Data Privacy Notice
The purpose of this notice is to inform you how we manage and process your personal data in compliance with General Data Protection Regulations (GDPR) and in accordance with our stated Privacy Statement.
FOR INDIVIDUALS EMPLOYED BY MEMBER BUSINESSES/ORGANISATIONS, ASSOCIATE ORGANISATIONS AND INDUSTRY STAKEHOLDERS
ECA operates a ‘legitimate interest’ approach in processing the personal data that it receives from member businesses/organisations, associates and other industry stakeholders (including journalists and media representatives) in order to administer service provision, surveys and information deemed relevant. This includes, but is not restricted to the following areas: Technical, Health & Safety, Commercial/Contracts/CSR, Education/Training, Employee Relations, Energy/Environment, Specialist work areas (including Fire & Security, Audio Visual, Event Electrics, Data Comms, High Voltage, Building Controls), the ECA industry magazine (ECA Today), regional updates, commercial offers/discounts, industry events, general member/associate updates and Specifier updates.
Additionally, the ‘legitimate interest’ approach is operated in the processing and distribution of personal data of designated ECA officials, committee members, branch members, staff members, honorary officers and other relevant industry stakeholders in order to administer service provision, including but not restricted to the annual ECA Member Diary.
Without the ability to process your Personal Data, ECA is unable to arrange or administer the ‘paid for’ and subscribed services and informational expectations that are offered as part of membership status, associate status or industry stakeholder engagement.
Individuals are able to opt-out of receiving any specific type of communication at anytime by accessing their personal preference options within the MyECA area of the ECA website or by utilising the relevant links at the foot of any mass email that they receive from ECA.
If you have not directly provided your personal data to us, it may have been disclosed (or approved) to ECA by your employer, or a designated participant (usually termed the Nominated Representative) in the course of becoming an ECA member, associate or industry stakeholder. When personal data has been disclosed to ECA in this way your employer is responsible for ensuring that you have been informed of how your data will be used.
By registering or allowing the registration of your personal data with us, either personally or by a designated company participant either through our website or in any other way, you agree to us processing your personal data for specific purposes, including the areas already outlined in this policy.
In order to arrange and administer your membership, associate status or industry stakeholder needs, we will disclose some or all of your Personal Data to the ECA Group, auditors and service providers. When your Personal Data is transferred to third parties it will be done so in a secure electronic manner using encrypted files. ECA will not share your Personal Data outside the European Union. Where your Personal Data is shared for hosting purposes with third parties, such as service providers, ECA have reviewed and ensured that the relevant privacy policies are in line with our own.
We will on occasion use your contact details to keep you informed by post, email or telephone of our additional products or services and any development of these which may be of interest to you. Please note that these details may continue to be used after your member business/organisation, associate status business or industry stakeholder status has ceased, unless notified by the relevant party or yourself. If you do not wish your contact details to be used for marketing purposes as set out above, please email us at firstname.lastname@example.org or write to us at the address provided at the end of this Notice.
FOR INDIVIDUALS EMPLOYED BY NON-MEMBER OR NON-ASSOCIATE BUSINESES/ORGANISATIONS AND OTHER NON-INDUSTRY RELATED INDIVIDUALS
ECA operates an ‘explicit consent’ approach to the processing of the personal data it receives from individuals employed by non-member or non-associate organisations and individuals that are not deemed as relevant industry stakeholders.
This typically applies to those individuals that have expressed an interest in finding out about membership or associate status of ECA, or have submitted any other enquiry to ECA.
This means that we will not subscribe such individuals to receive any types of promotional communication unless they have voluntarily given their consent to receive updates from ECA at the time when the leads/enquiry is submitted.
Once consent is given individuals have the ability to opt-out from receiving further communication at any time.
Direct communication from designated individuals from ECA to progress a lead enquiry will occur independently from promotional marketing activity until the lead/enquiry has been converted or alternatively the lead subject has advised that they are no longer interested in ECA membership or associate status.
OUR DATA PROMISE
ECA will never sell your data and your details will be kept safe and secure at all times when it is within our servers. As with all data communications through the internet, where your Personal Data has been sent electronically to any third party, ECA cannot provide complete guarantees that it will remain secure, although we will take all appropriate steps to minimise risk.
Your Personal Data will not be used for unrelated profiling by ECA.
Your Personal Data will be retained in accordance with our Data Retention Policy. This Policy takes into account the purpose for which the data was collected, legal and regulatory requirements for retaining certain types of data and the reasonable record keeping requirements of ECA.
Under the General Data Protection Regulation (GDPR), you have the following rights in respect of your Personal Data that ECA processes:
- The Right to be Informed about the collection and use of your Personal Data.
- The Right to Access your Personal Data and supplementary information, including how it is being used.
- The Right to Rectification of inaccurate or incomplete Personal Data.
- The Right to Erasure of your Personal Data in certain circumstances.
- The Right to Restrict Processing of your Personal Data in certain circumstances.
- The Right to Data Portability in certain circumstances.
- The Right to Object to ECA using your data for specific purposes.
- The Right to Information on how your Personal Data is used for profiling purposes.
The Right to bring a complaint about ECA’ processing or handling of your Personal Data to the Information Commissioner’s Office (ICO). You can do this through the ICO website at https://ico.org.uk/concerns/.
If you have any questions about this Data Privacy Notice, or to make any request in accordance with your rights, please email us at email@example.com or write to us at the address given below. ECA will respond to all requests without undue delay and not later than one month after the request has been received. ECA will not charge a fee for responding to any requests in respect of your Personal Data Rights.
Electrical Contractors’ Association Ltd
24 - 26 South Park
The Data Protection Officer for ECA can be contacted by email at firstname.lastname@example.org or by post at the address above.