It is an EU Regulation that will supersede the Data Protection Act 1998 and will take effect on 25 May 2018. Its purpose is designed to harmonise data protection laws across the EU and provide greater transparency and privacy in relation to personal data.
The GDPR applies to organisations operating within the EU who process personal data. Mamas & Papas (Retail) Limited is a controller of your data. It will, therefore, apply to Mamas & Papas (Retail) Limited and its group companies
A designated individual who is responsible for compliance with the data protection regulation. Mamas & Papas (Retail) Limited has appointed a DPO and they can be contacted at [email protected]
Any operation(s) in relation to personal data including:
- Collection, recording, organising, structuring, storage
- Adaptation or alteration
- Retrieval, consultation, use
- Disclosure by transmission, dissemination or otherwise making available
- Alignment or combination
- Restriction, erasure or destruction
A data controller is the person, including a company such as Mamas & Papas (Retail) Limited who determines the purposes and manner in which personal data is processed. A data controller is responsible for, and must be able to demonstrate compliance with, the principles relating to the processing of personal data.
A data processor is any person who processes personal data on behalf of the data controller.
A data subject is you an identified or identifiable natural person.
Any information that can be used to directly or indirectly identify a person, it can include anything from:
- Names
- Mailing addresses
- E-mail address
- Date of birth
- CCTV images of individuals
- IP address
As a data subject, you have the right to:
- Access your own personal data (otherwise referred to as a Subject Access Request):
- You can do this if you wish to obtain a copy of your personal information along with an explanation of the categories of data being processed, the purposes of such processing and the categories of third parties to whom your data may be disclosed.
- You can make a subject access request verbally or in writing.
- To exercise this right, please contact our Customer Services department on 0345 268 2000 or alternatively complete the ‘subject access request’ form and e-mail it to us.
- Ask for any mistakes regarding your personal data to be rectified where it is inaccurate or incomplete:
- This can be requested where, for example, we have referred to the correct name but wrong address.
- If you wish to notify us of any errors, please contact our Customer Services department on 0345 268 2000 or alternatively other contact methods can be found on our website under the ‘Contact Us’ link.
- Have your personal data deleted
- This is not an absolute right but can be done where, for instance, you believe your personal data is no longer necessary, if you no longer consent to your personal data being processed or where you believe it’s been unlawfully processed.
- To exercise this right, please contact our Customer Services department on 0345 268 2000 or alternatively complete the ‘data subject request’ form and e-mail it to us.
- Limit the processing of your personal data:
- You can request this if, for example, you have issues with the content of the personal information held or how it’s been processed.
- To exercise this right, please contact our Customer Services department on 0345 268 2000 or alternatively complete the ‘data subject request’ form and e-mail it to us.
- Object to your data being processed if it is being used, for example, in:
- Direct marketing such as marketing via email or telephone calls.
- To exercise this right, please contact our Customer Services department on 0345 268 2000 or alternatively complete the ‘data subject request’ form and e-mail it to us.
- Receive a copy of your personal data or transfer your personal data to another data controller
- To exercise this right, please fill out the ‘data subject request’ form and e-mail to us, detailing specifically what data you would like to be transferred. A member of the team may contact you to clarify the request.
- Not be subject to automated decision-making and/or profiling:
- Please fill out the ‘data subject request’ form and e-mail it to us. Remember to include as much information as possible to support your request.
If you wish to exercise your data subject rights, either contact our Customer Services Department on 0345 268 2000 or alternatively complete the Subject Access Request form and/or Data Subject Request form which can both be found below and email it to our dedicated team at [email protected]
Subject Access Request Form
Data Subjects Right Form