Employment Related Services Association (ERSA) – Privacy Policy

This privacy policy applies to ERSA UK LTD websites and platforms we own and manage.

The ERSA Website
dev.ersa.org.uk
The ReAct Partnership Website
restartreact.co.uk 

ERSA UK LTD is a not for profit company limited by guarantee. Company number 05384160 with its registered office at ERSA UK LTD, Centurion House, Staines-upon-Thames, Greater London, TW18 4AX. This Privacy Statement explains how ERSA use the personal information we collect and your right to access, make changes or remove entirely.

About ERSA

The Employment Related Services Association (ERSA) is the membership body for the employment support sector.  Established in 2005, we campaign for and support the delivery of ever better services for the nation’s jobseekers and low earners.

The Data Protection Officer for ERSA is Laura Benfield, Head of Membership, see contact details below.

Collection of your personal data

Engagement with ERSA may be through registration of an event, email, telephone conversation, via the ERSA website, ReAct Partnership website or social media channels. When you engage with ERSA we only collect and store the following information;

Use of your personal data

The lawful basis for collecting and using the personal data will depend on the specific context in which we collect it.

However, we will normally collect personal data from you only;

We will use the personal data you have provided to us to send you email alerts and gather feedback to improve our email alerts. We may also occasionally contact you to improve our service.

If we intend to use any Personal Data in any manner that is not consistent with this Privacy Policy, you will be informed of such anticipated use prior to or at the time the Personal Data is collected or we will obtain your consent subsequent to such collection but prior to such use.

Details about the lawful bases for processing personal data can be found on the Information Commissioner’s website. (https://ico.org.uk/)

How we store and retain your personal data

ERSA will retain your personal data for as long as is necessary for the purpose it was collected.

In most cases, where you have subscribed to an ERSA mailing we will keep your personal data for as long as you are subscribed to that service.

The data will be removed and acknowledged if you request to be removed.

Disclosure and security of your personal data

We may disclose your personal data to third parties when permitted to do so including:

• with your consent;
• where we have partnered with an organisation to deliver a project, campaign or event and we are acting as a processor;
• if we have a lawful basis for doing so;
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation. This includes providing your personal data to other organisations, such as the Police, for the purposes of prevention and detection of crime.

ERSA will never share or sell your personal data to other organisations for their direct marketing purposes.

We will notify you of whom your personal data will be shared with and where it is stored.

All personal data you provide to us will be stored securely, both physically and electronically, in accordance with our policies. We have an information security process in place to oversee the effective and secure processing of your personal data.

In addition, we (or processors acting on our behalf) may also store or process your personal data in countries outside the European Economic Area but only where we are assured of the security of the data. We have put in place technical and organisational security measures to minimise the possibility of the loss or unauthorised access of your personal data.

Data processors and online office tools

ERSA uses third party companies as data processors to provide electronic management and analysis of data, these include Eventbrite, Mailchimp and Survey Monkey.  ERSA also manages some of its contact lists using IT systems, stored within online systems called dropbox and google docs. Where we use third party providers, information will be provided to you when you subscribe to that service. Details of the more widely used third-party email subscription services are below.

Dropbox

ERSA uses dropbox as a secure online storage facility which is password protected and only accessible via the ERSA staff team. Dropbox security and privacy setting can be found here. https://www.dropbox.com/help/security

Microsoft Dynamics CRM

ERSA uses Microsoft Dynamics to record membership information which includes the following;

• The primary contact for ERSA matters, job title, email address, organisation, telephone number and membership category.

Microsoft Dynamics CRM privacy policy can be found here. (https://privacy.microsoft.com/en-gb/)

Mailchimp

ERSA uses mailchimp to manage ERSA stakeholders, preferences and send emails. Mailchimp is the main processor of personal information, other online tool and ERSA IT systems where lists are held such as Eventbrite and Microsoft Office are regularly and systematically checked for changes in personal data including changes to subscription preferences.

Mail Chimp has staff based outside the European Economic Area, and stores your data in the US. Mail Chimp is certified under the EU-US Privacy Shield framework

You can find out more about Mailchimp’s privacy policy information.(https://mailchimp.com/legal/privacy/)

Survey Monkey

ERSA uses Survey Monkey to collect feedback from events or submissions such as award entries for the ERSA Employability Awards.

The lawful basis for collecting and using the personal data will depend on the specific context in which we collect it;

• when collecting feedback for events, projects or campaigns the personal information you provide will be used for analysis only
• when collecting award entries for the ERSA Employability Awards, we will use personal information against predefined and published criteria against each entry for judging. We will use the contact information provided to keep in touch about the awards.

You can find out more about Survey Monkey’s privacy policy. (https://www.surveymonkey.com/mp/legal/privacy-policy/)

Eventbrite

ERSA uses Eventbrite as an online platform to register people for events. ERSA events include ERSA specialist forums and networks, devolved networks, roundtables and webinars. Other events include ERSA lead events and partner events which ERSA provides event management services. Information from Eventbrite is automatically added or updated to the ERSA master stakeholder list which is held in Mailchimp. You can find out more information on Eventbrite’s Privacy Policy.

(https://www.eventbrite.co.uk/support/articles/en_US/Troubleshooting/eventbrite-privacy-policy?lg=en_GB)

Cookies

The ERSA website and membership area uses cookies for Google Analytics to monitor traffic levels, search queries and visits to this website. This information is used to improve the user experience of the ERSA website.

Google Analytics stores IP address anonymously on its servers in the US, and neither ERSA or Google, associate your IP address with any personally identifiable information. These cookies enable Google to determine whether you are a return visitor to the site, and to track the pages that you visit during your session. dev.ersa.org.uk

The ERSA website also uses a number of other cookies that are essential to the operation of the website.  These cookies do not store any personal information.

Get in touch

If you have any queries relating to this Privacy Statement or wish to notify us about any of the information set out above, please contact us:

Laura Benfield (Data Protection Officer)
Head of Membership
Address: ERSA UK LTD, Centurion House, Staines-upon-Thames, Greater London, TW18 4AX
Email: laura.benfield@ersa.org.uk
Tel: +44(0) 20 3757 9415