The General Data Protection Regulation (GDPR) gives individuals a range of rights in relation to personal data. This guide explains these rights to you and lets you know how you can make use of them if Ayrshire College processes your personal data.
YOUR PERSONAL DATA
This is any information about you that means you can be identified. As a college we gather lots of personal data (about students, staff and members of the public) so we can deliver our services.
When we use (process) personal data we will abide by the GDPR Principles (Article 5), which means we must:
- Have good reason to process your personal data and tell you what we are doing with it
- Only use your personal data for the purposes for which you have given it to us
- Only hold personal data that is adequate, relevant and limited to what we need
- Ensure your personal data is accurate and kept up–to–date
- Only keep personal data that identifies you for as long as it is needed
- Ensure that your personal data is kept securely and take reasonable steps to ensure that it can’t be accidentally lost, destroyed or damaged.
One of the main aims of GDPR is to empower individuals by giving more control over personal data and to help you understand if we are meeting the GDPR Principles (listed above). To do this, GDPR gives you the following rights:
Right to be Informed
Right of Access
Right to Rectification
Right to Erasure (the right to be forgotten)
Right to Restrict Processing
Right to Data Portability
Right to Object
Rights Relating to Automated Decision Making and Profiling
For more information on each of these please click the links above or you can download the Overview of Data Subject Rights here.
If you would like to exercise any of the rights above, or ask for more information about your rights please contact:
Data Protection Officer
18-20 Hill Street, Kilmarnock
You also have the right to complain to the Information Commissioner who is the regulator for data protection in the UK:
Helpline: 0303 123 1113