Access your information (right of access)

You have the right to obtain the following from us where we are the Data Controller:

• confirmation that we are processing your personal data

• a copy of your personal data

• other supplementary information

In most cases, we can confirm whether we are processing your personal data in general terms. However, this will depend on the nature of the request. If the request is for a specific piece of information, we should be able to confirm or deny whether we are processing this information.

Other information 

You have the right to receive the following information (which largely corresponds with the information that we should provide in a privacy notice):

• our purposes for processing

• categories of personal data we are processing

• recipients or categories of recipient we have or will be disclosing the personal data to (including recipients or categories of recipients in third countries or international organisations)

• our retention period for storing the personal data or, where this is not possible, the criteria for determining how long we will store it

• your right to request rectification, erasure or restriction or to object to processing

• your right to lodge a complaint with the Information Commissioner’s Office (ICO)

• information about the source of the data, if we did not obtain it directly from you

• whether or not we use automated decision-making (including profiling) and information about the logic involved, as well as the significance and envisaged consequences of the processing for you; and the safeguards we have provided where personal data has or will be transferred to a third country or international organisation