Your rights
The GDPR sets out a number of rights that you as a member have over your data and your privacy. Below is a brief overview as they relate to your membership and interaction with the Union. We will need to verify your identity before we are able to fulfil each right request.
Right to be informed – We must inform you about our collection and use of your personal data and we do this through our privacy notice as well as at the point of collection.
Right of access – You have the right to access your personal data that we hold about you. If you prefer you can make a subject access request (SAR) for all or parts of your data. The Union will respond to your subject access request within 30 days, in line with relevant legislation. To request a copy of the data we hold about you, please send your request to the Data Protection Officer at the above address, or email [email protected] and include the following information: your NEU membership number (if known), your full name and address and a description of the data required, including the date range.
Right to erasure (also known as right to be forgotten) - You have the right to request deletion of all or some of the data we hold on you where it is no longer necessary for the data controller to retain such data. We will always seek to comply with your request, unless we are required to retain data for legal, accounting, or reporting requirements. However, where appropriate, data will be anonymised.
Right to rectification – You have the right to request that we correct any personal data if it is found to be inaccurate. As a member you can update your details using MyNEU. You can also do this by contacting [email protected].
Right to restrict processing – Where there is a dispute in relation to the accuracy or processing of your personal data, you have the right to request a restriction is placed on further processing of your data; This right is not absolute and is subject to our review of your request as well as assessing if it is feasible for us to comply.
Right to data portability – If you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can request a copy of that personal data to transfer to another data controller where technically feasible.
Right to object – You have the right to request we stop processing (using) your data for certain purposes. These include direct e-mail marketing.
Rights in relation to automated decision making and profiling – You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We currently do not make such decisions based on these methods.
However, we do collect information on your communication preferences as outlined in ‘our purposes’ section which helps us target our communications to you in the most effective way.
Monitoring – We monitor all emails sent to us for viruses and malicious software. In order to make sure we follow your instructions correctly and to improve our service to you through proper training of our staff, we may monitor or record communications.
The NEU is committed to upholding your rights as a data subject. If you have any concerns with our processing of your data, please email [email protected] or write to the Data Protection Officer, Kathy Monah at the above address.
You also have the right to complain to the Information Commissioner’s Office (ICO).
