Purpose / Activity | Data Type | Lawful Basis for processing |
---|---|---|
Administering and managing your mortgage, savings product or core capital deferred shares and related services. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. | Necessary to perform our contract with you. |
Updating your records. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. | Necessary to perform our contract with you. |
Tracing your whereabouts to contact you about your account. | • Identifying details. • Contact details. • Profile data. • Identification data. | Necessary to perform our contract with you. |
Processing your application for a product or service including assessing creditworthiness. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. | Necessary to perform our contract with you. |
Supporting you through arrears and collections processes. | • Identifying details. • Contact details. • Financial data. • Profile data. • Identification data. | Necessary to perform our contract with you. |
Managing third party access, such as power of attorney. | • Identifying details. • Contact details. • Financial data. • Profile data. • Identification data. | Necessary to perform our contract with you. |
To manage your membership with Ecology Building Society. | • Identifying details. • Contact details. | Legal Obligation. |
Establishment, defence and enforcement of our legal rights. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. • How you interact with us. • Technical data. | Legal Obligation. |
Prevention, detection and investigation of crime. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. • How you interact with us. • Technical data. • Criminal Data. | Legal Obligation. Additional basis for Criminal Data. Substantial Public Interest (preventing fraud, preventing money laundering and terrorist financing). |
Identity checks, anti-money laundering checks, and checks with fraud prevention agencies. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. • How you interact with us. • Technical data. • Criminal Data. | Legal Obligation. Additional basis for Criminal Data. Substantial Public Interest (preventing fraud, preventing money laundering and terrorist financing). |
Monitoring and record keeping. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. • How you interact with us. • Technical data. • Criminal Data. • Health Data. | Legal Obligation. Additional basis for Criminal Data. Substantial Public Interest (preventing money laundering and terrorist financing). Additional basis for Health Data. Explicit Consent. |
Handling data subject requests. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. • How you interact with us. • Technical data. • Criminal Data. • Health Data. | Legal Obligation. Additional basis for Criminal Data. Substantial Public Interest (preventing money laundering and terrorist financing). Additional basis for Health Data. Explicit Consent. |
Meeting our legal and regulatory obligations. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. | Legal Obligation. |
When we have to provide your information to them because some money paid to you by them should not be in your account. | • Identifying details. • Contact details. • Financial data. | Legal Obligation. |
Whistleblowing processing. | • Identifying details. • Contact details. • Profile data. | Legal Obligation. |
To test the performance of our products, services and internal processes. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. • How you interact with us. • Technical data. | Legitimate Interest. |
Management and audit of our business operations. | • Identifying details. • Contact details. • Financial data. • Personal information about your family. • Profile data. • Identification data. | Legitimate Interest. |
Searches at credit reference agencies as part of applications | • Identifying details. • Contact details. • Financial data. • Personal information. about your family. • Profile data. | Legitimate Interest. |
market research, analysis and developing statistics in relation to understanding our customers’ needs and circumstances in order to improve our service/products. | • Financial data. • Personal information. about your family. • Profile data. | Legitimate Interest. |
Buyers and their professional representatives as part of any restructuring or sale of our business or assets. | • Identifying details. • Contact details. • Financial data. • Personal information. about your family • Profile data. • Identification data. • How you interact with us. • Technical data. | Legitimate Interest. |
When you request that we share your personal information with someone else. | • Identifying details. • Contact details. | Consent. |
When agree to a referral to a trusted third party (eg insurance). | • Identifying details. • Contact details. | Consent. |
When you agree to share details about you, your property or project, including images, as part of a case study. | • Identifying details. • Contact details. • How you interact with us. | Consent. |
Direct marketing communications. | • Identifying details • Contact details • How you interact with us. | Consent. |
When it is necessary to provide additional support due to health or other circumstance, or to meet our regulatory requirements around this. | • Identifying details. • Contact details. • Personal information about your family. • How you interact with us. • Health Data. | Consent. |