Under the GDPR, you have rights relating to how we process your personal data. You can exercise your rights by emailing firstname.lastname@example.org or writing to us at our Head Office address (above).
These rights include:
• Right to be informed
You have the right to ask us to explain why your information is collected, how it is used, how long it will be stored for, and who it is shared with.
• Right to access
You have a right to access your personal data, this is called a Subject Access Request (SAR).
If you would like to submit request please visit the SAR page on the website. Alternatively, you may complete and return our Subject Access Request Form which is available on request. You may also submit your request verbally or in writing.
There may be some occasions when we are unable to provide you with some information for example, if it was provided in confidence or if it relates to a criminal proceeding. For more information, please refer to our Information Governance Policy or review information provided on www.ico.org.uk
• Right to rectification
We work to ensure that all personal data held about you is accurate and correct. However, there may be times when the information we hold is no longer accurate. If this is the case, please contact us and we will update it for you.
• Right to erasure
In some circumstances, you have the right to request the deletion of your personal data. This is not a guaranteed right as we may have a legitimate reason to keep the information. For example, an existing customer could not be forgotten as there is a distinct legal basis for Stockport Homes to be processing that data (the information is necessary for the performance of a contract). We would not be able to provide services to customers without using the personal data.
Where information is needed to fulfil statutory obligations, personal information shall be retained for those purposes, and so this right may not be applicable in those situations.
• Right to restriction
Where information cannot be erased you have the right to restrict the processing of your personal data. This limits how we use your personal information.
Where processing is based on your consent, you have the right to withdraw that consent. This can be actioned by you at any time.
• Right to data portability
In certain circumstances you have the right to have your personal data transferred from one organisation, to another. This right only applies to information you have provided to us and it does not apply to paper records.
• Right to object
You have the right to object to the processing of your personal data. Should you object to any processing please contact us with the details of your objection and we will take your concerns into account. This does not necessarily mean your data will be erased, instead we may restrict the processing.
You have the right to object to direct marketing communications. This can be actioned at any time and we will update our records accordingly.
You also have the right to object to any processing conducted wholly or partly by automated means. If you object to the decision you can request it be reviewed manually by a member of the organisation.
• Rights related to automated decision making and profiling
You have the right to not be subject to a decision that is made solely by automated means, including profiling, so long as the decision produces a legal effect.
Should you wish to object/not be subject to any automated decision please let us know any we will update out records.
• Right to lodge a complaint
If you are unhappy with the service received you may make complaint. More information on our complaints process is available here.
You also have the right to lodge a complaint with the supervisory authority, The Information Commissioners Office (ICO). To make a complaint, visit https://ico.org.uk/make-a-complaint/
For more information regarding your individual rights please see our Data Subject Rights Policy.