YOUR RIGHTS
Under GDPR, you are entitled to access your Personal Data (this is known as a "right to access"). If you wish to make a request, please do so in writing addressed to our Data
Protection Officer.
A right to access your Personal Data means that you are entitled to a copy of the data we hold on you – such as your name, address, contact details, date of birth, etc.- but it does not mean you are entitled to the documents that contain this data.
Under certain circumstances, in addition to your right to access, you have these rights:
● The right to be informed: which is fulfilled by our making this Policy available and our transparent explanation as to how we use your Personal Data;
● The right to rectification: you are entitled to have Personal Data rectified if it is inaccurate or incomplete;
● The right to erasure / 'right to be forgotten: you have the right to request the deletion or removal of your Personal Data where there is no compelling reason for its continued processing. This right only applies in these circumstances:
● where the Personal Data is no longer necessary as regards the purpose for which it was originally collected;
● where consent is relied upon as the lawful basis for holding your data, and you withdraw your consent;
● where you object to the processing, and there is no overriding legitimate interest for continuing the processing;
● that the personal data was unlawfully processed;
where you object to the processing for direct marketing purposes.
● The right to object: you have the right to object to processing based on legitimate interests, and direct marketing. This right only applies in these circumstances:
● an objection to stop processing personal data for direct marketing purposes is absolute; there are no exemptions or grounds to refuse and we must stop processing for such purposes;
● where you have an objection based on grounds relating to your particular situation;
We must stop processing your Personal Data unless:
● we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms; or
● the processing is for the establishment, exercise or defense of legal claims.
● The right to restrict processing: you have the right to request the restriction or suppression of your Personal Data. When processing is restricted, we can store the data but not use it. This right only applies in these circumstances:
● where you contest the accuracy of the Personal Data, we should restrict the processing until we have verified the accuracy of that data;
● where you object to data processing which was necessary for the performance of public interest or purpose of legitimate interests, and we are considering whether our legitimate grounds override your right;
● where the processing is unlawful and you request restriction;
if we no longer need the data, but you require it to establish, exercise, or defend a legal claim.
When contacting us please ensure that you provide relevant information to allow us to identify you and state the right or rights that you wish to exercise. We may need to contact you to request further information to verify your identity.
We will respond to you within one month of receipt of a valid request.