GDPR has enhanced the rights of individuals. At NWL we want to provide you with as much information as we can in order to in order to make it as easy as possible for you to exercise your rights. Your rights are:
• The right to be given specific information on your personal data we collect.
• The right of access to your personal data.
• The right to rectify any of your personal data which is inaccurate.
• The right to erase your personal data in certain circumstances.
• The right to restrict processing of your personal data.
• The right to data portability.
• The right to object to certain processing.
• Rights in relation to automated decision making and profiling.
Right of access
You have the right to see all the personal information we hold about you.
We’ll handle routine enquiries as part of our usual customer service. If you want to see more of the information that we have about you, you can make a Data Subject Access Request (SAR).
As part of an access request you can also ask:
a) purpose of processing
b) categories of personal data concerned
c) the recipients or categories of recipients to whom the personal data has or will be disclosed
d) the period of time for which the information will be stored
e) your right to request rectification or erasure or restriction of processing
f) where the information is not collected directly from you, any detail as to its source
g) the existence of automated decision making, including profiling as well as the significance/ consequences of such processing
h) if transferred to a third country, the right to be informed of the safeguards in place relating to the transfer
To help you make your request, we have produced a form which you can find on our website here. We may reply to you where we need further information to help respond effectively to your request
To ensure that we only give your information out to you and not someone else, you will need to provide us with two current forms of identification.
Once we receive your written request, any clarifications, identification, we respond as soon as we can within 1 calendar month.
You can either post your form to:
PO Box 200
Or email it to us:
Right to rectification
You have the right to ask us to correct any of your personal data we hold about you which is inaccurate.
We always try to maintain your personal data as accurately as possible.
Right to erasure
The right to erasure allows for you to have your personal data erased. You may have heard this right called ‘the right to be forgotten’.
This right is not absolute and only applies in the following circumstances:
a) the personal data is no longer necessary for the purpose which we originally collected or processed it for;
b) we are relying on consent as our lawful basis for holding the data, and you have withdrawn your consent;
c) we are relying on legitimate interests as our basis for processing, you object to the processing of your data, and there is no overriding legitimate interest to continue this processing;
d) we are processing the personal data for direct marketing purposes and you object to that processing;
e) we have processed the personal data unlawfully
f) we have to do it to comply with a legal obligation; or
g) we have processed the personal data to offer information society services to a child.
Right to restriction of processing
You have the right to ask NWL to restrict processing of your personal data. This is not an absolute right and only applies when:
• You contest the accuracy of your personal data
• The processing is unlawful
Right to data portability
The right to data portability allows you to obtain and reuse your personal data for your own purposes across different services. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way.
This right would only apply if we process your personal data on the basis of:
• your consent
• a contract
• the processing is carried out by automated means
Right to object and automated individual decision taking
You have the right to object at any time to automated processing (making a decision solely by automated means without any human involvement) or profiling.
If you want to contact us about your rights or to find out more please email email@example.com