PRIVACY NOTICE

1. Information for users and definitions

1.1 Who we are

The Engineering Council is the UK regulatory body for the engineering profession. The Engineering Council is a registered charity, number 286142, whose registered office is 10 Lower Thames Street, London, EC3R 6EN. The Engineering Council manages the mycareerpath Professional Development System.

1.2 Contact details

The person responsible for data protection matters at the Engineering Council can be contacted:

• By email dpo@engc.org.uk
• By post to the above address
• Or by telephone: 020 3206 0500

2. Personal Data

2.1 What is personal data

Personal data is any information that can be used to identify an individual.

2.2 What personal data do we collect

Sign-up version:
You provide the following data when creating an account on mycareerpath:

• Name
• Email address
• Membership number
• Employer (optional)

You can update your personal data on mycareerpath at any time after creating an account.

Single Sign-On:
The following data, held by your institution or membership body, are used to create your account on mycareerpath:

• Name
• Email Address
• Membership Number
• Employer (optional)

If you need to update your personal data on mycareerpath, contact your institution or membership body.

2.3 What we use your personal data for

Your data are used to create your unique account on mycareerpath. Our legal basis for storing your personal data is your consent, given when you accept this notice and create your account. No special categories of personal data are collected.

2.4 What the lawful basis is for processing your data

Consent.
By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified.

2.5 Special or sensitive data

The Engineering Council does not collect or process special categories of personal data or sensitive data such as race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, etc.

3. Consent

By consenting to this privacy notice, you are giving the Engineering Council permission to process your personal data specifically for the purposes identified above.

4. Sharing your data

The Engineering Council may pass your personal data to the following third parties, without first obtaining your consent, for the following purpose(s) as part of our processing activities:

• Amazon Web Services
• Storage of mycareerpath data

In addition to the Engineering Council, your membership body, through whom you access mycareerpath, can see your name, email address, membership number and employer. Your membership body cannot access your other data on mycareerpath (plans, evidence, reports, profiles) unless you specifically share them.

You may withdraw consent to the Engineering Council processing your personal data at any time by contacting your professional institution and requesting that your account and data be deleted. However, if you withdraw your consent you would not be able to make use of the mycareerpath Professional Development System.

5. Retention

The Engineering Council will store your personal data in perpetuity while your account is Active. Accounts that are not accessed for three years become Inactive. After two years of inactivity (five years since last login) all personal data, plans, evidence, reports and profiles will be permanently erased from mycareerpath and all backup systems.

6. Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to judicial review - in the event that the Engineering Council refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain.
• Right to object to automated processing, including profiling: you have the right to be object to the legal effects of automated processing or profiling.

7. Subject Access Request

A Subject Access Request form and copy of the procedure can be requested by emailing dpo@engc.org.uk .
Subject access requests may be forwarded on, where appropriate, to any third party involved (as stated above, where applicable) in the processing of your personal data.

8. Complaints

In the event that you wish to make a complaint about how your personal data is being processed by the Engineering Council (or third parties as listed above), you have the right to lodge a complaint;

• directly with the Engineering Council data protection lead; and/or
• the Information Commissioner’s Office

The details for each of these contacts are:

9. Data Security

All data held or processed by the Engineering Council is held in a secure server managed by the Engineering Council.

10. Changes to this privacy notice

We reserve the right to update this privacy notice at any time, and we will notify you if there is a substantial change in the way we process your data. We may also notify you in other ways from time to time about the processing of your personal data.