Under the EU’s General Data Protections Regulation (GDPR) personal data is defined as: “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, local data, an online identified or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”
How we use your information
Why does Karen Lee’s office need to collect and store personal data?
In order for us to provide you with assistance in your query, we need to collect some personal data. In any event, we are committed to ensuring that the information we collect and use is appropriate for this purpose, and does not constitute an invasion of your privacy. The lawful basis for collecting and using the personal data will depend on the specific context in which we collect it. However, we will normally collect personal data from you only (a) where we have your consent to do so or (b) where the processing is in our legitimate interests and not overridden by your rights.
Will Karen Lee’s office share my personal data with anyone else?
When Karen takes up casework on your behalf, it may be necessary to share the details you provide with government departments, local authorities and other public bodies. Karen will only share as much information as is necessary to take your case forward. If you have any questions or concerns about how the information you provide as part of a casework request is used, please contact the Data Protection Officer for more information.
Other than in the circumstances above, Karen will not share personal information with other organisations without your explicit consent.
How will Karen Lee’s office use the personal data it collects from me?
Karen Lee’s office will process (collect, store and use) the information you provide in a manner compatible with the EU’s General Data Protection Regulation (GDPR). We will endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary. Karen Lee’s office will store your personal data for 2 years, after which the personal data will be disposed of securely.
All personal data you provided Karen Lee will be stored securely, both physically and electronically, in accordance with our policies.
Under what circumstances will Karen Lee’s office contact me?
Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure.
Your rights as a data subject
You have a number of rights in relation to your personal information and the opportunity to choose how it is used. You can:
Obtain copies of the personal information Karen Lee’s office hold about you (known as a “subject access request”)
Request that we correct or update any personal information held about you
Ask that we erase or restrict the way in which we use your information
Request that personal information you have given your consent to use is provided in an electronic format so it can be transferred to another data controller (also known as “data portability”)
You may opt out of receiving further communications from Karen Lee’s office in any medium at any time. All requests to unsubscribe are dealt with promptly, and in all cases within a week.
Contact details of the Data Protection Officer.
If you wish to exercise your rights in respect of your personal data or have any concerns about how your data is used, please contact my data protection officer;
Data Protection Officer Helena Mair
32 Newland Lincoln
Tel 01522 420067
Alternately you have the right to raise any issues or concerns directly with the Information Commissioners Office.