Privacy Policy

Effective Date: 1 January 2025
Last Updated: 1 January 2025

Data Controller

This privacy policy applies to the website cantusbritaincor.info and all related services provided by Sangforeningen Cor Cantus. The data controller for this website is:

Information We Collect

Personal Information

• Contact Information: Name, email address, phone number when you contact us or register for workshops
• Registration Data: Workshop preferences, choral experience level, payment information for course registration
• Communication Records: Your correspondence with us via email, contact forms, or phone calls
• Account Information: Username and preferences if you create an account for accessing our resources

Technical Information

• Website Analytics: IP address, browser type, device information, pages visited, time spent on site
• Cookies: Session cookies for website functionality, analytics cookies (with your consent), and preference cookies
• Workshop Participation: Attendance records, participation in live sessions, access to materials

How We Use Your Information

Service Delivery

• Process workshop registrations and provide access to online sessions
• Send workshop materials, schedules, and session links
• Provide customer support and respond to your inquiries
• Process payments and manage your account

Communication

• Send important updates about workshops or schedule changes
• Notify you about new resources or workshops that may interest you
• Respond to your questions and provide educational support

Website Improvement

• Analyze website usage to improve our content and functionality
• Understand which resources are most valuable to our users
• Ensure website security and prevent misuse

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: To provide workshops and services you have registered for
• Legitimate Interest: To improve our website, analyse usage, and provide educational content
• Consent: For marketing communications and optional analytics cookies
• Legal Obligation: To comply with accounting, tax, and other legal requirements in Denmark and the UK

Data Sharing and Transfers

Third Party Services

We may share your information with trusted third parties who help us deliver our services:

• Payment Processors: Secure payment handling for workshop registrations
• Video Conferencing Platforms: To conduct online workshops (Zoom, Teams, or similar)
• Email Services: To send workshop materials and communications
• Web Analytics: To understand website usage (Google Analytics or similar, with anonymisation)

International Transfers

As a Danish company serving UK users, your data may be transferred between Denmark and the United Kingdom. Both countries provide adequate data protection under GDPR. Any transfers to other countries will only occur with appropriate safeguards in place.

Data Retention

• Contact Inquiries: Retained for 3 years after last contact
• Workshop Participants: Registration and participation data retained for 5 years for educational and accounting purposes
• Account Information: Retained until you request deletion or close your account
• Website Analytics: Anonymised data retained for 26 months
• Financial Records: Retained for 7 years as required by Danish accounting law

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of inaccurate personal data
• Right of Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your personal data
• Right to Data Portability: Receive your personal data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: For processing based on consent, you may withdraw at any time

To exercise any of these rights, contact us at data@cantusbritaincor.info. We will respond within one month of receiving your request.

Cookies and Tracking

We use cookies to enhance your browsing experience and analyse website usage. Our cookie policy covers:

• Essential Cookies: Required for website functionality (cannot be disabled)
• Analytics Cookies: Help us understand how visitors use our website (requires consent)
• Preference Cookies: Remember your choices and settings (requires consent)

You can manage cookie preferences through our cookie banner or your browser settings.

Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• SSL encryption for all data transmission
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure backup and disaster recovery procedures

Contact and Complaints

For any privacy-related questions or to exercise your rights, contact our Data Protection Officer:

Email: data@cantusbritaincor.info
Address: Lukasen A/S, Syrenvej 103, 7620 Lemvig, Denmark

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority:

• Denmark: Datatilsynet (Danish Data Protection Agency)
• United Kingdom: Information Commissioner's Office (ICO)

Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email to registered users and prominently displayed on our website. Continued use of our services after changes indicates acceptance of the updated policy.

Contact Information

For questions about this privacy policy or our data practices:

Sangforeningen Cor Cantus
c/o Lukasen A/S
Syrenvej 103, 7620 Lemvig, Denmark
Email: data@cantusbritaincor.info
Phone: +44 20 7946 0958