Your rights

In addition to the right to be informed about how we use your personal data (as set out in this notice), you have various other rights in respect of the personal data we hold about you – these are set out in more detail below. If you wish to exercise any of these rights, please complete our Subject Access Request Form and send to data.privacy@frpadvisory.com.

Your rights in relation to the personal data that we process will depend upon the lawful basis or bases upon which we are holding it. This will vary depending upon where the information has come from (yourself or a third party), and the nature of our relationship with you. Personal data may be held for more than one lawful basis. Details of the basis or bases we believe we have for processing your data can be found in the relevant sections of our Privacy Notice.

You will not normally have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if the request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

Please note, some of these rights only apply in certain circumstances and we may not be able to fulfil every request.

Responding to your request

If we receive a request from you to exercise any of the below rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.

We will respond to your request within one month of verifying your identity; earlier if at all possible. Where your request is declined, a written explanation will be provided to you.

Access to your personal data: You have the right to ask us to confirm whether we process your personal data and to access the personal data along with the following information: -

The purposes of the processing
The categories of personal data concerned
The recipients to whom the personal data has/will be disclosed
How long we intend to store your personal data
Your right to request to have your personal data rectified, erased, to restrict the processing of the data or to object to the processing
If we did not collect the data directly from you, available information about the source
Whether it has been used for any automated decision-making

Consent: Generally, we do not rely on consent as a legal basis for processing your personal data (as we can usually rely on another legal basis). However, where you have given us your consent to use personal data, you can withdraw your consent at any time.

Right to object: You can object to our processing of your personal data where we are relying on a legitimate interest (or those of a third party), including for profiling, and there is something about your particular situation which makes you want to object to processing on this ground. Please contact us as noted above, providing details of your objection. You also have the right to object where we are processing your personal data for direct marketing purposes.

Rectification: If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

Erasure: You can ask us to delete your personal data in the following instances;

the personal data is no longer necessary in relation to the purposes for which they were collected and processed;
our legal grounds for processing is consent, you withdraw consent and we have no other lawful basis for the processing;
our legal grounds for processing is that the processing is necessary for legitimate interests pursued by us or a third party, you object to our processing and we do not have overriding legitimate grounds;
you object to our processing for direct marketing purposes;
your personal data have been unlawfully processed; or
your personal data must be erased to comply with a legal obligation to which we are subject.

Portability: You can ask us to provide you or a third party with some of the personal data that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred. This right only applies to information which you provided to us, where our lawful basis for processing the personal data is consent or necessity for the performance of our contract with you and the processing is carried out by automated means.

Restriction of Processing: You can ask us to restrict the personal data we use about you in the following instances:

you contest the accuracy of your personal data and we are verifying the accuracy of the data
your data has been unlawfully processed but you oppose erasure and request restriction instead
we no longer need the personal data but you need us to keep it in order to establish, exercise or defend a legal claim
you have objected to us processing your data and we are considering whether our legitimate grounds override yours

Automated decision-making: Automated decision-making takes place when an electronic system uses personal data to decide without human intervention. You have the right not to be subject to automated decisions that will create legal effects or have a similar significant impact on you, unless you have given us your consent, it is necessary for a contract between you and us or is otherwise permitted by law. You also have certain rights to challenge decisions made about you.