10.1 Access to personal information
Individuals who are the subject of personal data held by Almond Engineering Ltd are entitled to:
- Ask what information the company holds about them and why
- Ask how to gain access to it
- Be informed how to keep it up to date
- Be informed how the company is meeting its data protection obligations
If an individual contacts the company requesting this information, this is called a subject access request or SAR. Subject access requests from individuals should be made by email, addressed to firstname.lastname@example.org
We will respond to Subject Access Requests within one month as is the requirement under GDPR. We will always verify the identity of anyone making a subject access request before handing over any information.
10.2 Correcting personal information
Individuals may ask us to correct any personal information about them that is inaccurate, incomplete or out of date.
10.3 Deletion of personal information
Individuals have the right to ask us to delete personal information about them where:
- You consider that we no longer require the information for the purposes for which it was obtained
- We are using that information with your consent and that consent has been withdrawn
- You have validly objected to our use of their personal information
- Our use of your personal information is contrary to law or our other legal obligations
10.4 Objecting to how we may use personal information
Individuals have the right at any time to require us to stop using their personal information for direct marketing purposes.
10.5 Restricting how we may use personal information
In some cases, individuals may ask us to restrict how we use their personal information. This right might apply, for example, where we are checking the accuracy of personal information that we hold or assessing the validity of any objection made by an individual to our use of their information. The right might also apply where there is no longer a basis for using an individual’s personal information but they don’t want us to delete the data. Where this right is validly exercised, we may only use the relevant personal information with the individual’s consent, for legal claims or where there are other public interest grounds to do so.
10.6 Withdrawing consent to using personal information
Where we use personal information with individual consent the individual may withdraw that consent at any time and we will stop using that personal information for the purpose(s) for which consent was given.
For queries as to whether the GDPR applies to the processing of your personal information or, if the GDPR does apply, and you wish to exercise any of these rights then please contact us. Please use the Contact information on our website.