Privacy Policy

Roof Tile Association (RTA) Privacy Notice 

Who are we?

We are the Roof Tile Association, the trade association for the UK clay and concrete roof tile manufacturing industry. The RTA is administered by the British Ceramic Confederation, which operates its own Privacy Policy.

Privacy Notice overview

In the course of its work the RTA collects and processes personal data belonging to our members, non-members and a range of other stakeholders connected to the industry, together with those making enquiries to the organisation.

Data Protection laws – the EU’s General Data Protection Regulation (GDPR) – describe individuals who have provided personal data to an organisation (either directly or indirectly) as “data subjects”. As a data subject, individuals have a number of rights with respect to how we process their personal data. All data subjects whose personal data is collected and processed by RTA is done so in-line with the requirements of the GDPR.

This privacy notice is made available to data subjects prior to RTA collecting / processing their personal data. All employees who interact with data subjects through the RTA are responsible for ensuring that this notice is drawn to the data subject’s attention.

Why does RTA need to collect and store personal data?

In order for the RTA to provide relevant services and communications we need to collect personal data for correspondence purposes and/or detailed service provision. In any event we are committed to ensuring that the information we collect and use is appropriate for this purpose, and does not constitute an invasion of your privacy.

What personal data does the RTA hold and process?

The types of personal data we typically collect / process include:

• First and last name
• Contact details (including e-mail address, telephone number, business address)
• Job title
• Signatures (from meeting attendees)
• Other information that you may provide when interacting with RTA to allow us to work with you / assist with your enquiry

How will the RTA use the personal data it collects about you?

The RTA processes (collects, stores and uses) information you provide in a manner compatible with GDPR, and all employees (of BCC, which administers the RTA) are subject to the internal BCC Data Protection Policy which requires them to:

• Fully understand their data protection obligations
• Check that data processing activities they undertake comply with this policy and are justified
• Not use data in any unlawful way
• Not store data incorrectly, be careless with it or otherwise cause us to breach data protection laws and our policies through your actions
• Comply with this policy at all times
• Raise any other concerns, notify any breaches or errors, and report anything suspicious to the BCC Data Protection Champion.

The RTA uses personal data for the following purposes:

• To communicate with you about RTA services and other updates which are relevant to you, your specific interests and responsibilities
• To fulfill any contractual obligations which the RTA has to you or your organisation.
• To provide you with notifications of any updates or changes which are relevant to your relationship with the RTA.

In order to do so, the RTA acts under a range of legal bases for processing of personal data, which are:

• Legitimate interests – where we believe you have a legitimate interest in hearing about certain things we work on to help you and your organisation, and so can reasonably expect communications from us.
• Contract – we are fulfilling our contractual obligations to you and your organisation.
• Legal obligation – where we have a legal requirement to process or hold personal data (excluding a contract).
• Consent – where you have provided us with a recent, clear, explicit, and defined consent, on an ‘opting-in’ basis, for your data to be processed for a specific purpose. Where we work with any special category personal data we will always tell you why and how the information will be used. You may withdraw consent at any time by contacting the RTA or (where ‘unsubscribe’ links are provided) unsubscribing to any communications.

We endeavour to keep your information accurate and up to date, and for no longer than is necessary. Our aim is not to be intrusive with our communications, and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure.

Personal data will primarily be used internally by employees, and (where appropriate) access to this information may also be restricted. Nevertheless, the RTA may at times need to share some personal data with a number of our third-party processors who provide services to the organisation, including business system and website content & hosting providers (along with analytics / insights). Where this takes place, it will only be done with our authorisation for reasons necessary for the performance of relevant services. Information may also be passed on to experts within the industry to provide answers to enquirers but this will only take place with the consent of the enquirer.

The RTA  does not sell or otherwise disclose personal data, other than described in the privacy notice.

The RTA will not transfer personal data outside of the European Economic Area (EEA); however there may be occasions when personal data is transferred to, processed or stored within the EU, in countries where data protection laws may differ. When this takes place the information will be protected as described in this privacy notice.

• Right of access – you have the right to request a copy of information we hold about you.
• Right of rectification – you have a right to correct any data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you have the right to be subject to the legal effects of automated processing or profiling (please note that no automated profiling or decision making is carried out by the RTa or by appointed third parties).
• Right to judicial review – in the event that the RTA refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain.

All of the above requests will be forwarded on to any third parties that may be involved in the processing of your personal data.