What is your right under the GDPR? | How do we honour your right? | ||||||||
---|---|---|---|---|---|---|---|---|---|
The right to be informed | We must provide ‘fair processing information’, typically through a privacy statement such as this describing how and why We collect and use Your Personal Data.
Read more guidance from the ICO on what information we should supply to You and when You should be informed (which shall differ depending on whether or not We obtained the Personal Data directly from You or a third party). |
||||||||
The right of access | We try to be as open and transparent as We can be in terms of giving You access to the information that We hold on You. You are entitled to be able to check the lawfulness of any processing of Your Personal Data. You can log in to Your Account at any time to view the Personal Data that We hold about You on Your Account. You can find out if We hold (and process) any other Personal Data by making a ‘Data Subject Access Request’ (DSAR). To make a DSAR to access Your Personal Data that We may hold, You need to put the request in writing addressing it to the postal address provided. We will action Your request without delay and at the latest within one (1) month of Your request subject to any extensions granted. Alternatively, if You agree, We will try to deal with Your request informally, for example, by providing You with the specific information You need over the telephone.
If You wish, You can make Your request using the CloudLegal DSAR Form. If We do hold information about You, We will:
Read more guidance from the ICO. |
||||||||
The right of rectification | You are entitled to have Your Personal Data rectified if it is inaccurate or incomplete. If We have disclosed this to third parties, We will inform You. We have one month initially to rectify it subject to a possible extension.
Where We decide not to rectify, We shall provide an explanation as to why We are not making changes and inform You of Your further rights. Read more guidance from the ICO. |
||||||||
The right of erasure | ou have a legal and personal “right of erasure”, the extension of which is also known as the “right to be forgotten”. Upon Your request, We will close Your Account and remove Your Personal Data as soon as reasonably possible from all of Our records unless a lawful reason exists for Us to retain some or all of it.
Read more guidance from the ICO. |
||||||||
The right to restrict processing | You have a right to ‘block’ or ‘suppress’ the processing of Your Personal Data under certain circumstances but We are still entitled to store just enough of Your Personal Data to ensure that the restriction is respected in future.
Read more guidance from the ICO. |
||||||||
The right to object |
|
||||||||
The right to data portability | You are entitled to obtain (in a commonly used and machine readable form) and reuse Your Personal Data that You have provided to Us (via consent or contract performance) and which We process by automated means for Your own purposes across different services and free of charge. We must respond to a request without undue delay, and within one month whether or not We decide to action Your request. Where We decide not to, We shall inform You of Your further rights.
Read more guidance from the ICO. |
||||||||
Rights related to automated decision making and profiling | Subject to any exceptions, We should not take a potentially damaging decision concerning You as a result of using automated processing operations without human intervention. We must ensure that You have the opportunity to:
Read more guidance from the ICO.
|