Engineering Council

1. Who we are

The Engineering Council is the UK regulatory body for the engineering profession. The Engineering Council is a registered charity, number 286142, whose registered office is

10 Lower Thames Street, London, EC3R 6EN.

Definitions

"Licensed professional engineering Institution" – a professional engineering institution that has satisfied the Engineering Council's requirements to allow them to assess and submit candidates for inclusion on the National Register of professional engineers and technicians

"National Register" – a secure database that is used and accessed only by authorised Engineering Council staff to facilitate the registration of individuals.

"RegCheck" - an online registration verifications tool available on the EngC website

1.1 Contact details

The person responsible for data protection matters at the Engineering Council can be contacted:

• by email dpo@engc.org.uk
• by post to the above address
• or by telephone: 020 3206 0500

2. Personal Data

2.1 What is personal data

Personal data is any information that can be used to identify an individual.

2.2 What personal data do we collect

The personal data that the Engineering Council has collected and processes about you is:

• Forename(s) and surname
• Date of birth
• Gender
• Address
• Email address
• Telephone Number

2.3 What we use your personal data for

The personal data we collect will be used for the following purposes:

• To create a record of your professional registration on the National Register which includes automatically assigning a unique registration number.
• To generate a certificate which confirms your registration with the Engineering Council.
• To maintain the data in your record to ensure that it is accurate and up to date.
• To generate and send you an invoice in order to collect your annual registration fee.
• For statistical generation, reporting and analysis of the data is held on the National Register. All reports are anonymised so that they do not contain any personal data.
• To provide registration status information (e.g. active as in currently registered or inactive if the registration has lapsed) to any person or organisation (engineering organisation, regulatory authority, recipients of services, e.g. employer, client) having a legitimate need for seeking verification.

2.4 What is the basis for processing your data

Our basis for processing your personal data is Legitimate Interest for the purposes of facilitating your registration(s) and all associated processes as outlined in 2.3.

2.5 Special or sensitive data

The Engineering Council does not collect or process special categories of personal data or sensitive data in relation to registrants such as race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, etc.

3. Consent

There is no requirement for your consent to process your personal data as specified in this Notice unless it is outside the basis of Legitimate Interest.

4. Sharing your data

The Engineering Council may pass your personal data to the following third parties, without first obtaining your consent, for the following purpose(s) as part of our processing activities:

5. Retention

The Engineering Council will continue to hold the record of your registration whether current or lapsed indefinitely.

6. Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you may ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply you may have the right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to object to the legal effects of automated processing or profiling.

If we receive a request from you to exercise any of the above rights we will forward them on, as appropriate, to any third party involved (as stated in section 4 above) in the processing of your personal data.

7. Subject Access Request

A Subject Access Request form and copy of the procedure can be requested from dpo@engc.org.uk or by writing to the Engineering Council's Data Protection Representative at the address given below.

Any of the above requests, if received, will be forwarded on, as appropriate, to any third party involved (as stated in 4 above) in the processing of your personal data.

8. Complaints

In the event that you wish to make a complaint about how your personal data is being processed by the Engineering Council (or third parties as described in 4 above), you have the right to lodge a complaint;

• directly with the Engineering Council's data protection representative; and/or
• the Information Commissioner's Office

The details for each of these contacts are:

9. Data Security

All data held or processed by the Engineering Council is held in a secure database managed by the Engineering Council.