GDPR FAQs
We’re always on hand to offer advice or make things easier, so to help, we’ve compiled these FAQs. If you’ve got a question then they should do the trick.
What is the GDPR?
Who does the GDPR apply to?
What is a Data Protection Officer (DPO)?
What is processing?
Any operation(s) in relation to personal data including:
- Collection, recording, organising, structuring, storage
- Adaptation or alteration
- Retrieval, consultation, use
- Disclosure by transmission, dissemination or otherwise making available
- Alignment or combination
- Restriction, erasure or destruction
What is the difference between a data controller and a data processor?
What is a data subject?
What constitutes personal data?
Any information that can be used to directly or indirectly identify a person, it can include anything from:
- Names
- Mailing addresses
- E-mail address
- Date of birth
- CCTV images of individuals
- IP address
What rights do I have as a data subject?
As a data subject, you have the right to:
- Access your own personal data (otherwise referred to as a Subject Access Request):
- You can do this if you wish to obtain a copy of your personal information along with an explanation of the categories of data being processed, the purposes of such processing and the categories of third parties to whom your data may be disclosed.
- You can make a subject access request verbally or in writing.
- To exercise this right, please contact our Customer Services department on 0345 268 2000 or alternatively complete the ‘subject access request’ form and e-mail it to us.
- Ask for any mistakes regarding your personal data to be rectified where it is inaccurate or incomplete:
- This can be requested where, for example, we have referred to the correct name but wrong address.
- If you wish to notify us of any errors, please contact our Customer Services department on 0345 268 2000 or alternatively other contact methods can be found on our website under the ‘Contact Us’ link.
- Have your personal data deleted
- This is not an absolute right but can be done where, for instance, you believe your personal data is no longer necessary, if you no longer consent to your personal data being processed or where you believe it’s been unlawfully processed.
- To exercise this right, please contact our Customer Services department on 0345 268 2000 or alternatively complete the ‘data subject request’ form and e-mail it to us.
- Limit the processing of your personal data:
- You can request this if, for example, you have issues with the content of the personal information held or how it’s been processed.
- To exercise this right, please contact our Customer Services department on 0345 268 2000 or alternatively complete the ‘data subject request’ form and e-mail it to us.
- Object to your data being processed if it is being used, for example, in:
- Direct marketing such as marketing via email or telephone calls.
- To exercise this right, please contact our Customer Services department on 0345 268 2000 or alternatively complete the ‘data subject request’ form and e-mail it to us.
- Receive a copy of your personal data or transfer your personal data to another data controller
- To exercise this right, please fill out the ‘data subject request’ form and e-mail to us, detailing specifically what data you would like to be transferred. A member of the team may contact you to clarify the request.
- Not be subject to automated decision-making and/or profiling:
- Please fill out the ‘data subject request’ form and e-mail it to us. Remember to include as much information as possible to support your request.
How do I exercise my rights as a data subject?
If you wish to exercise your data subject rights, either contact our Customer Services Department on 0345 268 2000 or alternatively complete the Subject Access Request form and/or Data Subject Request form which can both be found below and email it to our dedicated team at [email protected]
Email us
Click here to email our Customer Service team.