Information Commissioner

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

+44 (0) 303 123 1113
casework@rco.org.uk
https://ico.org.uk

Your Rights

Access
Rectification
Erasure
Restriction of processing
Objection to processing
Data portability
Withdrawing consent

Our Data Protection Policy

Introduction

    1. 1.1.The Young Fraud Lawyers Association (“YFLA”) takes the protection of your personal data seriously.
    2. The Objects of the YFLA
      1. 2.1.The Objects of the YFLA (“its Objects”) are to advance its members’ education and training in all matters relating to their practice as fraud lawyers and to encourage social interaction amongst its members. All monies raised by the YFLA shall be used to further its Objects and for no other purpose.
      2. 2.2.This Privacy Notice sets out information about the YFLA’s practices, your rights and how we process your personal data.
  1. Data protection laws
    1. 3.1.The YFLA is bound by the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (“UK GDPR”).
    2. 3.2.In this Privacy Notice, the terms personal data, controller, processor, data subject, consent, recipient, third party, processing and profiling have the meanings given to them in the UK GDPR.
  2. Controller contact details
    1. 4.1.The controller for the processing of personal data under this Privacy Notice is:

The Young Fraud Lawyers Association

www.YFLA.com 

chair@yfla.com 

  1. Data Protection Officer contact details
    1. 5.1.If you have any questions about this Privacy Notice or about our personal data processing practices, or if you wish to exercise any of your rights as a data subject, you may contact chair@yfla.com. 
  2. Lead supervisory authority contact details
    1. 6.1. If you have a complaint about our personal data processing practices, you should first contact the YFLA Data Protection Officer at chair@yfla.com. If you are not satisfied with our response, you have the right to lodge your complaint with the following supervisory authority:
  1. Members’ data
    1. 7.1.We will collect certain personal data (as set out below) when you join the YFLA.
  2. Types of personal data we collect
    1. 8.1.We will collect personal data about you; including your name, the name of your firm or chambers, your position, professional specialisms, year of qualification / call and your e-mail address. We will obtain this data directly from you or from your firm or chambers.
    2. 8.2.By providing us with your personal data, you are deemed to consent to this data being processed for the specific purposes set out below (including the data being shared with certain third parties). 
  3. Purposes of processing
    1. 9.1.We will process your personal data for the purpose of:

a) Processing your application to join the YFLA and reminding you to renew your membership;

b) Informing you about YFLA educational and social events;

c) Informing you of events organised by carefully selected partners; and

d) Sending you our quarterly newsletters.

  1. Legal basis for processing under the GDPR
    1. 10.1.The processing of data is based upon your consent when you join the YFLA. The processing is also necessary for the purposes of the YFLA’s legitimate interests in attaining its Objects.
  2. Recipients or categories of recipients
    1. 11.1.We may disclose your personal data to third parties who provide administrative, storage, telecommunications, information technology and other services to us in support of the YFLA. However, we will ensure that all such third parties are subject to obligations not to use or disclose that data.
  3. Retention period
    1. 12.1.The YFLA will only retain personal data for as long as it has a legitimate purpose to do so. We will need to retain personal data for the duration of your membership and for a reasonable amount of time following the cessation of your membership.
    2. 12.2.Once we no longer have any legitimate reason to retain your personal data (or if you have asked us to erase that data), it will be securely deleted.
  4. Requirement to provide personal data
    1. 13.1.It is optional to provide most of the above personal data. However, if you do not provide that data, it may affect your ability to become a member and/ or attend or participate in YFLA events. 
  5. Your rights
    1. 14.1.If you are located in the EU or the UK, you have certain rights in relation to your personal data as follows:

Access: You have the right to obtain access to and a copy of any personal data we hold about you. You also have the right to find out whether your personal data has been transferred outside the EU and any safeguards relating to this transfer.

Rectification: If you consider that any personal data we hold about you is incorrect or incomplete, you have the right to ask us to correct or complete that personal data.

Erasure: In certain circumstances, you have the right to ask us to erase any personal data we hold about you.

Restriction of processing: In certain circumstances, you have the right to ask us not to process your personal data for certain purposes.

Objection to processing: In certain circumstances, you have the right to object to us processing your personal data for certain purposes.

Data portability: In certain circumstances, you have the right to request a copy of your personal data in a structured, commonly used and machine-readable format.

Withdrawing consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.

For more information about these rights, visit https://ico.org.uk/for-the-public/. 

    1. 14.2.To make a request pursuant to these rights, contact the YFLA Data Protection Officer at chair@yfla.com. 

Young Fraud Lawyers Association 2022