Under the GDPR, you have a number of rights:
Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of any personal information we hold about you and to check that we’re lawfully processing it.
Request rectification of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you rectified. You also have the right to ask us to complete any information which you think is incomplete.
Request erasure of your personal information. This lets you ask us to delete or remove personal information if there’s no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and you object to this. You also have the right to object where we are processing your personal information for direct marketing purposes.
Request the restriction of personal information to be processed. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Data portability only applies to personal information you have given to us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. This only applies if we’re processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
Withdraw your consent for your personal information to be used for marketing by contacting us and notifying us of your request to opt out. Generally we do not rely on consent as a legal basis for processing your personal data. However, where we do ask for your consent we will give you a clear choice in order to comply with the principle that any processing must be lawful, fair and transparent.
These rights do not always apply. You can find out more about your rights under the GDPR through the Information Commissioner’s Office: https://ico.org.uk/
Information Commissioner’s Office
Telephone: 0303 123 1113
Email online form: https://ico.org.uk/global/contact-us/email/
If you do not think that we have complied with your data protection rights or legislation you can complain or appeal to the Information Commissioner’s Office.