Retention
We will retain your personal data only for as long as is we need it in accordance with our Records Management Plan. This will usually be for 5 years from our last use of the data, but it may be for a shorter or longer period depending on the circumstances.
Consent
If we are using your personal data because you have consented to it, you have the right to change your mind and withdraw your consent at any time.
Your Rights
You have the following rights in relation to our use of your personal data:
- To be informed about how we use your personal data and about your rights; the Comhairle’s webpages under Privacy and Data Protection provide this information
- To have access to your personal data upon request (this is called making a subject access request - see below for further information)
- To ask us to rectify any inaccurate or incomplete personal data which we hold about you
- To ask us to erase (delete) any personal data which we hold about you
- To ask us to restrict our use of your personal data if the data which we hold is inaccurate or there is an issue with our use of your personal data
- To object to our use of your personal data in some circumstances
- To receive your personal data in a portable, standard and machine-readable format in some circumstances
- To lodge a complaint with the supervisory authority, the Information Commissioner’s Office, about how we use your personal data or how we deal with any of the matters set out in this notice; please visit the ICO’s website for contact details
You also have the right to complain to us using our internal Complaints Procedure. This is in addition to your right to complain to the ICO; you do not have to use the Complaints Procedure before, or instead of, complaining to the ICO.
Subject Access Requests
If you wish to make a subject access request then please contact dataprotection@cne-siar.gov.uk. We are required to respond to your request within one calendar month, although we may extend that period if the request is complex. We may refuse requests that are manifestly unfounded or excessive. Before submitting a subject access request, you may wish to consult the ICO’s guidance at Getting copies of your information (SAR).
Finally, on the Using your personal data – our obligations page, I don’t think we need the box with the Data Protection officer’s details, because that information is also on the Data Protection Officer page.