Under certain circumstances, by law, you have the right to;
17.1 Request Access to your personal information (commonly known as a “data subject access request” DSAR). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it
17.2 Request Correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
17.3 Request Erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below point 17.4).
17.4 Object to Processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
17.5 Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
17.6 Request the transfer of your personal information to another party (also known as portability).
17.7 Right to Withdraw Consent where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose (in limited circumstances). You have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information unless there is a legitimate legal or regulatory reason to do so.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal information, withdraw consent for specific processing, or request that we transfer a copy of your personal data to another party, please contact the GDPR Committee as explained in point 3.
You will not have to pay a fee to access your personal data, (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of the other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.