1. What is this policy for?
Whenever we need to collect any of your data, we will let you know at that point why we need to do so and what it will be used for, but this guide provides an overview of those situations and provides more detail on how we keep your data secure and up to date, how long we might hold it for, and what your rights are in relation to it.
The MAA is committed to protecting your personal data and will use any personal data we collect from you in line with the General Data Protection Regulations (GDPR).
2. Who’s responsible for data the MAA collects?
MAA is a Data Controller under the GDPR. Any questions relating to the collection or use of data should be directed to email@example.com.
3. What data do we collect and what do we use it for?
MAA is a not‐for‐profit organisation whose sole purpose is to assist companies in strengthening their engagement in UK aerospace, and by doing so, helping this important business sector to grow and thrive. The MAA collects contact data from individuals to help us to keep you informed of aerospace news, networking events, business opportunities and funding opportunities. Your work contact details are the only personal details we collect and hold on file. The only data published are single named company contacts in our on‐line and printed membership directory (which the MAA member contact person at a member company can edit themselves) and event attendance lists distributed to fellow attendees.
When you join the MAA as a member, or during your membership with us, we will need to collect some of the following information on you:
This data will be used by the MAA team to administer and manage your organisation’s membership of the MAA, and to invite you to participate in MAA activities.
Non‐members are also invited to participate in MAA activities, and for this reason we also hold similar contact data on file for individuals who have an aerospace interest, but are not members of MAA.
We hold no personal financial information on file, nor any information other than the means to contact you by email, post or phone. Anything we send you will include a clear option to withdraw your consent and you can also do so at any time by contacting us.
4. Do we share your data with anyone else?
Your details are never sold to third parties or used for any other purpose other than your aerospace interests. We will always make sure any third party suppliers we use (e.g. management of our on‐line website and directory) are reputable and secure, and will process your data in accordance with your rights under GDPR.
5. How can you update your data?
You can contact us at firstname.lastname@example.org at any time to find out about, update or correct the data we hold on you.
6. How long we will hold your data?
The MAA data retention policy is to review all data held on individuals at least every two years and remove data where we no longer have a legitimate reason to keep it.
Where you have withdrawn your consent for us to use your data for a particular purpose (e.g. unsubscribed from a mailing list) we may retain some of your data for up to two years in order to preserve a record of your consent having been withdrawn.
7. What rights do you have?
Under the GDPR, you have the following rights over your data and its use:
The right to be informed about what data we are collecting on you and how we will use it
The right of access – you can ask to see the data we hold on you
The right to rectification – you can ask that we update or correct your data
The right to object – you can ask that we stop using your data for a particular purpose
The right to erasure – you can ask us to delete the data we hold on you
The right to restrict processing – you can ask that we temporarily stop using your data while
the reason for its use or its accuracy are investigated
Though unlikely to apply to the data we hold and process on you, you also have rights
related to portability and automated decision making (including profiling)
All requests related to your rights should be made to email@example.com. We will respond within one month.
You can find out more about your rights on the Information Commissioner’s website
8. What will we do if anything changes?
If we make changes to our privacy statements or processes we will post the changes here. Where the changes are significant, we may also choose to email individuals affected with the new details. Where required by law, will we ask for your consent to continue processing your data after these changes are made.