The General Data Protection Regulation (GDPR) came into effect on 25th May 2018. The GDPR, which has many similarities to the Data Protection Act 1998 which it replaced, is designed to improve transparency in data processing and to protect the rights and freedoms of individuals, in particular their right to privacy with respect to the processing of their personal data.
The GDPR is technologically neutral and therefore applies to personal and special category data in whichever form it is held, for example, in electronic or paper documents. In addition to the data principles, a data subject - that is the individual to whom the information relates - has several rights in relation to the processing of their personal data, as outlined below; these are subject to a number of exceptions and may not always apply in all circumstances.
1. To be told if a data controller is processing any information about that individual,
2. If that is the case, to be given a description of that information, why it is being kept and to whom it may be disclosed,
3. To have that information given to them as well as details about how that information was received, and
4. Where the processing is carried out automatically for the purpose of evaluating matters relevant to that person, to have the logic involved in the decision taking explained.
Download and complete the form and then send it, with the appropriate identification documents, either to the postal address given in the guidance notes or by email to enquiries@gassaferegister.co.uk marked for the attention of the Risk and Compliance Manager.
Proof of identification is required when making a request to confirm that you are the data subject, this is the individual to whom the data refers. This is so that we do not disclose any data to someone who is not entitled to receive it.
If you are making a request on behalf of the data subject e.g. you are a solicitor acting on your client’s behalf, you will need to provide proof that you have your client’s consent to request and receive their personal data. This may be a signed form of authority from the individual.
When providing us with details of the information you are requesting, please ensure that you are as specific as possible and provide as much detail as possible.
There are also other exemptions in the GDPR which mean that personal data can be withheld. You may also receive documents that may have data redacted (blacked out).
Contact us to clarify any queries about the information you have received or to point out any omissions in the data that you expected to receive. Our contact details are:
Risk and Compliance Manager
Gas Safe Register
PO Box 6804
Basingstoke
Hampshire
RG24 4NB
Telephone
Consumers: 0800 408 5500
Engineers: 0800 408 5577
Email: Enquiries@gassaferegister.co.uk
If you remain dissatisfied with our response to your request, you may submit a complaint to the Information Commissioners Office (ICO). More advise on how to do this is available on ICO website www.ico.org.uk or by calling its helpline number 0303 123 1113.
An individual has the right to rectification of any inaccurate personal data concerning him or her, including the completion of incomplete personal data.
If you have any concerns about the accuracy of the personal information held by us you should put your concerns to us in writing at:
Risk and Compliance Manager
Gas Safe Register
PO Box 6804
Basingstoke
Hampshire
RG24 4NB
You should be clear about exactly what information we hold that you believe is inaccurate and how Gas Safe Register should correct it, providing evidence of the inaccuracies where available.
Data Protection legislation only obliges organisations to keep information factually correct and cannot be used to alter or remove opinions unless those opinions themselves are based on inaccurate factual information.
An individual has the right to erasure of personal data supplied to a data controller in certain circumstances. The right to erasure does not apply to registration data collected for the regulatory purposes or data relating to complaints against businesses or engineers. There are limited circumstances where this would apply. Any requests for the erasure of data can be made verbally or in writing. Requests made in writing should be sent to the address below stating what you require deleting and the reason why.
Where a request is made verbally verification of the caller will be required. In all cases we will request that proof of identity is provided before we make any changes, especially where the request is made by persons other than the responsible person for a registered business or members of the public. The right to erasure does apply to any marketing communications. Where we agree to delete your data, this may result in the termination of our services.
Risk and Compliance Manager
Gas Safe Register
PO Box 6804
Basingstoke
Hampshire
RG24 4NB
An individual has the right to restrict processing where the accuracy of the data is contested, where the processing is unlawful, where the personal data is no longer needed by the data controller or where the individual is contesting the grounds on which the processing is taking place. This is not an absolute right and only applies in certain circumstances. This is an alternative to requesting the erasure of their data.
The right to restriction of processing does not apply to registration data collected for the regulatory purposes or data relating to complaints against businesses or engineers. There are limited circumstances where this right would apply. Requests for the restriction of processing can be made verbally or in writing. All requests made in writing should be sent to the address below stating what data we should stop processing and why.
Where a request is made verbally verification of the caller will be required. In all cases we will request that proof of identity is provided before we make any changes, especially where the request is made by persons other than the responsible person for a registered business or members of the public.
Risk and Compliance Manager
Gas Safe Register
PO Box 6804
Basingstoke
Hampshire
RG24 4NB
The right only applies to information an individual has provided to a controller. Requests should be made in writing and sent to the address below, stating what data is to be transferred and to whom. In all cases we will request that proof of identity is provided before we transfer any data to a third party, especially where the request is made by persons other than the responsible person for a registered business or members of the public.
Risk and Compliance Manager
Gas Safe Register
PO Box 6804
Basingstoke
Hampshire
RG24 4NB
The individual can ask the data controller to ensure that no decision that could significantly affect the individual is based solely on processing by automatic means. An individual can make an objection verbally or in writing. Requests made in writing should be sent to the address below, stating what data you object to Gas Safe Register processing and the reason why. Where a request is made verbally verification of the caller will be required.
In all cases we will request that proof of identity is provided before we make any changes, especially where the request is made by persons other than the responsible person for a registered business or members of the public.
Risk and Compliance Manager
Gas Safe Register
PO Box 6804
Basingstoke
Hampshire
RG24 4NB
