So… new GDPR regulations are ‘officially’ coming into effect this week, however it’s not necessarily all the panic that everyone is making out…. for many companies (including VSL) this should simply be the next step forward in data protection.
Companies should continue to ensure that their customers data (they have on record) is relevant, safe, secure and stored appropriately, the updated data protection laws i.e. GDPR, are designed to give you, the customer, better control over your personal data and where and when it is used. The aim of GDPR is to establish one single set of data protection rules across Europe that provides transparency for all individuals.
When companies obtain data from an individual, some of the areas that must be made clear to the data subject are:o The identity and contact details of the organisation behind the data request:
- The purpose of acquiring the data and how it will be used
- Whether the data will be transferred internationally
- The period for which the data will be stored
- The individual’s right to access, rectify or erase the data
- The individual’s right to withdraw consent at any time
- The individual’s right to lodge a complaint
We will not be sending you consent emails or filling your email box with copious amounts of text you will never get chance to read.
You can rest assured that we do not sell your information onto anyone else and we only hold information that you have given us. We store only the information we need to provide you with the products/services you have requested.
If at any point you would like to request details of what data we hold about you, well you can…simply drop us an email at firstname.lastname@example.org
Your Legal Rights
Request access to your personal data
This is commonly known as a “data subject access request”. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. To request access to your data please email us at email@example.com
Request correction of your personal data
This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. To request correction to your data please email us at firstname.lastname@example.org
Request erasure of your personal data
This enables you to ask us to delete or remove personal data where there is no compelling reason for us continuing to process it. Please Note: we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. To request the deletion of your data please email us at email@example.com
Object to processing of your personal data
You can object to processing of your personal data, where we are relying on a legitimate interest, and there is something about your situation (with regards to your fundamental rights and freedoms) which makes you want to object to processing on these grounds. You have the right to object where we are processing your personal data for direct marketing purposes (see below). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information.
Request restriction of processing
This enables you to ask us to suspend the processing of your personal data. VSL may continue to store the personal data; however, we will not process it any further, if you request this. The personal data that is stored will be reviewed and only the information required to ensure that the restriction is respected in future will be retained.
Right to withdraw consent
You can withdraw consent at any time where we are relying on consent to process your personal data. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. You can ask us to stop sending you marketing messages at any time by following the unsubscribe links on any marketing message sent to you or by contacting us at any time at firstname.lastname@example.org. If you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, product/service experience or other transactions.
Time limit to respond
We try to respond to all legitimate requests as quickly as possible, we aim to complete this within the one month stated by GDPR laws. If your request is particularly complex or you have made several requests, occasionally it may take us longer than a month, in this case, we will notify you and keep you updated at every stage. This data request will be provided Free of Charge.