8. The Right to Erasure
This right is also known as the ‘right to be forgotten’ and gives you the right to have your personal data deleted (or ‘otherwise disposed of’ if, for example, it is kept in paper records rather than electronically).
You can exercise this right by contacting us and asking for your data to be erased.
Please note that the right to erasure is not an absolute right and there are certain circumstances set out in the Data Protection Legislation in which the right does not apply. For example, we may not comply with your request to erase your personal data if we need it to comply with a legal obligation. If any of these circumstances apply, we will explain why your personal data cannot be erased when responding to your request for erasure.
9. The Right to Restrict Processing
You have the right to request the restriction or suppression of your personal data. In practice, this is an alternative to having your personal data erased. This means that you can limit the way in which we use your personal data, while still allowing us to retain it.
Please note that the right to restrict processing is not an absolute right and only applies in certain circumstances as follows:
- You have contested the accuracy of your personal data and we are verifying the accuracy of it;
- Your personal data has been processed unlawfully and you want us to restrict processing rather than erasing your personal data;
- we do not need the personal data any more, but you need us to keep it in order to establish, exercise, or defend a legal claim; or
- You have exercised your right to object (see Part 10, below), and we are considering whether our legitimate grounds for processing your personal data override your right to object to us using it.
When processing is restricted, we cannot do anything with your personal data other than store it unless we have your consent to do so or unless one of the following applies:
- we need to use your personal data in the establishment, exercise, or defence of legal claims;
- we need to use your personal data in order to protect the rights of another person; or
- Important public interest reasons justify using it.
You can exercise this right by contacting us and asking for the processing of your data to be restricted.
10. The Right to Data Portability
Where we are processing your personal data either with your consent or for the performance of a contract between us, and we are using automated means of processing (i.e. not using paper files), you have the right to obtain a copy of your personal data in a commonly-used format for use with another organisation. You can also request that we send your personal data directly to another organisation.
This right is designed to enable you to easily move, copy, or transfer your personal data from one organization’s IT system to another organization’s IT system in a safe and secure way, without affecting its usability.
Please note that this right only applies to personal data that you have provided to us. This includes information in your account or profile as well as data that we may obtain from your activities on our website, such as usage history and other factors such as location data. It does not include additional data that we may create based upon the data you have provided or to data that has been anonymised. In some cases, more personal data relating to you may be available under your right of access (see Part 6, above).
You can exercise this right by contacting us and asking either for a copy of your personal data for use with another organisation, or for your personal data to be transferred to that organisation.
11. The Right to Object
Where we are processing your personal data either on the basis of our ‘legitimate interests’ or in the performance of a task carried out in the public interest, you have the right to object to us processing your personal data.
You also have the absolute right to object to us using your personal data for direct marketing purposes.
If you object to us using your personal data for direct marketing purposes, your right to do so is absolute and we have no grounds on which to refuse.
If you object to us using your personal data either on the basis of our ‘legitimate interests’ or in the performance of a task carried out in the public interest, please note that your right to do so is not absolute. When making your request to exercise this right, you must give specific reasons for your objection based upon your particular situation. We can continue using your personal data if we can demonstrate ‘compelling legitimate grounds’ which override your interests, rights, and freedoms; or if the processing is necessary for the establishment, exercise, or defence of legal claims. Additional limitations apply if your personal data is being processed for research purposes.
You can exercise this right by contacting us and stating your objection to the processing of your personal data for the relevant purpose or purposes, providing an explanation if required (see previous paragraph).