Major Projects Association (“MPA”, “we”, “us”, or “our”) is strongly committed to protecting personal data. This privacy statement describes why and how we collect and use personal data and provides information about individuals’ rights. It applies to personal data provided to us, both by individuals themselves or by others. We may use personal data provided to us for any of the purposes described in this privacy statement or as otherwise stated at the point of collection. Personal data is any information relating to an identified or identifiable living person. MPA processes personal data for numerous purposes, and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each purpose may differ.
When collecting and using personal data, our policy is to be transparent about why and how we process personal data. To find out more about our specific processing activities, please go to the relevant sections of this statement.
The purpose of the Association is statement “To improve the initiation and delivery of major projects through the interaction of members from all sectors in sharing experience, knowledge and ideas.
” We believe this gives us the legal basis for processing data related to membership benefits either because membership of the Association demonstrates “legitimate interest”*, or where the data subject has given consent to the processing of their data. We only process data for the purposes of delivering member benefits.
Third party organisations
The Major Projects Association will not pass your details to third parties except where you have given express permission or for the effective delivery of our events (for example dietary requirements will be shared with external venues and caterers).
Providers of applications/functionality, data processing or IT services
We use third parties to support us in providing our services and to help provide, run and manage our internal IT systems. For example, providers of information technology, cloud based software as a service providers, identity management, website hosting and management, data back-up, security and storage services. The servers powering and facilitating that infrastructure are located in secure data centres around the world, and personal data may be stored in any one of them. This includes (but not limited to) Lede Ltd, DMI Imaging, Studio 24 and Span Networks.
Organisations that otherwise assist us in providing goods, services or information
Event venues, auditors and other professional advisers.
Individuals’ rights and how to exercise them
Individuals have certain rights over their personal data and data controllers are responsible for fulfilling these rights.
Access to personal data
You have a right of access to personal data held by us as a data controller. This right may be exercised by emailing us at email@example.com. We will aim to respond to any requests for information promptly, and in any event within the legally required time limits.
Amendment of personal data
You have the right to review and amend your personal data. You can do this by logging onto our website and going to the ‘my profile’ page, or by emailing us at firstname.lastname@example.org.
Withdrawal of consent
You have the right to withdraw consent to our processing of your personal data at any time. To do this please email us at email@example.com or, to stop receiving an email from a us, please click on the unsubscribe link in the relevant email received from us.
Erasure (‘Right to be forgotten’)
You have the right to request that the business delete your personal data in certain circumstance Examples of these are: withdrawal of consent when consent was basis of collection; no longer necessary for purposes collected; no overriding legitimate grounds. Each case must be judged on its merits.
We hope that you won’t ever need to, but if you do want to complain about our use of personal data, please send an email with the details of your complaint to firstname.lastname@example.org. We will look into and respond to any complaints we receive. You also have the right to lodge a complaint with the Information Commissioner's Office (“ICO”) (the UK data protection regulator). For further information on your rights and how to complain to the ICO, please refer to the ICO website.
Data controller and contact information
The data controller is the Major Projects Association, Registered Company Number: 2157656. Registered address at 1 Abbey Park Lodge, Abbey Street, Eynsham, OX29 4FN.
If you have any questions about this privacy statement or how and why we process personal data, please contact:
1 Abbey Park Lodge Abbey Street Eynsham, OX29 4FN
Phone: 01865 818030
Legitimate interest – where the processing is necessary for the purposes of legitimate interest pursued by Data Controller
i.e. in order for us to inform you of your member benefits