Privacy Policy

TUIC is committed to safeguarding the privacy of everyone who uses our services. This policy sets out how we will use your personal data.

This policy reflects our duties under the General Data Protection Regulation 2016 (GDPR), the Data Protection Act (1998) and all applicable Privacy and Electronic Communication Regulations. It describes how we use personal data fairly, keep it secure, make sure it is accurate and uphold your rights as a data subject.

This policy does not apply to other organisations to which we may link and whose privacy policies may differ.

Please read the following policy to understand how your personal information will be treated. It may change from time to time, so please check back periodically. It was last updated in November 2022.

Who we are

TUIC is the data controller for the information you provide. Our address is: TUIC Hub, Commercial Unit 1, Wauchope Avenue, Edinburgh, EH16 4BJ

TUIC’s Data Protection Officer can be contacted administration@tuic.org.uk

How TUIC uses your personal data

We routinely use your personal data for the following purposes:

• The lawful basis for this processing is TUIC pursuing our legitimate interests as a community enterprise. We may also use legitimate interest as our lawful basis for the following data processing:
• Holding your data on our membership database.
• Sending you the regular newsletter and other relevant event information.
• Administering membership benefits and determining your eligibility for these benefits.
• Equality monitoring.
• Statistical analysis of our enquirers request for support.

Accessing your personal data within TUIC

Some of your personal data will be available to TUIC’s employees, volunteers, board members and others formally instructed by TUIC for the purposes of carrying out our business.

The type of personal data shared will be relevant to the purpose for which the data is used, so for example, unless you have expressly asked us not to.

Data security

TUIC uses industry standard efforts to safeguard the confidentiality of your personally identifiable information, such as firewalls and SSL (secure socket layers). We make every effort to protect the loss, misuse and alteration of information under our control. However, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.

TUIC takes data security extremely seriously. Any data protection breaches are handled in line with our TUIC breach reporting policy

Sharing your personal data with third parties

By third parties, we mean organisations that are not TUIC.

We share your information with third parties such as:

• Trade Union partners that we may direct you too.
• Mailing houses that print and send our communications to you.
• GoDaddy – if you opt in to email communications from TUIC. This is the company we use to send electronic mailings.
• GoDaddy– this is a company we use for web hosting, web design and app design services.
• We very occasionally share personal data with organisations working to detect or prevent crime, such as the police.

Transfers overseas and safeguards

We do not routinely transfer your data outside of the UK. Where it is necessary, we ensure appropriate data protection measures are in place.

Retention of data

Retention means how long we keep your data for. We do this in accordance with TUIC’s data retention policy.

Your rights as a data subject

You have rights as a data subject. These rights are:

1. The right to be informed – this means we must inform you how we are going to use your personal data. We do this through this privacy policy and by informing you how your data will be used each time we collect it.
2. The right of access – you have the right to access your personal data (e.g. data that is about you) that we hold. This is called a subject access request. We must respond to your request within one month. To request access to your data, please email administration@tuic.org.uk It is very helpful if you tell us what of your personal data you are seeking.
3. The right to rectification – if you think the data we hold on you is incorrect, tell us so we can put it right. The right to erasure – you have the right to request that we delete your data. We will do so, provided that we do not have a compelling reason for keeping it. To request this, please email administration@tuic.org.uk
4. The right to restrict processing – you can change your communication preferences (therefore restricting how we communicate with you).To request this, please email administration@tuic.org.uk
5. The right to data portability – you can obtain and reuse your personal data for your own purposes across different services. To request this, please email administration@tuic.org.uk
6. The right to object – you have the right to object to
   a) Direct marketing from TUIC or from third parties we have shared your data with for direct marketing purposes. You can opt out of direct marketing any time by emailing administration@tuic.org.uk or contacting your local hub. There will also be instructions on how to unsubscribe included in any direct marketing message that we send to you.
   b) Any processing where our lawful basis is legitimate interest (see above).If you would like to formally object to any of our legitimate interest processing, please email administration@tuic.org.uk
7. Rights in relation to automated decision making and profiling – this is not something we do at TUIC. If that ever changes, this policy will be updated accordingly.
8. At TUIC we are committed to upholding your rights as a data subject. If you think we have not done so, please contact administration@tuic.org.uk
9. You may also complain to the Information Commissioner’s Office (ICO) if you believe your rights have not been upheld. The ICO is the data protection regulator and their website is: www.ico.org.uk.

Consent

There are some types of data processing that we only do if you have given us your consent. These are:

• Sending direct marketing messages by email.
• Sharing your data with the trade union partners as part of the services we offer.

You are in control of what consent you give us. You can withdraw your consent at any time by emailing administration@tuic.org.uk

or contacting your local TUIC hub. There will also be instructions on how to unsubscribe included in any direct marketing message that we send to you.

Data collected on our website

Personal data collected by this website will only be used for the purposes (or closely related purposes) for which it was collected.

We may use your personal information to:

• Administer the website.
• Improve your browsing experience by personalising the website.
• Enable your use of the services available on the website.
• Deal with enquiries and complaints made by you relating to the website.
• 
  

Email

All emails that we send you are tracked.  This helps us to ensure that you only receive emails from us that are of interest to you.  You can unsubscribe from emails at anytime by clicking the ‘unsubscribe’ button at the bottom of an email.

Cookies

When on our website, data may be stored on a “cookie”. This is a tiny element of data that our site can send to your browser, which may then be stored on your hard drive. This small amount of information does NOT contain any private information stored on your computer.

Like most websites, TUIC’s uses cookies to improve our users’ experience.  We ask when you first access our site if you are happy for cookies to be used. If you choose not to use cookies, it may be difficult to use some parts of our website.

Social media buttons

On many of the pages of the site you will see ‘social buttons’, such as share buttons for Twitter, You Tube ‘Like’ buttons or subscription buttons. When you click on any of these buttons, these sites will be registering that action and may use that information. You should check the respective policies of each of these sites to see how exactly they use your information and to find out how to opt out, or delete, such information.

External web services

We use a number of external web services on the TUIC site, mostly to display content within our web pages. For example, to display images we sometimes use Instagram; to show videos we use YouTube. This is not an exhaustive or complete list of the services we use, or might use in the future, when embedding content, but these are the most common. As with the social buttons, these sites may use information about usage of embedded content. If you are not logged in to these external services, then they will not know who you are but are likely to gather anonymous usage information e.g. number of views, plays, loads etc.