This document has been prepared by UK Leather Federation (trading as Leather UK) for our members and all interested parties to clarify the steps we have taken to ensure we comply with the new GDPR legislation. Its purpose is to provide an overview of our Data Protection policy, covering the processing and protecting of Personal Data in order to provide agreed services to the members and all other parties we contact in relation to our role as a national trade association.
Leather UK is both a Data Controller and Data Processor in relation to the services it provides. We are not required to appoint a Data Protection Officer under the new legislation; for any queries relating to our data processing please email info@leatheruk.org.
Of the six available lawful bases for processing data under the GDPR legislation, Leather UK considers that the processing of the data it holds in order to carry out the administration of the membership scheme and provide other agreed services to the members is that of “performance of a contract with the data subject”.
Furthermore, Leather UK considers that the processing of the data it holds in order to carry out the general marketing activities is that of “legitimate interest” and also “to take steps to enter into a contract”.
As a member of Leather UK or an associated party, you may volunteer your personal data information when using our website, emailing us, interacting with us on social media, or registering for information or events.
The data we collect can include your organisation’s name, salutation, first name, last name, job title, postal address, number of employee’s, company turnover, dates of study (where relevant), telephone number(s), e-mail address (es), social media account address(es), website address and photographs.
The information that you provide us with will be used for the purpose of contacting you and/or providing you with relevant and updated information about our organisation, its activities and positions.
Leather UK processes identification data from individuals who register themselves on websites managed by Leather UK and give their express consent to receive newsletters or information from Leather UK.
Leather UK processes identification details of individuals who register to participate to events and conferences it organises for the purpose of managing the registration, invoicing and participation to such events under the general terms and conditions that are expressly accepted by the individuals and/or based on consent for certain personal data. Your consent will be specifically asked for photos or multimedia content that may enable the recognition of participants at events.
Your personal data will be kept as long as you are a designated person of your organisation in relation with Leather UK or its members and, otherwise provided by law, for the time that is strictly necessary to achieve the purpose(s) for which they were collected.
You can submit a Subject Access Request for all data held on you or your organisation at any time by emailing info@leatheruk.org.
Should you wish to withdraw your prior informed consent, rectify or remove any of the information that we hold about you or your organisation, please contact us at: info@leatheruk.org.
Leather UK does not share or sell any personal data to third parties for any commercial purposes. Your personal data will not be shared with any other third parties unless we would be required to do so by law or to comply with a court order served upon us in connection with our website(s), social media, the implementation of the EU GDPR or to protect and defend our legal rights and interests and those of our members.
The processing of the Personal Data stored and processed by Leather UK has been assessed as presenting very limited risks for fundamental rights, due to the fact that only professional information is used with adequate security measures in place to prevent data breaches.
Leather UK treats all data held with care and security. Any details you give will remain confidential.
Our websites or social media channels may use tracking techniques such as cookies for collecting technical information about your use for the purpose of improving and tailoring their content and making it more user-friendly. Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However in a few cases some of our website features may not function as a result.
When interacting with our social media channels your consent and personal data use are covered by the terms and conditions and privacy policies of each of these social media platforms.
Our website, social media channels and electronic communication tools may also contain links to websites or social media channels of third parties. These links are provided for your information and convenience only. Leather UK does not endorse, approve or take any responsibility for the websites or social media channels which we provide links to. We also do not endorse, approve or take any responsibility for their availability, performance, content or for the use of such websites or social media channels or any information contained therein.
Leather UK’s data privacy policy applies only to Leather UK’s data storage and processing methods, website and electronic communication media and not to any other websites or media that you would access by hyperlink from our website or our social media. When you leave our website by linking to another site or through social media, you should read the privacy policy, if any, provided by such website or media.
Leather UK make no warranty that the contents of our online platforms are free from infection by viruses or anything else which has contaminating or destructive properties and shall have no liability in respect thereof.
The data we hold contains personal contact details and occasionally corporate bank account details. Sensitive Personal Data is not collected or stored.
This data is held in a range of formats – paper files, archived paper files and IT server-based internal networks. Electronic data is stored on a single database, with data also stored in other directories on the same server, for example, for invoice correspondence. Our IT server is housed in a dedicated, locked room and the internet router has a firewall. The server and hardware are protected with anti-virus software. All IT equipment is password protected and access is restricted to the relevant staff. We do not process or hold data outside the European Economic Area (EEA).
Physical data stored held at our office is secured in locked cabinets in locked offices. Our office is secure with keypad entry and alarms.
For any further information on our data practices please email info@leatheruk.org or write to UK Leather Federation, Leather Trade House, Kings Park Road, Moulton Park, Northampton, NN3 6JD.
