Right of access.

The following data rights for individuals are provided by the GDPR:

• Right to be informed:
  • the right to be informed means companies must give individuals clear, succinct and easily understandable information on what they want to do with their data.
• Right of rectification:
  • Individual data subjects have the right to rectify inaccurate personal data or have it fully completed if the information is not complete. They can request rectification in writing or verbally and the company has one calendar month to respond to them formally.
• Right of access:
  • People have the right of access regarding their personal data. You’ll often hear this referred to as ‘subject access’ They can make a subject access request from the company concerned either verbally or in writing, and the company has a month to respond.
• Right of erasure:
  • Also called ‘the right to be forgotten’, the right to erasure means individuals can request that their data is erased. The request can be made verbally or in writing and the company must respond within a month. This right only applies in certain circumstances and is not absolute (eg. billing data being kept 10 years)
• Right to restrict the processing of your data:
  • Individuals have the right to ask for the restriction or suppression of their personal data.
    Again, this is not absolute. It applies only in specific circumstances and means that companies can store the data but not use it. As with the other rights, individuals can write or verbally request restriction of their data, and the company must respond within a month.
• Right to object:
  • Under this GDPR right, individuals have the absolute right to object to their personal data being used for marketing reasons. Please note that Green Dwarf will never use personal data for marketing purpose.