Teatru Astra (hereby refered to as "we", "our" and "teatruastra.org.mt") is committed to safeguard and ensure the safety of your personal information. We we want to explicitly and transparently list what information is being gathered, why it's being collected and how it's being used. This policy is in line with Malta's Data Protection Act 2001 and EU's General Data Protection Regulation (GDPR) (effective from May 25th, 2018).
We collect data in the following ways:
When you purchase a ticket for an event performance or purchase a membership, we collect the following personal information: full name, address, city, postal code, email address, and phone number. This is voluntarily provided by you during your purchase. For event booking, your booking requirements are also stored (including seat number, ticket type and price).
In addition to this, your payment data (including credit/debit card type, expiration date, some digits from your card number) are stored and processed by a Level 1 PCI compliant service provider. These are not kept anywhere on our system, and are used only when fulfilling the ticket or membership purchase. All this information is sent encrypted using SSL/TLS which secures the transaction and prevents any man-in-the-middle attacks while your purchase is being processed.
We collect several pieces of information regarding the use of the website, using log files or cookies (read more about cookies). These include the pages that you accessed and the documents you downloaded, the date and time you visited the website, the domain name of the computer from which you accessed the website, the operating system of the machine on which your web browser is running, and the type of web browser you are using. This non-personal and non-identifiable information is strictly for the sole use of teatruastra.org.mt and will not be released to any third parties without prior consent, unless teatruastra.org.mt is compelled to do so by law.
We keep your personal information for as long as necessary in order to provide the services requested, extract non-identifiable information to help drive our business decisions, to abide by legal obligations, and to resolve any disputes, issues or answer queries concerning one's bookings or membership purchases. Upon your request, we will proceed with the deletion of any personal information concerning yourself from our system. Furthermore, if you request, we can provide you with a copy in machine-readable format of all your data currently stored on our end.
While every effort is done to protect the privacy of individuals, if you feel that your privacy has been affected or have further questions do not hesitate to contact us.