You have the right to ask us for a copy of your personal data; to correct, delete, or restrict (stop any active) processing of your personal data, to obtain the personal data you provide to us for a contract or with your consent in a structured, machine-readable format, and to ask us to share (port) this personal data with another controller.
In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the personal data to meet a contractual or other legal requirement, or where we are using the personal data for direct marketing).
These rights may be limited, for example, if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in both the GDPR and in the Data Protection Act 2018. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with us via our Data Protection Champion using the details set out below. If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work, or where you believe a breach may have occurred. This likely to be the Information Commissioner’s Office in the UK.