Right to be informed

You have the right to be informed about what information we collect, how we use it, and the lawful bases we have for collecting your information.

Right of access

You have the right to access the information that we hold about you free of charge and within one month from us receiving the request. Where your request is complex or numerous, we may extend this period. In this case, we will inform you within one month of receipt of your request, and explain why the extension is necessary. A copy of this information will be provided free of charge, however we may charge a reasonable fee if the request is manifestly unfounded or excessive. This fee will be based on the administrative cost of providing this information to you.

Right to rectification

You have the right to have the information we hold about you corrected if it is inaccurate or incomplete. We must comply within one month of receiving your request, however we may extend this period by two months if the request is complex.

Right to erasure

You have the right to erasure (also known as the right to be forgotten). This applies where your information is no longer necessary to our purpose for collecting it, where you withdraw consent, where you object to the processing and there is no overriding legitimate interest for us to continue the processing, the personal data was unlawfully processed, the personal data has to be erased to comply with a legal obligation, the personal data is processed in relation to the offer of information society services to a child.

We can refuse to comply with a request for erasure if the personal data is processed for the following reasons:

• To exercise the right of freedom of expression and information;
• To comply with a legal obligation for the performance of a public interest task or exercise of official authority
• For public health purposes in the public interest;
• Archiving purposes in the public interest, scientific research, historical research or statistical purposes; or
• The exercise or defence of legal claims.

Right to restrict processing

You have the right to block or suppress the processing of your personal data. When processing is restricted, we may store your information but not further process it. We may retain just enough information about you to ensure that the restriction is respected in the future.

Right to data portability

You have the right to obtain and reuse your personal information for your own purposes across different services. This allows you to move, copy or transfer your personal information easily from one IT environment to another in a safe and secure way, without hindrance to usability.  This right applies to personal information that you have provided to us; if we rely on your consent or the performance of a contract, or if the processing is carried out by automated means.

Right to object

You have the right to object to processing which is based on legitimate interests or the performance of a task in the public interest / exercise of official authority; direct marketing, and processing for purposes of scientific or historical research and statistics.

Rights in relation to automated decision making and profiling

Staf does not carry out automated decision-making or profiling.