Your right to know
In this section
Data protection
We comply with the Data Protection Act 2018 and General Data Protection Regulation (GDPR) principles to ensure personal data is:
- processed fairly and lawfully and in a transparent manner
- obtained for one or more specified, explicit and lawful purposes
- adequate, relevant and only limited to what is required
- accurate and, where necessary, kept up to date
- not kept in a form that permits the identification of data subjects for longer than necessary
- processed in accordance with the rights of data subjects
- processed in a manner that ensures appropriate security
Our Privacy Notice sets out how we collect, process and store personal data.
The Data Protection Act 2018 gives you additional rights regarding the information we hold about you and how we use it.
Right to information
You have the right to ask for information about what personal data is being processed and the rationale for such processing.
Right to access
You have the right to access your personal data, including to see or view personal data and request copies of it.
Right to rectification
You have the right to ask for modifications to your personal data in case you believe the data is not up to date or accurate.
Right to withdraw consent
You have the right to withdraw previously given consent to process your personal data for a purpose. This is only applicable where the lawful basis for processing the personal data is because you have consented to the processing of your personal data for one or more specific purposes.
Right to object
You have the right to object to the processing of your personal data. Normally, this is the same as the right to withdraw consent if the consent was appropriately requested and no processing other than legitimate purposes is being conducted.
Right to object to automated processing
You have the right to object to a decision based on automated processing. You can request for a service to be reviewed manually if you believe that automated processing of your request may not consider your unique situation.
Right to erasure (also known as the right to be forgotten)
You have the right to ask for the deletion of your data. This generally applies to situations where a customer relationship has ended. This is not an absolute right and depends on the retention schedule and retention period in line with other applicable laws.
Right for data portability
You have the right to ask for a transfer of your personal data. As part of such a request, you may ask for your personal data to be given to you or transferred to another controller. When doing so, the personal data must be provided or transferred in a machine-readable electronic format.
For more information, contact the Data Protection Officer at enquiries@threerivers.gov.uk