GDPR

Securityplus Federal Credit Union GDPR Privacy Notice
 

Effective May 25, 2018

Securityplus Federal Credit Union is a financial institution that offers financial advice and services to its members. In the course of our business, we register and use information about you [personal data]. We do so to offer you the best advice and solutions, fulfill agreements with you and comply with legal requirements.

Your privacy is important to us. We protect your data and privacy by taking all relevant measures in accordance with applicable legislation.

This privacy notice sets out the basis for how Securityplus Federal Credit Union look after your personal data and the privacy rights you are granted by law.

For the purposes of this Privacy Notice, the data controller is Securityplus Federal Credit Union with its address at 7135 Windsor Boulevard, Baltimore, Maryland 21244. We’ve also set out contact details towards the end of this notice.

Information we may collect from you

We may collect and process the following information about you:

• basic personal data, e.g. your name, contact information, and national ID
• financial information, e.g. income, profession, debt or credit rating
• information about your education, profession or work
• information about your family and household
• ID documentation, e.g. photocopies of your passport, driver’s license, birth certificate
• details about the services and products we provide to you, how you use them and your preferences towards them
• information that we obtain or learn, such as information about the browser or device you use to access this site, how you use this site and the pages you visit, traffic and location data.

We may also ask you for information if you experience problems when using this site. We may also ask you to complete surveys for research purposes, although you don’t have to respond to these.

If we have an existing relationship with you, and we are able to identify you from information obtained or provided by your use of the site, we may associate those sets of information, for example to enable us to respond to a query you have submitted.

Why and how do we register and use your personal data?

We’ll only use your information where we have your consent or we have another lawful reason for using it. Unless we say otherwise below, we’ll use your personal information on the basis that it’s within our legitimate interests in operating and maintaining the site, and providing you with site functionality and related services.

We register and use personal data for the provision of financial services and products, including:

• Payment services
• Accounts
• Loans and credits
• Digital banking solutions
• Insurance services

We also register and use data for other activities related to the provision of certain services and products, including:

• member service, advice and administration
• credit assessment
• developing and managing our products, services and business
• marketing of our services and products
• setting fees and prices for our services and products
• member identification and verification
• risk management recovering outstanding debt
• respond to your queries (for example, if you’ve asked a question or submitted a complaint via the site) provide you with information,
• products or services you have requested or which we feel may interest you, unless you tell us otherwise
• allow you to participate in any interactive features of the site
• notify you about changes to the site
• ensure site content is presented in the most effective manner for the device you’re accessing it from undertake data analytics to learn more about how you and others interact with this site and with our advertising
• detect and prevent misuse or abuse of this site or our services

We also use information to meet our compliance obligations, to comply with other laws and regulations and to share with regulators and other authorities that Securityplus Federal Credit Union are subject to. This may include using it to help detect or prevent crime (including terrorism financing, money laundering and other financial crimes). We’ll only do this on the basis that it’s needed to comply with a legal obligation, it’s in our legitimate interests and that of others or to prevent or detect unlawful acts.

Who we’ll share your information with

We may share your information in order to provide you with products or services you’ve requested (for example, if they’re not provided by Securityplus Federal Credit Union), if we have a legitimate interest in doing so (e.g. to manage risk, verify your identity, to combat fraud, abuse of our site or services), or where you’ve agreed to us doing so.

We may share your information with others including any of our service providers, anyone else whose products and services you’ve requested, anyone who we’re under an obligation to disclose information to or where it’s in the public interest, for example to prevent or detect fraud, abuse of our site or services.

IP addresses

We may collect information about your computer (or mobile device), including where available your IP address, operating system and browser type, for system administration or for our own commercial purposes. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.

How long we’ll keep your information

We keep your data only for as long as it is needed for the purpose for which your data were registered and used. Therefore, we keep your information as long as we are providing a financial service or product to you. When your business connection with us has terminated we normally keep your data for 7 years. This enables us to comply with legal and regulatory requirements or use it where we need to for our legitimate purposes such as dealing with any inquiries.

We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes, e.g., to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, etc. If we don’t need to retain information for this period of time, we may destroy, delete or anonymize it more promptly.

Transferring your information overseas

Your information may be transferred to and stored in locations outside the European Economic Area (EEA), including countries that may not have the same level of protection for personal information. When we do this, we’ll ensure it has an appropriate level of protection and that the transfer is lawful.

You can obtain more details of the protection given to your information when it’s transferred outside the EEA by contacting us using the details in the ‘More details about your information’ section below.

Your rights

Insight into your personal data

You can obtain insight into the personal data we registered and use, where it comes from and what we use it for. You can obtain information about for how long we store your data and about who receives data about you. Your right of access may, however, be restricted by legislation, protection of other persons’ privacy and consideration for our business and practices. Our know-how, business secrets as well as internal assessments and material may also be exempt from the right of insight.

Manual processing

You can obtain insight into how an automated decision was made and the effects of the decision, and you are entitled to manual processing of any automated assessment.

Right to object

In certain circumstances, you have a right to object to our processing of your personal information. This is the case for example when the processing is based on our legitimate interest.

Objection to direct marketing

You have the right to object to our use of your personal information for direct marketing purposes, including profiling that is related to such purpose.

Correction or erasure of Securityplus Federal Credit Union’s data

If the data is incorrect, incomplete or irrelevant, you are entitled to have the data corrected or erased with the restrictions that follow from existing legislation and rights to process data. These rights are known as the "right to rectification”, "right to erasure” or "right to be forgotten”.

Restriction of use

If you believe that the data we have registered about you is incorrect, or if you have objected to the use of the data, you may demand that we restrict the use of these data to storage. Use will only be restricted to storage until the correctness of the data can be established, or it can be checked whether our legitimate interests outweigh your interests.

If you are entitled to have the data we have registered about you erased, you may instead request us to restrict the use of these data to storage. If we need to use the data we have registered about you solely to assert a legal claim, you may also demand that other use of these data be restricted to storage. We may, however, be entitled to other use to assert a legal claim or if you have granted your consent to this.

Withdrawal of consent

You can withdraw your consent at any given time. Please note that if you withdraw your consent, we may not be able to offer you specific services or products. Note also that we will continue to use your personal data, for example, to fulfill an agreement we have made with you or we are required to do so by law.

Data portability

If we use data based on your consent or as a result of an agreement, and the data processing is automated, you have a right to receive the copy of the data you have provided in an electronic machine-readable format.

Contact details and how can you complain

You are always welcome to contact us if you have questions. You can exercise your rights by contacting us using the details set out in the ‘More details about your information’ section below.

How we keep your information secure

We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.

More details about your information

If you’d like further information on anything in this Privacy Notice, or would like to contact our Data Protection Officer, contact us at Securityplus Federal Credit Union, P.O. Box 7560, Baltimore, Maryland 21207-0560, Attention: Data Protection Officer.

This Privacy Notice may be updated from time to time, and you’ll always be able to find the most recent version on this site.