Under the General Data Protection Regulation (GDPR) you have a number of rights regarding your personal data. The following information identifies each of these rights and how ENTRUST applies this right to your personal data.
Under GDPR you have the right to obtain:
We will provide this information to you free of charge unless the request is 'manifestly unfounded or excessive', when we may choose to charge an administration fee or refuse to respond.
We will endeavour to provide the information as soon as possible, and never more than one month after receipt of your request;
To ensure data security we will request evidence of identification before we supply any personal data.
Where you tell us that the information we hold on our records about you, is incorrect, we will update the data as quickly as possible, and no longer than one month after you have let us know.
If you are recorded as a current or past Governing Member of an EB and you tell us this is not correct, we will attempt to seek confirmation of this before taking any action to correct our records.
The GDPR introduces the right to have your personal data erased. However, this is not absolute and only applies in certain circumstances.
ENTRUST's lawful basis for processing personal data is 'for the performance of a task carried out in the public interest or in the exercise of official authority'. The right to erasure does not apply for this lawful basis.
You have the right to request that we restrict the processing of your personal data in certain circumstances. For example:
You have the right to request organisations provide you with a copy of your personal data to allow you to move, copy or transfer it from one IT environment to another.
This right only applies when the lawful basis for processing personal data is consent or for the performance of a contract. As ENTRUST's lawful basis is the performance of a public task, this right does not apply.
You have the right to object to processing your personal data in the performance of a task in the public interest or exercise of official authority. In this instance you must have an objection on 'grounds relating to your particular situation'.
In this instance we will demonstrate that our position as regulator of the Landfill Communities Fund (LCF) on behalf of HM Revenue & Customs overrides the interests, rights and freedoms of you, as an individual. Enrolment in the LCF, which is a statutory scheme, is voluntary and we are therefore processing your personal data in accordance with the Landfill Tac Regulations as set down in 1996.
ENTRUST does not undertake any automated decision making or profiling activities in relation to personal data.