The UK CAA's Consumers and Markets Group collects and stores your name, address, telephone, email, firm details and Professional Accountancy Body (PAB) membership information for the purpose of your designation as an ATOL Reporting Accountant (ARA) and for processing ATOL renewal applications which you are associated with; AAR Part 1, AAR Part 2 and Airline Ticket Agent reports, where applicable.
Why we process your personal information
The processing of your personal information is necessary for the performance of a task we carry out in the public interest or official authority vested in us in accordance with UK/EU law.
Who sees your personal information and why
We need to share your personal data with internal CAA staff for the purpose of processing ATOL renewal applications.
We may also share your personal data with the applicable PAB based in the UK, who also act as data controllers/processors for the purpose of sharing information related to their members and for updating their current members status for the Designated ARA register held by the CAA. The PABs are: ACCA (Association of Chartered Certified Accountants), AAT (Association of Accounting Technicians), AIA (Association of International Accountants), IFA (Institute of Financial Accountants), ICAS (Institute of Chartered Accountants of Scotland), ICAI (Institute of Chartered Accountants in Ireland) and ICAEW (Institute of Chartered Accountants in England & Wales).
ACCA, AIA and ICAEW have additional offices outside of the EU, but your personal information will not be transferred outside the EU.
How long we keep your personal information and why
We will delete all personal information associated with an individual ATOL holder, a maximum of 10 years after expiry of an ATOL, refusal to grant an ATOL or a revocation of an ATOL. The data is held for industry intelligence and policy work purposes. We will also delete all personal information associated with the ARA register 5 years after you have ceased to be an ARA designate. The data is held for this period to provide a fuller historical picture in the context of the decision set out above.
Your individual rights
You may submit an information enquiry or make a complaint about how we have processed your personal information by emailing FOI.requests@caa.co.uk. Please be aware that the CAA is subject to the Freedom of Information Act, which means we may need to release information you have supplied to us. However, we would never disclose your personal information without first obtaining your consent.
You have further rights as a data subject, which can be found here. Contact details of the CAA's Data Protection Officer can be found here. You have a right to complain to the ICO about the CAA's processing of personal data. Access to our General privacy notice can be found here.
This privacy notice is subject to change.