YBS Member Hub Stories

Privacy Notice

Introduction

This Privacy Notice explains:

  • who we are
  • how we collect, share and use your personal information
  • how you can exercise your privacy rights

Personal information is any information that can be used to identify you as a unique individual

Yorkshire Building Society (YBS) includes the trading names under which we operate (Chelsea Building Society, the Chelsea, Norwich and Peterborough Building Society, N&P and Egg) and its subsidiary companies. Any references to ‘us’, ‘our’ and ‘we’ means ‘YBS’.

Yorkshire Building Society is the data controller (we decide how and why your personal information is handled) responsible for your personal data.

EU Representative

To comply with the General Data Protection Regulation (2016/679), if you are in the European Union, we have appointed a European representative.

If you wish to contact them, their details are as follows:

Bird & Bird GDPR Representative Services SRL
Avenue Louise 235
1050 Bruxelles
Belgium
 
Map
Key Contact: Vincent Rezzouk-Hammachi


Personal Information We Collect From You

We collect personal information from you when you fill and submit the contact form/text box available on our website.

The types of personal information we collect from you include/are:
  • Identity details which includes your title and full name
  • Contact details which includes email address and/or phone number
Any personal information about you included in free text boxes
 

Personal Information We Collect from Others

We don’t collect any personal information about you from anyone or anywhere else.

 

 

How We Use Your Personal Information

We need certain personal information from you to be able to feature your story in our marketing campaign.
We use your personal information for the following purposes:
 

Purpose/Activity

Types of Personal information

Legal Basis

to assess suitability for inclusion to feature in our marketing
  • Identity data
  • Contact data
  • Any personal information provided by you (text box)

Our legitimate interest

To contact you if we would like to feature your story
  • Identity data
  • Contact data

Our legitimate interest

To feature your story in our marketing
  • Any personal information provided by you (text box)

Our legitimate interest
Where we are processing your personal information for our legitimate interests, you may object to the processing of your personal information. If you would like more information on this, please see the “Your Data Subject Rights and How to Exercise Them” section below.
 

Sharing Your Personal Information

We will not share your personal information with anyone outside of YBS.

 

Transfer of Your Personal Information Outside the United Kingdom

We will not transfer your personal information outside the UK.

 

Retaining Your Personal Information

We keep personal information for as long as it is required by us: 
 
  • for the purposes described  in ‘How We Use Personal Information’ section above
  • to meet our legal or regulatory obligations 
  • for the exercise and/or defence of any legal claims
If you would like more information on this, please feel free to contact us by using the details provided in this notice.

 

Profiling

We do not engage in any profiling activities with your personal information.

 

Automated Decision Making

We do not use any automated processes to make decisions about you.
 
 

 

Your Data Subject Rights and How to Exercise Them

You have rights relating to the personal information we hold about you, however, they may be subject to various exceptions and limitations.
You can request to exercise your rights at any time by contacting us using the details in this privacy notice.
 

Your rights:

Right to be informed: We are obliged to provide clear and transparent information about our processing activities of your personal information.

Request access to your personal information (commonly known as a “data subject access request”): You have the right to understand what personal information we hold about you and why.

Request correction of the personal information: If you believe that we hold inaccurate or incomplete personal information, you have the right to request us to rectify or correct your personal information.

Request erasure of your personal information: You may ask us to delete or remove personal information where there is no good reason for us to continue to process it. Please note, however, that we may not always be able to comply with your request for erasure for specific legal reasons.

If you need to make such a request, please contact brandcreative@ybs.co.uk.

Request restriction of processing of your personal information: You may ask us to stop processing your personal information. We will still hold the data but will not process it any further. You may exercise the right to restrict processing when one of the following conditions applies:
 
  • the accuracy of the personal information is contested
  • processing of the personal information is unlawful
  • we no longer need the personal information for processing but the personal information is required for part of a legal process
  • the right to object has been exercised and processing is restricted pending a decision on the status of the processing
Right to Data Portability: You may request your personal information be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means, and if the processing is based on the fulfilment of a contractual obligation.

Right to Withdraw Consent: You may withdraw consent at any time if we are relying on your consent to process your personal information. This won’t affect any processing already carried out before you withdraw your consent or processing under other grounds.

Right to object: You have the right to object to our processing of your personal information where:
 
  • processing is based on legitimate interest
  • processing is for the purpose of direct marketing

We may need specific information from you to help us confirm your identity before we can review your request.
 
The simplest and quickest way to request this information is by completing our simple Online Request Form.

Write to us at the address below:
Data Subject Request, Yorkshire House, Yorkshire Drive, Bradford, West Yorkshire, BD5 8LJ

 

Data Protection Officer

If you have any questions about:
 
  • this privacy notice
  • the use of your personal information
  • wish to request to exercise any of your rights
please contact our Data Protection Officer using the following details:
 
By email: dpo@ybs.co.uk
 
By post: Data Protection Officer, Yorkshire House, Yorkshire Drive, Bradford, West Yorkshire, BD5 8LJ
 

Making a Data Protection Complaint

If you have any concerns about the use of your personal information or the way we handle your requests relating to your rights, you can raise a complaint directly with us by using the contact details provided in this notice.
 
If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with the UK Information Commissioner’s Office via the details available on their website: www.ico.org.uk.