GATCO Logo
An air traffic controller

Privacy Policy

GATCO’s Privacy Policy complies with the UK General Data Protection Regulation (GDPR). This legislation currently sits alongside the Data Protection Act 2018.

This Privacy Policy only applies to GATCO members, no personal data is collected from non-GATCO members. The use of “you” and “your” in the remainder of this policy refers exclusively to GATCO members.

Information GATCO collects about you

1. GATCO is committed to safeguarding the privacy of its members.

2. GATCO collects and processes your personal data to support and administer your membership of GATCO and its aims and purposes. Your personal data is held securely in accordance with our internal data protection and security policies. The categories of personal data we collect about you may include:

  • Name in full.
  • Postal address(es).
  • Telephone number(s).
  • Your work location, which may include details of who your employer is and the watch you have been allocated to.
  • For military members, rank if declared.
  • Financial details for membership subscription purposes, including staff number where payments are made via salary deduction.
  • Username for accessing the members area of this website.
  • Date and IP address of the last log into the members area of this website.
  • Other personal details supplied by you for GATCO membership purposes.

3. Additionally, minutes of meetings and records of decisions may include your name and other information about you.

4. If you hold or have previously held appointments within GATCO, we may request further information and retain additional records about you, but only with your explicit consent.

5. GATCO does not collect or hold sensitive personal data about you. Sensitive personal data includes any information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric data, health-related data and sexual orientation.

How GATCO uses your information

6. We only use the information we collect about you lawfully and in accordance with current data protection legislation.

7. Your name and contact details are primarily used internally within GATCO. However, in order to receive a personal copy of GATCO publications, your name and address are shared with external companies contracted to edit, produce and distribute these.

8. If you participate in any membership activities, we may have to provide your name and other details to other stakeholders, eg event organisers.

9. GATCO will not pass your personal data to any commercial or charitable organisation without your explicit consent, other than for specific purposes as required by suppliers/stakeholders, as outlined above. GATCO will never sell your personal data.

10. Your explicit consent will be requested if your personal data is required to be transferred outside the European Economic Area for specific events, eg. IFATCA representation as a GATCO official.

11. If you cancel your GATCO membership, we will continue to hold your name and other relevant details required to support our historical records.

12. Should a personal data breach occur, GATCO will put in place measures to deal effectively with the breach and will inform you, without undue delay, to allow you to take any necessary precautions.

Your rights as GATCO member

13. Right of Access. You are entitled to access your personal data so that you are aware and can verify the lawfulness of the processing. This is achieved by submitting a Subject Access Request (SAR) to Membership Services. You have the right to obtain:

  • Confirmation that your data is being processed (held).
  • A copy of your personal data.
  • Other supplementary information relating to the clauses in this privacy policy.

This information is provided without charge and within one month. To protect your personal data, we may seek to verify your identity before releasing any information, which will normally be in electronic format. As a member, this will normally be a simple process, however, if the SAR is made from a member living overseas, or former member, or by the relative of a deceased member, additional verification steps are likely.

14. Right of Rectification. You are entitled to have personal data rectified if it is inaccurate or incomplete. GATCO will respond within one month of your request.

15. Right to Restrict Processing. You have a right to stop or restrict processing of personal data. When processing is restricted, GATCO is permitted to store the personal data, but further processing is prohibited. In this event, the information held and its motivation will be communicated to you.

16. Right of Erasure. You may request the deletion of removal of personal data when there is no compelling reason for its continued processing. The Right to Erasure does not provide an absolute ‘right to be forgotten’. However, you have a right to have personal data erased and to prevent processing in specific circumstances:

  • When you object to the processing and there is no overriding legitimate interest for continuing the processing.
  • The personal data was unlawfully processed.
  • The personal data has to be erased in order to comply with a legal obligation.

If you want to find out more about how GATCO complies with the GDPR, please download the document “GATCO compliance with GDPR” from the GATCO Documents section of the GATCO website.