Retention
We will retain your personal data only for as long as is we need it in accordance with our Records Management Plan. This will usually be for 5 years from our last use of the data, but it may be for a shorter or longer period depending on the circumstances.
Consent
If we are using your personal data because you have consented to it, you have the right to change your mind and withdraw your consent at any time.
Your Rights
You have the following rights in relation to our use of your personal data:
- To be informed about how we use your personal data and about your rights; the Comhairle’s webpages under Privacy and Data Protection provide this information
- To have access to your personal data upon request (this is called making a subject access request - see below for further information)
- To ask us to rectify any inaccurate or incomplete personal data which we hold about you
- To ask us to erase (delete) any personal data which we hold about you
- To ask us to restrict our use of your personal data if the data which we hold is inaccurate or there is an issue with our use of your personal data
- To object to our use of your personal data in some circumstances
- To receive your personal data in a portable, standard and machine-readable format in some circumstances
- To lodge a complaint with the supervisory authority, the Information Commissioner’s Office, about how we use your personal data or how we deal with any of the matters set out in this notice; please visit the ICO’s website for contact details
Subject Access Requests
If you wish to make a subject access request then please contact dataprotection@cne-siar.gov.uk. We are required to respond to your request within one calendar month, although we may extend that period if the request is complex. We may refuse requests that are manifestly unfounded or excessive. Before submitting a subject access request, you may wish to consult the ICO’s guidance at Getting copies of your information (SAR).
Complaints
You have a right to complain if you believe that the Comhairle has not complied with data protection law in the way it has handled personal data. That could be in any respect but could include things such as:
- the way in which the Comhairle has responded to a subject access request
- security measures for storing personal data
- how the Comhairle has collected or used personal data
If you wish to complain you should contact the Comhairle’s Data Protection Officer setting out the details of your complaint. We will acknowledge your complaint promptly (and always within 30 days) and will answer your complaint without undue delay. We may ask you to verify your identity if we have any doubt; in that case, we will not proceed to investigate your complaint until satisfactory identification has been provided.
If you are unhappy with the outcome of the complaint then you may complain to the Information Commissioner’s Office.