Your rights under the UK General Data Protection Regulation
jolly-elm is committed to protecting the privacy and security of personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we process personal data and your rights as a data subject.
jolly-elm acts as the data controller for personal information collected through this website and in connection with our training services. We determine the purposes and means of processing personal data.
We only process personal data when we have a lawful basis to do so. Depending on the circumstances, we rely on one or more of the following:
Under the UK GDPR, you have the following rights:
Right to be informed: You have the right to be informed about how we collect and use your personal data. This GDPR notice and our Privacy Policy provide this information.
Right of access: You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request.
Right to rectification: You have the right to request that we correct any inaccurate personal data or complete any incomplete data.
Right to erasure: You have the right to request that we delete your personal data in certain circumstances, sometimes known as the right to be forgotten.
Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to object: You have the right to object to processing based on legitimate interests, direct marketing, or processing for research purposes.
Rights related to automated decision making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
To exercise any of your data protection rights, please contact us using the details below. We will respond to your request within one month of receipt. If your request is complex or we receive a large number of requests, we may extend this period by a further two months, but we will inform you of any extension within one month.
There is no fee for exercising your rights in most circumstances. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include encryption, access controls, and regular security assessments.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to individuals, we will also notify the affected data subjects without undue delay.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
For any questions regarding this GDPR notice or to exercise your data protection rights:
jolly-elm
47 Broadcast Lane
London, W1F 8QR
United Kingdom
Email: [email protected]
Last updated: September 2024