In addition to the right to be informed about how we use your personal data (as set out in this notice), you have various other rights in respect of the personal data we hold about you – these are set out in more detail below. If you wish to exercise any of these rights, please complete our Subject Access Request Form and send to dataprivacy@frpadvisory.com.
Your rights in relation to the personal data that we process will depend upon the lawful basis or bases upon which we are holding it. This will vary depending upon where the information has come from (yourself or a third party), and the nature of our relationship with you. Personal data may be held for more than one lawful basis. Details of the basis or bases we believe we have for processing your data can be found in the relevant sections of our Privacy Notice.
You will not normally have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if the request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
Please note, some of these rights only apply in certain circumstances and we may not be able to fulfil every request.
Responding to your request
If we receive a request from you to exercise any of the below rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.
We will respond to your request within one month of verifying your identity; earlier if at all possible. Where your request is declined, a written explanation will be provided to you.
Access to your personal data: You have the right to ask us to confirm whether we process your personal data and to access the personal data along with the following information: -
Consent: Generally, we do not rely on consent as a legal basis for processing your personal data (as we can usually rely on another legal basis). However, where you have given us your consent to use personal data, you can withdraw your consent at any time.
Right to object: You can object to our processing of your personal data where we are relying on a legitimate interest (or those of a third party), including for profiling, and there is something about your particular situation which makes you want to object to processing on this ground. Please contact us as noted above, providing details of your objection. You also have the right to object where we are processing your personal data for direct marketing purposes.
Rectification: If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
Erasure: You can ask us to delete your personal data in the following instances;
Portability: You can ask us to provide you or a third party with some of the personal data that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred. This right only applies to information which you provided to us, where our lawful basis for processing the personal data is consent or necessity for the performance of our contract with you and the processing is carried out by automated means.
Restriction of Processing: You can ask us to restrict the personal data we use about you in the following instances:
Automated decision-making: Automated decision-making takes place when an electronic system uses personal data to decide without human intervention. You have the right not to be subject to automated decisions that will create legal effects or have a similar significant impact on you, unless you have given us your consent, it is necessary for a contract between you and us or is otherwise permitted by law. You also have certain rights to challenge decisions made about you.