Introduction
Under the General Data Protection Regulation, you have the following rights:
● Right to be informed● Right of access● Right to rectification● Right to erasure● Right to restriction of processing● Right to data portability● Right to object● Rights concerning automated decision making and profiling
Right of access
You have the right to access your personal data and supplementary information. This allows you to be aware of, and to verify the lawfulness of, the processing.
What information are you entitled to?
You have the right to obtain
● Confirmation that your data is being processed● Access to your personal data● Other supplementary information
Why do you have the right of access?
The reason for allowing you to access your personal data is so that you are aware of and can verify the lawfulness of the processing.
How much will be charged for subject access request?
We will provide a copy of the information free of charge. However, a “reasonable fee” will be charged when a request is manifestly unfounded or excessive, particularly if it is repetitive.
You may also be charged a reasonable fee to comply with requests for further copies of the same information.
The fee will be based on the administrative cost of providing the information.
How long will it take to comply with the request?
We must provide information requested without delay and at the latest within one month of receipt.
This period can be extended by up to a further two months where requests are complex or numerous. In that event, you will be informed within one month of the receipt of the request, together with an explanation of why the extension is necessary.
If the request is manifestly unfounded or excessive
Where requests are manifestly unfounded or excessive, particularly if they are repetitive, we can either charge a reasonable fee taking into account the administrative costs of providing the information or refuse to respond.
If we refuse to respond to a request, we will explain why and inform you of your right to complain to the supervisory authority and to a judicial remedy without undue delay and at the latest within one month.
How will the information be provided?
We must verify the identity of the person making the request. You will therefore be requested to provide relevant identification documentation, details of which will be supplied at the time the request is made. If the request is made electronically, you should provide the information in a commonly used electronic format.