GDPR: DATA PRIVACY NOTICE
We are not changing the way in which we use your information. But our new notice provides you with more details about what we do.
1. Who are we?
Mutual Allinace Mortgage Bank is the data controller. This means that we decide how your personal data is processed and for what purposes.
What is personal data?
Personal data is defined in the GDPR as any information relating to an identified or identifiable natural person.
We do not process special category data includes data revealing race or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data, data concerning health or data concerning a person’s sex life or sexual orientation.
We are under a general duty to keep personal data and information confidential. Where we share information, we take all reasonable steps to keep it secure, use it fairly and ensure that data protection safeguards are in place. We use secure portals and encryption tools when necessary to ensure data in transit is protected.
We apply best practice in terms of information security, and adopt a privacy by design approach in developing new systems and processes involving personal data, considering the rights of individuals and the risks involved at the start of a case to make sure we build in suitable controls.
2. The purpose(s) of processing your personal data
3. We generally process data on the basis it is necessary for the performance of your instructions to provide legal services to you.
Your data will be processed will be processed because it is necessary for the pursuit of our legitimate interests and/or the legitimate interests of others,Courts,Tribunals and the Police.
There may be occasions where we process data to comply with legal obligations, particularly in the context of legal proceedings and/or compliance with requests by law enforcement agencies, for example. We will also make pro-active disclosures to police and other authorities as part of our public interest role.
We will not generally rely on consent as a basis for processing personal data. In the limited circumstances where we may rely upon consent, we will specifically obtain this in the course of collecting the data.
We may also use data to improve our level of service. Where we do this, we do it to help inform us how to improve the way we work since both we and you with have an interest in us doing so.
6. Sharing your personal data
Your personal data will be treated as strictly confidential, and will not be shared with 3rd parties without your consent save for in the pursuit of our legitimate interest and or the legitimate interests of others.
7. How long do we keep your personal data?
We keep personal information for as long as necessary for the pursuit of our legitimate interest and to ensure we can fulfil our legal obligation and respond to legal claims and complaints.
8. Providing us with your personal data
You are under no statutory or contractual requirement or obligation to provide us with your personal data. But failure to do so will mean that we can not advice or provide you with our services.
9. Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
• The right to request a copy of the personal data which we hold about you;
• The right to request that we correct any personal data if it is found to be inaccurate or out of date;
• The right to request your personal data is erased where it is no longer necessary to retain such data;
• The right to request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability),
• The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on furthe r processing;
•The right to object to the processing of personal data, (where applicable i.e. where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority);
10. Further processing
If we wish to use your personal data for a new purpose, not covered by this Data Privacy Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.
12. How to make a complaint
To exercise all relevant rights, queries or complaints please in the first instance contact our Data Protection Officer. If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint.