Your Rights Under the GDPR

Under the GDPR you have the following rights:

  1. You have the right to confirmation that your personal information (“Data”) is being processed.
  2. You have the right of access to your data. Information must be provided within one month from receipt of your request unless the requests are complex or numerous in which case the compliance period may be extended by a further two months.
  3. You have the right to have your data corrected if it is wrong. A response must be given within one month from receipt of the request unless the request is complex or there are a number of requests in which case the compliance period may be extended by a further two months.
  4. You have the right to erasure of your data also known as “The right to be forgotten”. This is not an absolute right and only applies in certain circumstances.
  5. You have the right to withdraw your consent to the processing of your data at any time where consent was the lawful basis for processing your data.
  6. Where there is any dispute about the accuracy or processing of your data you have the right to request the restriction or suppression of your data. This is not an absolute right.  Your request must be acted upon within one month from the date of receipt of your request.
  7. You have the right to data portability so that you may take your data or ask me to transfer it elsewhere.  This right only applies to data: which you have provided to me; the processing of your data is based on your consent or the performance of the contract between us or I process your data by automated means.  Your request must be acted upon within one month from the date of receipt of your request unless the request is complex or there are numerous requests in which case the period may be extended by a further two months.
  8. You have the right to object to processing where:
    • The processing is based on legitimate interest or the performance of a task in public interest/exercise of official authority (including profiling);
    • Direct marketing (including profiling); and
    • Processing for the purposes of scientific/historical search and statistics.

If you wish to exercise any of the rights set out above, please contact me.

No Fee Required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights).  If your request is clearly unfounded, repetitive or excessive I may charge a reasonable administrative fee or alternatively refuse to comply with the request.

What I May Require From You

I may need to request specific information from you to help me confirm your identity and ensure your right to access your personal data or to exercise any of your other rights.  This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.  I may also contact you to ask you for further information in relation to your request to speed up my response.