Under the UK General Data Protection Regulation, you have rights as an individual which you can exercise in relation to the information we hold about you:
- The right to be informed – you have the right to be informed about the collection and use of your personal data. This is a key transparency requirement under the UK GDPR.
- The right of access – you are entitled to request access to and a copy of, personal data we hold about you. There are some exemptions, which means you may not always receive all the information we process.
- The right to rectification – you have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- The right to erasure - you have the right to ask us to erase your personal data in certain circumstances. This is not an absolute right.
- The right to restrict processing may apply – you have the right to request that we stop processing your personal data in certain circumstances. However, this may delay or prevent us delivering a service to you. We will seek to comply with your request but may be required to hold or process information to comply with our legal duties.
- The right to object to processing - you have the right to object to processing if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests.
- The right to data portability - this only applies to personal data you have given us. You have the right to ask that we transfer the personal data you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated. This is not an absolute right.