GALBA Privacy Policy

GALBA’s privacy policy tells you what you can expect us to do with your personal information when you give it to us or sign up to become a member.

1 General Information

This policy will tell you:

How we collect your information
What purpose we are processing it for
Whether there are other recipients of your personal information
Whether we intend to transfer it to another country

2 Contact Information

GALBA is the ‘data owner’ and GALBA’s Membership Secretary is the ‘data controller’ for the personal information we process. You can contact us by email:

GalbaUK@protonmail.com Please put in the subject line: ‘Data Protection Officer’.

3 How do we get information?

The personal information we process is provided to us directly by you for one of the following reasons:
You have signed up as a member of GALBA
You wish to attend, or have attended, an event organised by GALBA

4 What purpose are we processing it for?

We will process your data for the purpose of:

Communicating about campaign activity and related correspondence
Keeping in touch with relevant news and related correspondence

5 Your Data Protection rights

Under data protection law, you have rights that we need to make you aware of. The rights available to you depend on our reason for processing your information.

A Your right of access

You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
You can read more about this on the ICO website.

B Your right to rectification

You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

C Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances.
D Your right to restriction of processing

You have the right to ask us to restrict the processing of your information in certain circumstances.
E Your right to object to processing

You have the right to object to processing, if we are able to process your information because the process forms part of our legitimate interests. You can read more about this on the ICO website.
F Your right to data portability

You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about, entering into a contract and the processing is automated.
You are not required to pay any charge for exercising your rights. We have one month to
respond to you.

Please contact us at: GalbaUK@protonmail.com if you wish to make a request.

6 Sharing your information
We will not share your information with any third parties for any purposes without your consent.
GALBA committee members are ‘data processors’. The ICO defines a ‘data processor’, in relation to personal data, as any person (other than an employee of the data controller) who processes the data on behalf of the data controller.

‘Processing’, in relation to information or data, means obtaining, recording or holding the information or data or carrying out any operation or set of operations on the information or data, including:

organisation, adaptation or alteration of the information or data,
retrieval, consultation or use of the information or data,
disclosure of the information or data by transmission, dissemination or otherwise
making available, or
alignment, combination, blocking, erasure or destruction of the information or data
In brief, this means we store your data in an online database, which committee members may access, and we use software like Protonmail to send you emails and What’s App messages.

Where we contract with third parties for storing your data, their servers may be located outside the UK and EU (in the USA). When this is the case, we ensure the contracts we have in place with those third parties meet the requirements of the GDPR.
In some circumstances we are legally obliged to share information. For example, under a court order (where we have considered we have a lawful basis on which to share the information and document our decision making).

Leeds Bradford Airport is big enough already