General Data Protection
Since May 2018, the Association has been subject to the rules set out in the General Data Protection Regulation (GDPR).
To allow us to deliver our services, we are required to hold information (data) on customers. However we must be clear about the information we collect from you, how we hold it, who we share it with, and how we dispose of it.
All customers have the right to access their information, request any changes, and to have their data deleted in line with the Regulation.
Customers have the right at any time to:
- ask for a copy of the information held by us in our records;
- require us to correct any inaccuracies in information held;
- make a request for us to delete any personal data which we hold;
- object to receiving any marketing communications from us.
If you would like to exercise any of your rights, please ask for the Data Protection Officer when you call us on 01294 468360, email dp@chaltd.org or use the contact details for our Data Protection Officers below:
Subject Access Requests
You have the right to find out what personal data we hold about you, why it is held and who it is disclosed to.
This is called a right of access and is commonly known as making a Subject Access Request or SAR.
You can make a SAR to find out:
- the information we hold about you;
- how we are using it;
- who we share it with; and
- where we got our data from.
We should reply to you within one calendar month of receiving your request.
It’s important to note that:
- it is preferred that an SAR is made in writing. A subject access request is available for download below, the use of this form is not mandatory but will assist with the collection of the relevant information to progress your request. Access requests can be made in other formats
- Identification is needed to make an SAR.
- A reasonable fee for the administrative costs of complying with an SAR may be charged if it is excessive or you request more copies of the information.
The Information Commissioner’s Office website has lots of information about your personal data rights including Subject Access Requests.
