PRIVACY POLICY
Last updated: 02.12.2023
1. Introduction
This website (“the Platform”) is independently developed and operated by Julian Eduard Vrajitoru (“the Administrator”).
The Platform is privately owned and is not an official GMB Union website.
The Administrator acts as a Data Processor for the GMB Branch at Hinkley Point C (“the Branch”) for the limited purpose of handling information submitted via this Platform.
The GMB Branch acts as the Data Controller for any personal data collected for union-related purposes.
This Privacy Policy explains how personal data is collected, used, stored, and protected when using this Platform.
2. Ownership of the Platform
The Platform, its design, structure, code, database, content arrangement, and associated systems are the exclusive property of Julian Eduard Vrajitoru, and are not owned, operated, or managed by GMB Union.
The Administrator provides technical services only and does not act as a GMB official in the operation of this Platform.
3. Data Roles Under UK GDPR
-
Data Controller: Julian Eduard Vrajitoru (Administrator)
-
Data Processor: Julian Eduard Vrajitoru (Administrator)
-
Hosting Platform: Wix.com (Sub-processor)
The Administrator processes data strictly under instruction from the Branch and does not use data for any independent purpose.
4. What Data Is Collected
The Platform may collect the following categories of personal data:
Identity data – name, date of birth, membership number
Contact data – email address, phone number
Employment data – workplace, job title, trade classification
Technical data – IP address, device information, browser type
Usage data – pages viewed, actions taken
Communication data – messages or queries submitted via forms
Only data voluntarily submitted is processed.
5. Purpose of Processing
Personal data collected through the Platform is processed for the following purposes:
Providing digital forms and communication tools
Supporting the Branch’s membership-related activities
Facilitating event, support, or workforce-related registrations
Responding to member enquiries
Maintaining system security and performance
The Administrator does not determine the purpose of processing.
6. Legal Basis for Processing
The Branch processes personal data under the following legal bases:
Legitimate Interests (Article 6(1)(f))
Contract (membership services)
Legal obligations under trade union legislation
Consent, where explicitly obtained (optional communications)
The Administrator processes data under the lawful basis defined by the Controller.
7. Data Sharing
Data submitted through the Platform may be shared with:
Authorised GMB Hinkley representatives
Authorised workplace representatives
Service providers required to operate the Platform (e.g., Wix)
Data is not sold, rented, or disclosed to unauthorised third parties.
8. International Transfers
If data is transferred outside the UK by service providers (e.g., cloud hosting), appropriate safeguards such as Standard Contractual Clauses are applied.
9. Data Retention
Data is retained only as long as necessary for the purpose for which it was collected, or as directed by the Data Controller.
The Administrator deletes or anonymises data upon instruction from the Controller.
10. Your Rights Under UK GDPR
You have the right to:
Access your data
Rectify inaccurate or incomplete data
Request deletion (subject to legal exceptions)
Restrict processing
Object to processing
Request data portability
Withdraw consent (where applicable)
Requests must be submitted to the Data Controller (the Branch).
The Administrator will act only upon instruction from the Controller.
11. Security Measures
The Platform uses:
Encrypted communications (SSL)
Role-restricted access
Password-protected administrative systems
Regular monitoring and security oversight
Secure hosting infrastructure provided by Wix
No system is 100% secure, but appropriate measures are taken to minimise risks.
12. Cookies
The Platform may use cookies for functionality and analytics.
Users may adjust cookie settings via their browser.
13. Children’s Data
The Platform is not intended for users under 16.
Personal data of minors is not knowingly collected.
14. Contact Information
Data Controller (GMB Hinkley):
Email: [insert branch email]
Data Processor / Platform Administrator:
Julian Eduard Vrajitoru
Email: iuli675@gmail.com
Telephone: 07517099518
15. Complaints
If you believe your data has been handled incorrectly, you may raise concerns with the Information Commissioner’s Office (ICO):
www.ico.org.uk | 0303 123 1113
16. Updates to This Policy
This Policy may be updated to reflect technical, operational, or legal changes.
Updates take effect once published on this page.