You have rights in respect of your personal data. We will need to confirm your identity before we can consider your request so, if you wish to exercise any of these rights, we will need copies of any 2 of the following 4 forms of identity. A valid passport, driving licence or European Union I.D card or a utility bill dated within 1 month of the date of request.
Right of access – you have the right to know whether we are processing your personal data, and to a copy of that data. We would need as much information as possible to enable us to locate your data. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
Right to rectification – you have the right to have any incorrect personal data corrected or completed if it is incomplete. You can make this request verbally or in writing. We will need as much information as possible to enable us to locate your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
Right to erasure – this right, often referred to as the right to be forgotten allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
Right to restrict processing – you have the right to ask us to restrict processing of your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
Right to data portability – you have the right to move, copy or transfer your personal data from one IT environment to another. This right applies to data that you have provided to us and that we are processing on the legal basis of consent or in the performance of a contract and that processing is by automated means. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
Right to object – you have the right to object to our processing of your personal data based on (i) legitimate interests, or for the performance of a task in the public interests/exercise of official authority (including profiling); (ii) direct marketing (including profiling); and (iii) for purposes of scientific/historical research and statistics.
Legitimate interests/legal task – your objection should be based on your particular situation. We can continue to process the data if we can demonstrate compelling legitimate grounds which override your interests.
Direct marketing – you have an absolute right to ask us to stop processing for the purposes of direct marketing. We will action your request as soon as possible.
Scientific/historical research and statistics - your objection should be based on your particular situation. If we are conducting research where the processing is necessary for the performance of a public task, we can refuse to comply with your objection.
If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
Rights relating to automated decision making including profiling – you have the right in respect of automated decision making, including profiling. Where we carry out solely automated decision making, including profiling, which has legal or similarly significant effects on you, we can only do this if it is in connection with a contract with you, we have a right under law or you have provided your explicit consent. We will tell you if this happens and tell you how you can request human intervention or challenge the decision. If you want to exercise this right, please contact the Data Protection Officer using the contact details provided in this policy. If you want to know more about this right, the Information Commissioners Office has more guidance on their website: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/
Processing based on consent
Where we process your personal data based on your consent you have the right to withdraw that consent at any time without reason. You can opt-out by using the unsubscribe/opt-out in any marketing we send you and you can contact the Data Protection Officer using the contact details provided in this policy.
The right to lodge a complaint to the supervisory authority
If you are unhappy with any aspect of our handling of your data, you can make a complaint to the Information Commissioner’s Office - https://ico.org.uk/concerns/
Statutory/contractual requirement to provide personal data.
The personal data that you provide to us is necessary for us to carry out any contract you have entered into with us or for us to perform our obligations under Statute. This includes your name, the address you provided, your contact details and the text of any enquiry you made.
