By making a subject access request you have the right to obtain the following from us:
- confirmation that we are processing your personal data;
- a copy of your personal data; and
- other supplementary information – as set out below:
- the purposes of which we are processing your personal data;
- the categories of personal data concerned;
- the recipients or categories of recipient we disclose the personal data to;
- our retention period for storing the personal data or, where this is not possible, our criteria for determining how long we will store it;
- your right (in certain circumstances) to request rectification, erasure or restriction or to object to such processing;
- your right to lodge a complaint with the ICO or another supervisory authority;
- information about the source of the data, where it was not obtained directly from you;
- the existence of automated decision-making (including profiling); and
- the safeguards we provide if we transfer personal data to a third country or international organisation.
- Where your request relates to another rights based issue, you will be informed of the Board’s action or position in respect of the issue raised within the timescales set for handling requests (28 calendar days from receipt of request or receipt of proof of identity if required).