What is your right under the GDPR? How do we honour your right?
 The right to be informed We must provide ‘fair processing information’, typically through a privacy statement such as this describing how and why We collect and use Your Personal Data.

 

Read more guidance from the ICO on what information we should supply to You and when You should be informed (which shall differ depending on whether or not We obtained the Personal Data directly from You or a third party).
 The right of access We try to be as open and transparent as We can be in terms of giving You access to the information that We hold on You. You are entitled to be able to check the lawfulness of any processing of Your Personal Data. You can log in to Your Account at any time to view the Personal Data that We hold about You on Your Account. You can find out if We hold (and process) any other Personal Data by making a ‘Data Subject Access Request’ (DSAR). To make a DSAR to access Your Personal Data that We may hold, You need to put the request in writing addressing it to the postal address provided. We will action Your request without delay and at the latest within one (1) month of Your request subject to any extensions granted. Alternatively, if You agree, We will try to deal with Your request informally, for example, by providing You with the specific information You need over the telephone.

If You wish, You can make Your request using the CloudLegal DSAR Form. If We do hold information about You, We will:

  • Describe the information We hold and tell You why We are holding it;
  • Tell You who it could be shared with; and,
  • Provide You with a copy of the requested information in an easy to understand format.

Read more guidance from the ICO.
 The right of rectification You are entitled to have Your Personal Data rectified if it is inaccurate or incomplete. If We have disclosed this to third parties, We will inform You. We have one month initially to rectify it subject to a possible extension.

Where We decide not to rectify, We shall provide an explanation as to why We are not making changes and inform You of Your further rights.

Read more guidance from the ICO.
 The right of erasure ou have a legal and personal “right of erasure”, the extension of which is also known as the “right to be forgotten”. Upon Your request, We will close Your Account and remove Your Personal Data as soon as reasonably possible from all of Our records unless a lawful reason exists for Us to retain some or all of it.

 

Read more guidance from the ICO.
 The right to restrict processing You have a right to ‘block’ or ‘suppress’ the processing of Your Personal Data under certain circumstances but We are still entitled to store just enough of Your Personal Data to ensure that the restriction is respected in future.

Read more guidance from the ICO.
 The right to object  

You have the right to object to Us processing Your Personal Data: Unless:
 based on legitimate interests or the performance of a (legal) task in the public interest/ exercise of official authority (including profiling);  We can demonstrate compelling legitimate grounds for the processing, which override Your interests, rights and freedoms; or, the processing is for the establishment, exercise or defence of legal Claims;
 for purposes of scientific/historical research and statistics provided that You have “grounds relating to Your particular situation”;  the processing is necessary for the performance of a public interest task;
 for direct marketing (including profiling) N.B. There are no exemptions or grounds to refuse. You have an absolute right to object to Us processing Your Personal Data for the purposes of direct marketing.

 The right to data portability You are entitled to obtain (in a commonly used and machine readable form) and reuse Your Personal Data that You have provided to Us (via consent or contract performance) and which We process by automated means for Your own purposes across different services and free of charge. We must respond to a request without undue delay, and within one month whether or not We decide to action Your request. Where We decide not to, We shall inform You of Your further rights.

Read more guidance from the ICO.
 Rights related to automated decision making and profiling Subject to any exceptions, We should not take a potentially damaging decision concerning You as a result of using automated processing operations without human intervention. We must ensure that You have the opportunity to:

  • obtain human intervention;
  • express your point of view; and,
  • obtain an explanation of the decision and challenge it.

Read more guidance from the ICO.