Privacy Notice

This notice explains how we handle your personal data and what you can do if you have any concerns.

At the CLA, we are committed to protecting and respecting your privacy.

This notice sets out the basis on which any personal data we collect from you, that you provide to us or that we may receive from others about you will be processed by us. It includes data that we hold electronically and in paper files.

We are required to provide you with this information under the General Data Protection Regulation (GDPR).

 

HOW AND WHY WE PROCESS PERSONAL DATA

We will process data to deliver services the CLA has contracted to provide you with. If you are a member, these include administration of membership, provision of advice, promotion and administration of events, and the promotion and administration of CLA Member Services.

If you are not a member, these may include promotion and administration of membership or other CLA products and services which we believe may be of interest.

CLA Member Services are offered exclusively to CLA members with our trusted partners. Currently, these consist of CLA Foreign Exchange (provided by World First UK Ltd), CLA Healthcare (provided by Punter Southall Health and Protection Ltd), CLA Insurance (provided by Howden UK Group Ltd) and CLA Utilities (provided by LSI Independent Utility Brokers Ltd).

 

LEGAL BASIS FOR PROCESSING DATA

The legal basis for processing your personal data will be found under the following paragraphs of the GDPR: Article 6 1. (b), the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

and

Article 6 1. (f), it is in the legitimate interests of the data controller.

Our legitimate interests are the performance of our objectives, the management of our business and to make people aware of the benefits of CLA membership or other CLA services relevant to our mission. Safeguards have been put in place to ensure we achieve the correct balance between our interests and yours.

At any time, you can amend your privacy settings, including unsubscribing, at www.cla.org.uk

WHO HAS ACCESS AND WHY?

Data will be held and processed for the purposes described above.

Only those staff who have a legitimate need to access data will be authorised to do so.

RETENTION OF DATA

The data will be held for the duration of your membership, or longer where we have a legal obligation or other legitimate reason for doing so.

ACCURACY

You are able to view and update the data we hold on you via the CLA website. From time to time we will invite you to check that everything is correct and up to date.

 

YOUR RIGHTS

You have a number of rights under the GDPR.

 

RIGHT OF ACCESS

You have the right, subject to a number of exceptions, to know what information we hold about you. Unless the issue is complex, we will respond within one month.

 

RIGHT TO RECTIFICATION

You have the right to have any information we hold about you corrected if it is inaccurate or incomplete. Unless the issue is complex, we will respond within one month.

 

RIGHT TO ERASURE

You have the right to request the deletion or removal of personal data where there is no compelling reason for us to continue to hold it.

 

RIGHT TO RESTRICT PROCESSING

You have the right to restrict our processing of your data in certain circumstances, such as when there is a question over the way in which we are using it.

 

RIGHT TO DATA PORTABILITY

You have the right to obtain and reuse your personal data for your own purposes.

 

RIGHT TO OBJECT

You have the right to object to our processing of your personal data on the basis of legitimate interest, for direct marketing and for the purposes of research.

We will stop processing your data on the basis of legitimate interest unless there are compelling legitimate grounds for us to continue.

We will stop any processing of your data for direct marketing as soon as we receive an objection.

We will stop processing your personal data for research purposes if there are grounds that relate to your particular situation.

 

AUTOMATED PROCESSING

We will not make any decision regarding you or your membership by purely automated means.

 

FURTHER INFORMATION

Further details of our data protection policies can be found at www.cla.org.uk

Any questions, comments or requests regarding this privacy notice should be addressed to privacy@cla.org.uk

 

COMPLAINTS

If you are not satisfied with the way in which we manage your personal data, you can seek recourse through the CLA Complaints Procedure (available via the CLA website or on request from a CLA office).

If you remain dissatisfied, you have the right to refer the matter to the Information Commissioner. The Information Commissioner can be contacted at:

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

TEL: 01625 545745

FAX: 01625 524510

EMAIL: enquiries@ico.gsi.gov.uk