FIEH Association Privacy Policy

This Personal Data Privacy Policy governs the manner in which the FIEH Association collects, uses, maintains and discloses information collected from Data Subjects who have used our website at www.fieh.co.uk or other Data Subjects who have shared personal data with FIEH Association via the website or other means as part of our previous Educational or current Membership activities.

Definitions

i) Data Controller: the person or organisation that determines when, why and how to process Personal Data. It is responsible for establishing practices and policies in line with the GDPR. We are the Data Controller of all Personal Data relating to our Company Personnel and Personal Data used in our business for our own commercial purposes.

ii) Data Subject: a living, identified or identifiable individual about whom we hold Personal Data. Data Subjects may be nationals or residents of any country and may have legal rights regarding their Personal Data.

iii) Personal Data: any information identifying a Data Subject or information relating to a Data Subject that we can identify (directly or indirectly) from that data alone or in combination with other identifiers we possess or can reasonably access. Personal Data includes Sensitive Personal Data and Pseudonymised Personal Data but excludes anonymous data or data that has had the identity of an individual permanently removed. Personal data can be factual (for example, a name, email address, location or date of birth) or an opinion about that person's actions or behaviour.

iv) Processing or Process: any activity that involves the use of Personal Data. It includes obtaining, recording or holding the data, or carrying out any operation or set of operations on the data including organising, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transmitting or transferring Personal Data to third parties.

Data Subject's rights and requests

Data Subjects have rights when it comes to how we handle their Personal Data.  These include rights to:

1. withdraw Consent to Processing at any time;
2. receive certain information about the Data Controller's Processing activities;
3. request access to their Personal Data that we hold;
4. prevent our use of their Personal Data for direct marketing purposes;
5. ask us to erase Personal Data if it is no longer necessary in relation to the purposes for which it was collected or Processed or to rectify inaccurate data or to complete incomplete data;
6. restrict Processing in specific circumstances;
7. challenge Processing which has been justified on the basis of our legitimate interests or in the public interest;
8. prevent Processing that is likely to cause damage or distress to the Data Subject or anyone else;
9. be notified of a Personal Data Breach which is likely to result in high risk to their rights and freedoms;
10. make a complaint to the supervisory authority; and
11. in limited circumstances, receive or ask for their Personal Data to be transferred to a third party in a structured, commonly used and machine readable format.

Lawfulness and fairness

We may only collect, Process and share Personal Data fairly and lawfully and for specified purposes. The GDPR legislation restricts our actions regarding Personal Data to specified lawful purposes. These restrictions are not intended to prevent Processing, but ensure that we Process Personal Data fairly and without adversely affecting the Data Subject. 

The GDPR allows Processing for specific purposes, some of which are set out below:

1. the Data Subject has given his or her Consent;
2. the Processing is necessary for the performance of a contract with the Data Subject;
3. to meet our legal compliance obligations.;
4. to protect the Data Subject's vital interests;

For example, we will hold current and archived data on students and graduates with regard to their SEH graduation status, insurance status, CPD activities and BCMA membership status as part of our legal requirement as an educational organisation and professional organisation.  As such, this information cannot be deleted as it serves a legitimate purpose. 

Purposes for Collecting Personal Data

FIEH Association collects, uses, maintains and discloses information collected from Data Subjects for the following purposes:

• Send newsletter updates to consenting subscribers
• Fulfill any legal or insurance obligations to existing Members or previous students of the FIEH educational institution
• Update Graduates and other Past Students on Association and community news
• Fulfill any legal obligations to existing Trustees of the FIEH Association

Personal identification information

We may collect personal identification information from Data Subjects in a variety of ways, including, but not limited to, when a Data Subject visits our website, subscribes to the newsletter, fills out a form, and in connection with other activities, services, features or resources we make available on our Site or that we present via email (e.g. Practitioner Registration forms, Market Research Questionnaires). We will collect personal identification information from Data Subjects only if they voluntarily submit such information to us. Data Subjects can always refuse to supply personally identification information, except that it may prevent them from engaging in certain Site related activities or Association services.

Non-personal identification information

We may collect non-personal identification information about Data Subjects whenever they interact with our Site via our own and third party cookies (e.g. Google Analytics website analytics cookies). Non-personal identification information may include the browser name, the type of computer and technical information about Data Subjects means of connection to our Site, such as the operating system and the Internet service providers utilized and other similar information.

Web browser cookies

Our Site may use “cookies” to enhance the website user’s experience. The website user’s web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. The website user may choose to set their web browser to refuse cookies, or to be alerted when cookies are being sent. If they do so, note that some parts of the Site may not function properly.  For the purposes of the FIEH website, we use cookies to support our back-office administration area (for FIEH Trustees use only) and to track website users behaviour on our website via Google Analytics.  This information is anonymised and does not supply the name or personal contact data of the website user.

How we use collected information

FIEH Association may collect and use a Data Subject’s personal information for the following purposes:

• – To improve Full or Associate Member service
  Information you provide helps us respond to Member requests and support needs more efficiently.
• – To send periodic emails
  We may use the email address to respond to their inquiries, questions, and/or other requests. If a Data Subject decides to opt-in to our mailing list, they will receive emails that may include Association news, updates, surveys, related product or service information, etc. If at any time the Data Subject would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email or a Data Subject may contact us via our Site.

How we protect your information

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our Site and on our Back Office Systems.

Sharing your personal information

We do not sell, trade, or rent Data Subject personal identification information to others. We may use third party service providers (for example Mailchimp email newsletter service provider) to help us operate our not-for-profit Association activities and the website or administer activities on our behalf, such as sending out newsletters or surveys. We may share your information with these third parties for those limited purposes provided that you have given us your permission.

Third party websites

Users may find advertising or other content on our Site or in our Emails that link to the sites and services of past Graduates or those listed on the FIEH Practitioners Register. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from our Site. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our Site, is subject to that website’s own terms and policies.

Changes to this privacy policy

FIEH Association has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage Data Subjects to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.  However, if there is a significant change, it is likely we will notify you directly.

Your acceptance of these terms

By using our Site, you signify your acceptance of our Privacy policy for all aspects relating to activities on our website. If you do not agree to this Policy, please do not use our Site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes.

If you have signed up as an Association Member or receive our Newsletter your personal data is also covered by this Policy.  If you do not accept any aspect of this new Policy then it is up to you to let us know and discuss any Personal Data changes you may want to make.

Requesting Changes to your Personal Data held by FIEH Association

To request an amendment, change or deletion to your personal data, you may:

1. Use our newsletter unsubscribe link to stop any further communication via our newsletter
2. Write to info@fieh.co.uk with your request.  Please note that any Personal data must be processed lawfully, fairly and in a transparent manner in relation to the Data Subject. (see previous section on Lawfulness and fairness)

Before we can make any changes to your personal data, we must verify your identify or the legality of an individual requesting a data change on your behalf.

Contacting us

If you have any further questions about this Personal Data Privacy Policy, please contact us at info@fieh.co.uk

This document was last updated on 1^st May 2018
 

Disclaimer

The material contained on this web site is provided for general information only and does not constitute any form of advice. The FIEH Association assumes no responsibility for the accuracy of any particular statement and accepts no liability for any loss or damage which may arise from reliance on the information contained on this site.

This website and its use is governed by the laws of England and Wales and English courts which shall have exclusive jurisdiction over any disputes.

Amendment of Privacy policy template created by privacypolicies.com