Privacy Notice (GDPR)
Your Data Protection rights
Under data protection law, you have rights that we need to make you aware of. the rights available to you depend on our reason for processing your information.
Your right of access
You have the right to find out if we are using or storing your personal data. This is called the right of access. You exercise this right by asking for a copy of the data, which is commonly known as making a ‘subject access request’.
How to access you data
You can make a subject access request to find out what data is held and how it is used. You may make a subject access request before exercising your other information rights.
You can make a subject access request verbally or in writing. We would recommend emailing firstname.lastname@example.org.
If you make your request verbally, we would recommend that you follow it up in writing to provide a clear trail of correspondence. It will also provide clear evidence of your actions.
To exercise your right of access, follow these steps
You might not want all the personal data that we hold about you. We may be able to respond more quickly if you explain this and identify the specific data you want.
When making a subject access request, include the following information:
For example, you may want to ask for:
When can we say no?
We may legally have to refuse your subject access request if your data includes information about another individual, except where:
In deciding this, we will balance your right to access your data against the other individual’s rights regarding their own information
We can also refuse your request if it is ‘manifestly unfounded or excessive’. In any case we will tell you and justify our decision.