ROSA UKEU

GDPR & Privacy Policy

This policy complies with the requirements of UK GDPR, UK Data Protection Act (DPA (2018)), and the EU General Data Protection Regulation (GDPR (Regulation (EU) 2016/679)).

  1. ROSA UKEU Community Group is committed to protecting the privacy and security of your personal information.
  2. This privacy notice describes how we collect and use personal information about you during and after your working relationship with us, in accordance with DPA and GDPR.
  3. It applies to all members of the ROSA UKEU Community Group. ROSA UKEU Community Group is a "data controller". This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.

This notice applies to members of ROSA UKEU Community Group. This notice does not form part of any contract of employment or other contracts to provide services. We may update this notice at any time. It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you so that you are aware of how and why we are using such information.

Data protection principles

We will comply with data protection law. This says that the personal information we hold about you must be:

  1. Used lawfully, fairly and in a transparent way.
  2. Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
  3. Relevant to the purposes we have told you about and limited only to those purposes.
  4. Accurate and kept up to date.
  5. Kept only as long as necessary for the purposes we have told you about.
  6. Kept securely.

How is your personal information collected?

We collect personal information about members through the application and registration process, either directly from candidates or sometimes from a third party.

What information do we hold?

We may hold the following categories of personal information about you:

  • Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses.
  • Date of birth.
  • Information about your membership.
  • Details of your participation in events and activities.

How we use your information

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

  • Where we need to perform the contract we have entered into with you.
  • Where we need to comply with a legal obligation.
  • Where it is necessary for our legitimate interests (or those of a third party).

Data retention

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your rights

Under certain circumstances, by law you have the right to:

  • Request access to your personal information (commonly known as a "data subject access request").
  • Request correction of the personal information that we hold about you.
  • Request erasure of your personal information.
  • Object to processing of your personal information where we are relying on a legitimate interest.
  • Request restriction of processing of your personal information.
  • Request the transfer of your personal information to another party.

Contact

If you have any questions about this privacy notice or how we handle your personal information, please contact us at info@rosaukeu.org.