GDPR

General Data Protection Regulation (GDPR)

On the 25th of May 2018 the new GDPR regulations become Law in the UK. This legislation updates the old Data Protection Act of 1998.
Under this legislation the committee have a duty to inform our members of their rights under GDPR legislation, alongside informing you what data we hold, and who we share that data with.
We collect your data on the basis of you becoming a U3A member and us delivering membership services as part of a contract.
If you choose not to share your data with us there is no way we can deliver those services to you.
The data we collect is your name, address, telephone number, eligibility for gift aid and e-mail address (where applicable) which in turn allows the generation of your membership number.
The data controller for Maidenhead U3A is our treasurer. (treasurer@maidenheadu3a.org.uk)
This data is used to communicate with you regarding the activities of U3A and the maintenance of your membership.
Internally your data is shared with those members of the committee who have a valid interest and with some convenors where relevant.
Your data is kept as long as you are a member and will be deleted in a timely fashion if you chose to cease your membership. The only exception to this is our communication with HMRC related to our gift aid claims where there is a legal requirement for us to keep those records for seven years.
Externally, your data is shared with the Third Age Trust so they can deliver Third Age Matters magazine to you, our printers (if your newsletter is delivered by post) and HMRC (if we collect Gift Aid on your subscription).
You have the right to see what data we hold on you and to have that data deleted. You have the right to object to the way we process your data. You also have the right to lodge a complaint to the Information Commissioners Office. https://ico.org.uk

In addition to the above, the u3a also has a duty of care and safeguarding of its members. As a result, it has been recommended that convenors keep details of who to contact in case of emergency. This significantly increases the scope of the personal information we hold on members. If anyone objects to this additional information being held you can decline to give this information when asked.

Reviewed and Updated February 2025