1. Our fundamental principles concerning user privacy and data protection are as follows:

- User privacy and data protection are considered basic human rights;
- We are responsible for ensuring the well-being of individuals whose data we possess;
- Data is viewed as a responsibility, and should only be gathered and utilized when essential;
- We strongly dislike unsolicited emails just like you do!
- Your personal information will never be sold, leased, or shared with others in any way.

2. Applicable laws
In addition to our business operations and internal computer systems, this website has been developed to adhere to various national and international laws concerning data protection and user privacy, including:
- Irish data protection regulations;
- EU Data Protection Directive 1995 (DPD);
- EU General Data Protection Regulation 2018 (GDPR);
By complying with the aforementioned laws, all of which are rigorous, this website is likely in accordance with data protection and user privacy laws established by numerous other countries and regions. If you are uncertain about whether this website complies with the specific data protection and user privacy laws of your country of residence, please reach out to us via our contact form for further clarification.

3. The collection and purpose of personal information on this website
This website gathers and utilizes personal information for the following purposes:
3a. Tracking site visits
Similar to most websites, this site utilizes Google Analytics (GA) to monitor user engagement. We utilize this data to determine the volume of individuals using our site, to gain a better understanding of how they discover and utilize our web pages, and to observe their navigation through the website. While GA records data such as your geographical location, device, internet browser, and operating system, none of this information personally identifies you to us. GA also records your computer’s IP address, which could potentially be used to personally identify you, but Google does not provide us with access to this. We consider Google to be a third-party data processor (see section 6.0 below). GA utilizes cookies, the specifics of which can be found on Google’s developer guides. Please note that our website uses the analytics.js implementation of GA. Disabling cookies on your internet browser will prevent GA from tracking any aspect of your visit to pages within this website.

3b. Our booking and payment system utilizes the Stripe payments processor and the Strikingly platform for table reservations and ticket purchases. Your data will be stored on the Stripe platform and/or our website until the reservation or purchase process is completed. If you wish to have your personal data permanently deleted, please contact us through our contact form and provide the email address used for your reservation or purchase. If you are under 16 years old, parental consent is required for any reservation or purchase made on our website.
3c. When using the contact form on our website to reach out to us, none of the data you provide will be processed by any third-party data processors. Instead, the information will be compiled into an email and sent to us via the Simple Mail Transfer Protocol (SMTP). Our SMTP servers are protected by TLS (also known as SSL), ensuring that the email content is encrypted using SHA-2, 256-bit cryptography before being transmitted over the internet. The email content is then decrypted by our local computers and devices. However, not all mail servers are secured in the same manner, so we advise against including personal, confidential, or sensitive information in emails, as email is considered an insecure medium.

4. The personal information you provide when making a reservation on this website will be stored in the website's database, as explained in section 3.2. Currently, this is the only instance where personal data is stored on the website. The data is stored in an identifiable manner due to the limitations of the Strikingly platform on which the website is built. We plan to transition to pseudonymous storage soon, requiring additional processing with a separate 'key' to identify individuals. This change aligns with GDPR requirements and is a priority for us to implement promptly.
5. The server hosting this website is located in Chicago, USA, and is managed by Strikingly. For more information on the privacy and GDPR compliance of our hosting provider, please visit their website.
6. We engage a third-party processor to handle personal data on our behalf. This carefully selected third party complies with the regulations outlined in section 2.0, is based in the USA, and adheres to EU-U.S Privacy Shield standards. You can access Google's Privacy Policy by clicking here.
7. In the event of any unauthorized data breach in the website's database or that of our third-party processors, we will promptly notify relevant individuals and authorities within 72 hours if personal data is compromised or stored in an identifiable manner.
8. The data controller for this website is Silent Cinema Galway, located at 60 Dominick Street Lower, Galway, Ireland.

9. Data Protection Officer: Contact

10. Privacy Policy Updates
Our privacy policy is subject to occasional changes in accordance with legal requirements and industry advancements. We do not provide direct notification to our clients or website users regarding these modifications. We advise you to periodically review this page for any policy updates.

Last update: 17th of July 2024

Hi there!