To ensure fair and transparent processing it is important that we inform you of your rights with regards to how your personal data is processed. Where you wish to exercise a right, we have signposted the best contact details for you to get in touch with us. We will need to confirm your identity before your request can be processed.
11.1 – Your right to be informed
This is our privacy notice which informs you of who we are, why we are processing your personal data, with whom we share your personal data and how we have collected it. These details are set out above.
Our privacy notice can be found on our website and is signposted on our web portals and other key business documentation (such as on contracts and invoices). Our staff are trained to provide this notice in hard copy, soft copy or orally on request.
If you would like to discuss this privacy notice or suggest ways which we could improve the content or its communication then please contact a member of staff on 0161 413 6146 who will put you in contact with the data protection manager or email email@example.com.
11.2 – Your right to access
As a data subject, you have the right to access the personal data we hold about you and check that we are lawfully processing it.
To make a data subject access request (DSAR) is free and can be done in writing by emailing us at firstname.lastname@example.org or alternatively writing to us at:
Quay Interiors Limited
Blue Tower, MediaCityUK, M50 2ST
You can also speak to a member of staff on 0161 413 6146 who will put you in contact with the data manager should you have any questions or queries relating to a DSAR.
In line with legal requirements we do not have a data protection officer due to the nature and volume of our processing activities. However, we have appointed a data protection manager who will act in an equivalent capacity.
Once we receive your request we will ask you to verify your identity and ask you to specify the data or processing activity that you require so that we can confirm your expectations and respond within one month.
We do have the right to refuse a DSAR should it be manifestly unfounded or excessive and we can apply a reasonable fee and/or extend the time to respond should the request be complex (in which case you would be informed within 1 month). We do have the right to charge a reasonable fee if you make numerous requests for the same information.
11.3 – Your right to rectification
Where personal data is inaccurate or incomplete you have the right for it to be rectified on our systems. In such cases we will act promptly to put things right.
So that we can quickly resolve your query we may ask you to provide some supporting evidence to show that the data needs to be altered.
If you require your personal data to be rectified you can speak to a member of staff on 0161 413 6146 who will put you in contact with the data protection manager or email email@example.com.
11.4 – Your right to erasure
This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to withdraw consent (see below).
Sometimes, however, we may refuse a request to erase such data in order, for example, to comply with a legal obligation.
If you require your personal data to be erased you can speak to a member of staff on 0161 413 6146 who will put you in contact with the data protection manager or email firstname.lastname@example.org.
11.5 – Your right to restricted processing
This enables you to ask us to restrict the processing of your personal data. For example, if you do not want us to erase your data you may ask us to restrict our processing activities instead. A good example would be electronic invoicing.
If you wish for restricted processing to be applied to your personal data you can speak to a member of staff on 0161 413 6146 who will put you in contact with the data manager or email email@example.com.
11.6 – Your right to data portability
To help strengthen your control over your data, you have the right, in certain circumstances, to receive personal data from us in a format which allows you to easily access it. For example, you may want your invoicing data in a csv, xls or xlsx file.
We may ask you to specify what data you wish us to provide to you, or we may direct you to an existing service that we already provide where you can freely obtain the information. Where we can we will try and provide you the data in a common format which is transferable with other data controllers.
Should you wish to exercise your right to data portability you can speak to a member of staff on 0161 413 6146 who will put you in contact with the data protection manager or email firstname.lastname@example.org.
11.7 – Your right to withdraw consent
In circumstances where you may have provided your consent to the processing of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing activity at any time. To withdraw your consent you can speak to a member of staff on 0161 413 6146 who will put you in contact with the data protection manager or email email@example.com.
Once we have received notification that you have withdrawn your consent, we will no longer process your data for the purpose or purposes you originally agreed to, unless we have another lawful basis for doing so such as a contractual or legal reason.
11.8 – Your rights relating to automated decision making
Details of what automated decision-making activities we carry out are described below in paragraph 14. If you wish to speak to a member of our team to understand the decision made, obtain an explanation of the decision and challenge it you can speak to a member of staff on 0161 413 6146 who will put you in contact with the data protection manager or email firstname.lastname@example.org.
We may reject your request not to be subject to automated decision making where such activity is a necessary step in our contracting process, or, is required in the performance of a contract between us. Your personal data will be retained by us for as long as there remains a valid lawful basis for retaining it. We will keep data retention under regular review.
Accounting information (such as invoices) will be retained for at least six years in line with current tax legislation. Contractual documentation will be held for at least six years.