Data Subjects Rights and Requests
Data Subjects have rights when it comes to how we handle their Personal Data. These include rights to:
- Withdraw Consent to Processing at any time.
- Receive certain information about the Data Controller's Processing activities.
- Request access to their Personal Data that we hold.
- Prevent our use of their Personal Data for direct marketing purposes.
- Ask us to erase Personal Data if it is no longer necessary in relation to the purposes for which it was collected or Processed or to rectify inaccurate data or to complete incomplete data.
- Restrict Processing in specific circumstances.
- Challenge Processing which has been justified on the basis of our legitimate interests or in the public interest.
- Request a copy of an agreement under which Personal Data is transferred outside of the EEA.
- Object to decisions based solely on Automated Processing, including profiling (ADM).
- Prevent Processing that is likely to cause damage or distress to the Data Subject or anyone else.
- Be notified of a Personal Data Breach which is likely to result in high risk to their rights and freedoms.
- Make a complaint to the supervisory authority.
- In limited circumstances, receive or ask for their Personal Data to be transferred to a third party in a structured, commonly used and machine-readable format.
You must verify the identity of an individual requesting data under any of the rights listed above (do not allow third parties to persuade you into disclosing Personal Data without proper authorisation).
You must immediately forward any Data Subject request you receive to your supervisor OR the DPO and comply with the Council's Data Subject response process.