INTERNATIONAL ASSOCIATION OF HYDROGEOLOGISTS
DATA SECURITY POLICY

This policy covers the use that IAH makes of personal information that we hold on our members or anyone who visits our website at www.iah.org All personal information which IAH holds or acquires will be treated in accordance with this policy and in accordance with applicable legislation and current internet best practice.

Information we hold

For our members we hold details of name, address, telephone and fax numbers and e-mail addresses, all as provided by the member on joining the Association or amended by their instruction. Where a member’s billing address is different from their mailing address we may hold two sets of address details.

For non-members who are subscribers to our electronic newsletter we hold only their e-mail address

IAH will not retain information on anyone who visits our web site but who does not complete any on-line forms.

What we do with personal information

For our members we use the personal information to manage their membership of the Association including distribution of publications, electronic newsletters, other information and payment requests. This involves providing personal information under controlled conditions to our agents. We make some of the personal information available in an on-line membership directory to enable members to make contact with other members. Access to this information is restricted to members who have to use their membership number and personal password to access the directory. Members may change their passwords at any time.

For non-members we only use their information to distribute the electronic newsletter for which they have registered. Every copy of the electronic newsletter contains unsubscribe information.

We do not provide any personal information we hold to third parties - that is to non-members of the Association

We do not obtain or supplement personal information from any other external sources.

What choices do individuals have regarding use of personal information?

For reasons of efficiency and economy the Association uses electronic systems of administration and cannot accept into membership persons who are not willing for the Association to hold their address and other personal information electronically. Members may opt however to withhold their data from the on-line membership directory in which case it will only be available to the Association’s staff for their legitimate needs. Members are reminded of these choices periodically in electronic and printed communications. This was most recently done in August 2007.

Our commitment to data security

The Association affirms its commitment to a high level of security for the personal information it holds. Responsibility for the implementation of this privacy policy is the responsibility of the Association's Company Secretary who reports to the Council of the Association. All personal data is verified before being added to our databases and no information is captured by unverified electronic means. Strict control is kept upon member passwords, which can only be accessed by authorised staff. Lost passwords are only released back to members, either by mail to a verified address or by e-mail to a verified e-mail address. Any reports of misuse of personal information or other complaints will be investigated and the findings reported to the Association's Council

IAH August 2007