The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union. It applies to processing of personal data carried out by organisations operating within the EU and will be implemented on 25 May 2018. Personal data may be, for example, information relating to an individual, including private, professional or public life. It includes name, contact details, photos, bank details, or a computer’s IP address.
IAH collects various data to help us understand the needs of our members, supporters and users, enabling us to provide our community with better services.
For IAH members, as you might expect, much of the data collected is so that we can manage your membership of the IAH and to receive member benefits. This is largely related to contact information, location, non-sensitive employment information, groundwater/hydrologeology related interests, IAH interests, photographs. IAH DOES NOT keep bank details. For those on the mentoring scheme, we hold additional non-sensitive information about professional experience and aspiration. You provide your data voluntarily – and clearly we can’t manage without this, nor can we give you access to the membership benefits without this. In effect this forms a contract that we comply with, and which is in the mutual interests of members and the IAH administration to manage effectively.
We also hold names and email addresses for non-members, specifically only where they have requested that we keep them in touch with IAH news and information. This most commonly happens by opting in via our eNews form on the website.
The GDPR provides the various rights for individuals:
- The right to be informed about how we collect and use your data.
- The right of access to personal information records and ensuring data we hold are correct (members can access and edit this on the IAH website in the members’ area at https://iah.org/members/your-membership).
- The right for records to be deleted.
- The right to object to or restrict processing of data.
- The right to data portability of data where we process data on the basis of your consent or for the performance of a contract.
As has always been the case, we are committed to managing your data securely, including where this is held by national chapters, commissions and networks.