Celebrating Education is the data controller and stores your data.

Our registered address is: Lambeth NEU, Blue Star House, Stockwell Road, SW9 9SP.

Celebrating Education complies with its obligation under relevant legislations by keeping personal data up to date; by secure storage and destruction; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal and sensitive data. 

Use of personal information 

You providing your data to us means that we are authorised to process data that is legally regarded as ‘sensitive’. Under the GDPR, we must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it. 

The lawful basis for Celebrating Education processing your data is that it is necessary for the purposes of our activity and that you consented to give us this information.  

We collect and use your data to deliver services and support to you.

Your data is used for the following purposes: we will use this data to contact you via methods such as email, text, phone and any other method to keep you updated with our activities and campaigns including any activity we may take in reference to the National Education Union and their campaigns and internal processes. Your data may be provided to third parties for these purposes. You agree to Celebrating Education, it’s representatives and representatives it nominates contacting you on this basis and having access to the information you provide for these purposes.

Your personal data: We are committed to protecting the data you have provided and respecting your rights and privacy in line with current legislations.

Sharing your data with third parties 

Some of your information will be made available to other organisations associated with Celebrating Education, including agents, contractors and other service providers not inviting commercial dealings with you. 

Your data may be shared with Celebrated Education authorised mailing houses for publication order fulfillment and to send you communication. 

Where Celebrating Education uses the services of such organisations they are contractually obliged to process your data in a secure and confidential manner under our strict instructions, and in line with current legislations. The type of data shared will be relevant to the purpose for which the data is used and is subject to additional security measures including password protection and encryption. 

Surveys and research: We may use the contact information you have provided to ask you to take part in surveys or focus groups to help Celebrating Education achieve its goals.  

Data Retention – We will only keep your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, auditing, or reporting requirements. 

At the end of the retention period, data that is required for research or statistical purposes, will either be archived to restrict access or anonymised so that it can no longer be associated with you. 

Your rights  

The GDPR sets out a number of rights that you have over your data and your privacy.  Below is a brief overview as they relate to your interaction with Celebrating Education. We will need to verify your identity before we are able to fulfil each right request. 

Right to be informed – We must inform you about our collection and use of your personal data and we do this through our privacy notice as well as at the point of collection. 

Right of access – You have the right to access your personal data that we hold about you. If you prefer you can make a subject access request (SAR) for all or parts of your data. Celebrating Education will respond to your subject access request within 30 days, in line with relevant legislation. To request a copy of the data we hold about you, please send your request to the Data Protection Officer at the above address, and include the following information: your full name and address, and a description of the data required, including the date range. 

Right to erasure (also known as right to be forgotten) – You have the right to request deletion of all or some of the data we hold on you where it is no longer necessary for the data controller to retain such data. We will always seek to comply with your request, unless we are required to retain data for legal, accounting, or reporting requirements. However, where appropriate, data will be anonymised. 

Right to rectification – You have the right to request that we correct any personal data if it is found to be inaccurate. You can do this by contacting us at [email protected]. 

Right to restrict processing – Where there is a dispute in relation to the accuracy or processing of your personal data, you have the right to request a restriction is placed on further processing of your data; This right is not absolute and is subject to our review of your request as well as assessing if it is feasible for us to comply.  

Right to data portability – If you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can request a copy of that personal data to transfer to another data controller where technically feasible. 

Right to object – You have the right to request we stop processing (using) your data for certain purposes. These include direct e-mail marketing or activities based on consent.  

Rights in relation to automated decision making and profiling – GDPR include additional safeguards applicable to organisations using data collected to create profiles that may be used for decision-making. Profiling that might have a legal or other significant effect on you, we need to get your permission first. 

Celebrating Education does not engage in any automated processing, profiling or automated decision making. 

Monitoring – We monitor all emails sent to us for viruses and malicous software. In order to make sure we follow your instructions correctly and to improve our service to you through proper training of our staff, we may monitor or record communications. 

Transfers overseas – It may sometimes be necessary to transfer personal information outside the EEA. Any transfers made will be in full compliance with all aspects of data protection legislations. 

You also have the right to complain to the Information Commissioner’s Office (ICO) who may be contacted at https://ico.org.uk