The Rights of Individuals
Current data protection legislation provides individuals, or data subjects, with a number of rights providing them with control around the collection and processing of their personal data by organisations. You may exercise any of these Rights at any time, and may do so free of charge.
In order to authorise Red Snapper Managed Services Ltd. (RSMS) to conduct a subject access request you must provide your contact details, verification of your identity to a satisfactory level, and the reason for the request.
In the majority of cases we will respond in full to your request in 30 days as standard. If we are unable to satisfy this within such time frames, we will inform you of the nature of the delay and ensure it is fulfilled within a total of 60 days from the date the request was originally made.
You can make a request against any of the following rights to RSMS’s Data Protection Officer by contacting them in writing at email@example.com.
Right of Access
You have the right to know who (has received your data); what (data categories we hold on you); where (this data is processed); why (purpose of processing); and when (how long we retain the data for). Such information will also include any international data transfers, the identities of any third party processors, and how we received your data in the first instance.
Right to Rectification
If you believe we hold incorrect data on you, you have the right for it to be corrected. If data is found to be objectively incorrect, it will be rectified. Any subjective basis for challenging the accuracy of data cannot be corrected in the same way, but you do have the right to present your opinion and for that to be interlinked with the data in dispute.
Right to Erasure
You have a right to be forgotten. If the data we hold on you is no longer needed for the purpose for which it was collected, and there is no lawful reason for us to continue processing it, it will be deleted by us through our operating procedures. You do however also have the right to request this erasure yourself.
Right to Data Portability
As the owner of your personal data, you maintain the right to request a copy of the data you provided us be returned to you at any time. This can be provided to you or directly to a new data controller should you require. Personal data will be provided to you in a structured, commonly used, and machine-readable format.
Right to Object
We process data according to a number of legal bases, you have the right to request and challenge these.
If we are processing your data on the basis of the consent you have provided to us for the use of your data, you are free to inform us of your withdrawal of this consent at any time.
If we are processing your data on the basis of RSMS’s legitimate interests, you can object to such processing; unless a legitimate and irrefutable reason (e.g. legal obligation) for the processing can then be provided that supersedes your rights as the data subject, such processing must stop.
Lodging a Complaint
If you do not believe your personal data has been processed legally, or that we have not satisfied the criteria of any of your rights as a data subject, you have the right to lodge a formal complaint. In the first instance you should inform RSMS’s Data Protection Officer of the issue(s) by contacting them on firstname.lastname@example.org.
Should you find that you are still dissatisfied after Red Snapper’s DPO has provided you with a resolution we deem complete, then you are entitled to escalate the complaint to the Information Commissioner’s Office (the supervisory authority). The ICO is an independent body responsible for ensuring that organisations comply with current data protection legislation.
You should complain to the ICO if you believe we have failed to respond to your request; refused your request; failed to provide the information requested; or not responded within the designated time frame of 30 days.
You may lodge a complaint with the ICO here: https://ico.org.uk/concerns/handling/
Last edited: 26th April 2019