As a data subject, you have a legal right, under EU Regulation 2016/679 General Data Protection Regulation (“GDPR”) to find out about our use of your personal data as follows:
- Confirmation that your personal data is being processed by us;- Access to your personal data; How we use your personal data and why;- Details of any sharing or transfers of your personal data;- How long we hold your personal data;- Details of your rights under the GDPR including, but not limited to, your rights to withdraw your consent to our use of your personal data at any time and/or to object to our processing of it.
You are currently entitled to receive this information under the Data Protection Act 1998 (DPA) and will continue to be under the EU General Data Protection Regulation (GDPR), which comes into effect on 25 May 2018. We will also provide you with information about any processing of your personal data that is being carried out, the retention periods which apply to your personal data, and any rights to rectification, erasure, or restriction of processing that may exist.
We will endeavour to respond promptly and in any event within one month of the latest of the following: Our receipt of your written request and our acceptance of the proof of identity of the data subject; or Our receipt of any further information we may ask you to provide to enable us to comply with your request.
The information you supply in this form will only be used for the purposes of identifying the personal data you are requesting and responding to your request. You are not obliged to complete this form to make a request, but doing so will make it easier for us to process your request quickly.
NO FEENo fee is payable under normal circumstances.
While in most cases we will be happy to provide you with copies of the information you request, we nevertheless reserve the right, in accordance with section 8(2) of the DPA, not to provide you with copies of information requested if to do so would take “disproportionate effort”.
We also reserve the right to charge a reasonable fee for requests which are unfounded, excessive or repetitive. Such charges will be based only on the administrative cost that we will incur to respond.
However in each case, we will make every effort to provide you with a satisfactory form of access or summary of information if suitable.
We will only use the information you provide on this form to identify you and the personal data you are requesting access to, and to respond to your request.