In this section, we have summarised the rights that you have under General Data Protection Regulation. Some of the rights are complex, and not all the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
Your principal rights under General Data Protection Regulation are:
- Right to Object
- Right of Access
- Right to be Informed
- Right to Rectification
- Right to Erasure
- Right to Restrict Processing
- Right to Data Portability
- Right related to Automated Decision Making including Profiling
The right of objection
You can exercise these rights if:
- Processing relies solely on legitimate interest
- Processing is for scientific or historical research
- Processing includes automated decision making and profiling when not necessary
- Processing is for direct marketing purposes
The right of access
You or any third-party acting on your behalf with your authority may request a copy of the Personal Data we hold about you without charge.
We will ask to verify your identity or request evidence from the third-party that they are acting on your behalf before releasing any Personal Data we hold about you.
The right to be informed
We are required, to provide clear and transparent information to you about how we process your Personal Data. This Privacy Policy addresses this right.
The right of rectification
If you believe the Personal Data we hold about you is incorrect or incomplete, you have the right to correct this and you may exercise this right along with the right to restrict processing until these corrections are made.
The right to erasure
If there is no legal basis or legitimate reason for processing your Personal Data, you may request that we erase it.
The right to restrict processing
You may ask us to restrict the processing of your Personal Data. This means we will still hold it but not process it. This is a conditional right which may only be exercised when:
- Processing is unlawful
- We no longer need the Personal Data, but it is required for a legal process
- You have exercised your right to object to processing and require processing to be halted while a decision on the request to object is made.
- If you are exercising your right to rectification
The right to data portability
You can request that your Personal Data is transferred to another Controller or Processor in a machine-readable format if:
- Processing is based on consent
- Processing is by automated means (i.e. not paper based)
- Processing is necessary for the fulfilment of a contractual obligation
Rights relating to automated decision making including profiling
You have the right to object to the processing of your Personal Data in certain circumstances.
In other cases, we may continue processing your Personal Data if we have a compelling reason for doing so.
If you have any question about these rights, please see “additional information”, section 15 of this policy.