correction of inaccurate personal data
- Right of Erasure: Request deletion of your personal data (subject to legal obligations)
- Right to Restrict Processing: Limit how we use your personal data
- Right to Data Portability: Receive your personal data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: For processing based on consent, you may withdraw at any time
To exercise any of these rights, contact us at data@cantusbritaincor.info. We will respond within one month of receiving your request.
Cookies and Tracking
We use cookies to enhance your browsing experience and analyse website usage. Our cookie policy covers:
- Essential Cookies: Required for website functionality (cannot be disabled)
- Analytics Cookies: Help us understand how visitors use our website (requires consent)
- Preference Cookies: Remember your choices and settings (requires consent)
You can manage cookie preferences through our cookie banner or your browser settings.
Data Security
We implement appropriate technical and organisational measures to protect your personal data:
- SSL encryption for all data transmission
- Regular security assessments and updates
- Access controls and staff training on data protection
- Secure backup and disaster recovery procedures
Contact and Complaints
For any privacy-related questions or to exercise your rights, contact our Data Protection Officer:
Email: data@cantusbritaincor.info
Address: Lukasen A/S, Syrenvej 103, 7620 Lemvig, Denmark
If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority:
- Denmark: Datatilsynet (Danish Data Protection Agency)
- United Kingdom: Information Commissioner's Office (ICO)
Changes to This Policy
We may update this privacy policy from time to time. Significant changes will be communicated via email to registered users and prominently displayed on our website. Continued use of our services after changes indicates acceptance of the updated policy.
Contact Information
For questions about this privacy policy or our data practices:
Sangforeningen Cor Cantus
c/o Lukasen A/S
Syrenvej 103, 7620 Lemvig, Denmark
Email: data@cantusbritaincor.info
Phone: +44 20 7946 0958