Privacy

Introduction

relation to that data. Magnavale is registered as a Data Controller under the Data Protection Act 2018 (Registration No. #Z1725962).

One of our responsibilities as a data controller is to be transparent in our processing of your personal data and to tell you about the different ways in which we collect and use your personal data. This information needs to be concise, transparent, understandable, and accessible.

Magnavale will process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR, GDPR) and the Data Protection Act 2018 (DPA) and this privacy notice is issued in accordance with the GDPR Articles 13 and 14.

Senior Information Risk Officer & Data Protection Officer

Senior Information Risk Officer / Data Protection Officer
Park Rd
Holmewood
Chesterfield
S42 5UY

They can be emailed at gdpr.enquiries@magnavale.co.uk

Your Personal Data & its Processing

We define personal data as information relating to a live, identifiable individual. It can also include “special categories of data”, which is information about your racial or ethnic origin, religious or other beliefs, physical or mental health, the processing of which is subject to strict requirements. Similarly, information about criminal convictions and offences is also subject to strict requirements.

“Processing” means any operation which we carry out using your personal data, for example, obtaining, storing, transferring, or deleting.

We only process data for specified purposes and if it is justified in accordance with data protection law. Details of each processing purpose and its legal basis are given in individual privacy notices.

How Long We Keep Your Data For?

Unless specific time periods are given in the relevant Privacy Notice, your data will be kept in line with Magnavale’s Record Listing.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

If you need more detailed advice on how long your data will be kept for, please contact gdpr.enquiries@magnavale.co.uk

Your Rights as a Data Subject

You have the following rights in relation to your personal data processed by us:

Right to be informed

Magnavale will ensure you have sufficient information to ensure that you’re happy about how and why we’re handling your personal data, and that you know how to enforce your rights. Magnavale provides information in the form of privacy notices. You can read all of our privacy notices online.

Right of access/right to data portability

The right of subject access: If you want a copy of the personal data Magnavale hold about you, you have the right to make a subject access request (SAR) and get a copy of that information within 30 days. (See our Subject Access Request procedure)

To make a request for your own information please contact gdpr.enquiries@magnavale.co.uk

Right of rectification

If we’re holding data about you that is incorrect, you have the right to have it corrected.

To make a request to correct any data please contact gdpr.enquiries@magnavale.co.uk

Right to erasure

You can ask that we delete your data and where this is appropriate, we will take reasonable steps to do so. The right to erasure is a limited right, and we may not be able to agree to requests for erasure. If this occurs, we will explain why your request is not being actioned.

To make a request for erasure please contact gdpr.enquiries@magnavale.co.uk

Right to restrict processing

If you think there’s a problem with the accuracy of the data we hold about you, or we’re using data about you unlawfully, you can request that any current processing is suspended until a resolution is agreed.

To make a request for suspension of your data please contact gdpr.enquiries@magnavale.co.uk

Right to object

You have a right to opt out of direct marketing. You have a right to object to how we use your data if we do so on the basis of “legitimate interests” or “in the performance of a task in the public interest” or “exercise of official authority” (a privacy notice will clearly state to you if this is the case). Unless we can show a compelling case why our use of data is justified, we have to stop using your data in the way that you’ve objected to.

We endeavour to ensure that an opt-out option is included in all electronic direct marketing.

To make a request to opt out of direct marketing please contact gdpr.enquiries@magnavale.co.uk

Withdrawing Consent

If we are relying on your consent to process your data, you may withdraw your consent at any time.

Exercising Your Rights, Queries & Complaints

For more information on your rights, if you wish to exercise any right, for any queries you may have or if you wish to make a complaint, please contact our Data Protection Officer by post at address above, or email gdpr.enquiries@magnavale.co.uk

Complaint to the Information Commissioner

You have a right to complain to the Information Commissioner’s Office (ICO) about the way in which we process your personal data. You can make a complaint on the ICO’s website.