Privacy Notice
This notice explains how the association, as controller, processes your personal data under the General Data Protection Regulation (EU) 2016/679.
What data is processed?
Your identity details (name, date of birth), contact details (address, phone, email), professional and educational details, and your membership and financial records (member number, branch, dues, payments).
Why is it processed?
To establish and maintain your membership, to charge and collect dues, to meet the statutory bookkeeping and retention duties that apply to the association, and to contact you.
On what legal basis?
Performance of the membership relationship (Art. 6(1)(b)), compliance with a legal obligation (Art. 6(1)(c)), and — for newsletters and announcements — your consent (Art. 6(1)(a)), which you may withdraw at any time.
Who receives it?
Competent public authorities where the law requires disclosure; our payment service provider when you pay by card or direct debit; and our email delivery provider for notifications. Data is processed inside the European Economic Area; where a provider operates outside it, standard contractual clauses apply.
How long is it kept?
Membership records are kept for the duration of your membership. Invoices, receipts and ledgers are kept for the statutory retention period of the country in which the association is established. Once those periods expire the data is deleted or anonymised.
Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to withdraw consent at any time (Art. 7(3)). You can exercise these from the Privacy page in your member area; we respond without undue delay and in any event within one month, which may be extended by two further months where the request is complex. You also have the right to lodge a complaint with a supervisory authority (Art. 77).
