Right of Access
We ask anyone who wants a copy of their data to complete the Subject Access Request Form and send it to us at email@example.com. Completing this form is not a mandatory requirement and you can just call or email us, but the form has been designed to process your request effectively.
It is important to remember that not all personal information is covered and there are ‘exemptions’ which may allow an organisation to refuse to comply with your subject access request in certain circumstances.
In addition, BCS does not provide copies of any emails sent to or received from yourself as you already have received this information. We also will not provide any internal emails or documents that may contain your name unless the information contained in the email is:
- significantly biographical with regards to you as the data subject and / or
- you as the data subject were the focus of attention in the document.
We may be unable to make all information available to you if, for example, making the information available to you would reveal personal data about another person or if your request is manifestly unfounded or excessive.
We also will not release your examination paper or script as it may compromise the examination papers which may be re-used. For the purposes of this policy an examination paper is defined as a set of questions evaluating skill or knowledge which the candidate answers during the examination and an examination script is defined as a booklet in which a candidate records answers to examination questions.
Right to Rectification
We aim to keep your personal data up to date, accurate and complete and we encourage you to contact us if your personal data changes or you are aware that it is not accurate. You can complete the Data Preference Update Form to ensure we make the appropriate changes. Completing this form is not a mandatory requirement and you can just call or email us, but the form has been designed to process your request effectively.
Right to Erasure / Right to be Forgotten
You have the right to request the deletion of your personal data where, for example, the personal data is no longer necessary for the purpose for which they were collected, where you withdrew your consent to processing, where there is no overriding legitimate interest for us to continue to process your personal data or your data has been unlawfully processed.
If you would like to request that your personal data is erased permanently, please complete the Data Preference Update Form and return it to us at the email address below. Alternatively, if you wish to call to amend your details by calling us, you can do that too, but you will need to answer some questions to confirm your identity.
Where you have consented to marketing communications, you may change your preferences or unsubscribe from marketing communications at any time by clicking the unsubscribe link in an email from us.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, for example, where your data has been processed based on legitimate interests but there is not overriding legitimate interest for us to continue to process your data, or if your data is being processed for direct marketing purposes. If you would like to submit an objection to the processing of your data, please contact us.
Right to Restrict Processing
You have the right to request that we restrict the further processing of your personal data in certain circumstances. This right arises where, for example, you have contested the accuracy of the personal data we hold about you and we are verifying the information, you have objected to processing based on legitimate interests and we are considering whether there are any overriding legitimate interests or the processing is unlawful and you elect that processing is restricted rather than deleted. If you would like to submit a request to restrict the processing of your data, please contact us.
Right to Data Portability
You have the right to request that some of your personal data is provided to us, or to another data controller in commonly used machine-readable format in certain circumstances. This right arises where you have provided your personal data to us, the processing is based on consent of the performance of a contract, and processing is carried out by automated means. If you would like to request that your personal data is ported to you, please contact us.
Please note that the GDPR sets out exceptions to these rights. If we are unable to comply with your request due to an exception, we will explain this to you in our response.
If you provide information to us about any person other than yourself, such as your relatives, next of kin, your suppliers or advisors, you must ensure that they understand how their information will be used, and that you have sought their permission for you to disclose it to us and for you to allow us and our third party suppliers to use it.