When we process your data we must do so in line with the following principles:

Personal data must be:
• Adequate, relevant & limited to what is needed
• Accurate & up to date
• Kept no longer than is necessary

It must be processed:
• For specific, explicit & legitimate purpose(s)
• In a secure manner
• Lawfully, fairly & transparently

Under the GDPR, Mallow Credit Union Ltd. must provide you with a Privacy Notice where we outline certain information for example what personal data we use, what purpose(s) we use it for, how long we keep it, to whom we disclose it etc.

You are entitled to receive a copy of our Privacy Notice, which is available to you in-branch or to view here: Privacy Centre.

The GDPR enhances your rights in respect of your personal data. You have a right to:

• Access your data, information and copies of your data
• Object to processing, including profiling and direct marketing
• Erasure of your data in certain circumstances
• Restrict our use of your data while you challenge our processing
• Rectify your data where it might be incomplete or inaccurate
• Probability i.e. to be sent a copy of your data in a machine-readable format
• Automated Decisions i.e. to know about and intervene in automated decision making including profiling

Before we can even collect your data we must ensure that we have a lawful basis to process it. There are 6 lawful bases upon which we can rely to process your data:

• Where you have consented.
• To fulfil/enter a contract.
• Where we are legally obliged to.
• Where we are legally obliged to
• Where we have a legitimate interest in doing so
• To protect a person’s vital interests
• To complete a public task