You have the right to exercise the following rights under UK data protection law. These rights are not absolute and will depend on which legal basis we use to process your personal data.

Please contact us using the contact details set out above if you wish to exercise any of these rights:

• Transparency – we must provide you with all the information set out in this privacy notice in a concise, transparent, intelligible and easily accessible form, using clear and plain language, so that you may understand how and why we process your data and what your rights are. We must keep you informed in timely manner about our progress in responding to requests from you to access your rights under data protection law.

• Rights of access by the data subject – you have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, to access your personal data.

• Right to rectification – you have the right to have the personal data concerning yourself rectified without undue delay, if it not accurate. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by providing a supplementary statement.

• Right to erasure (‘right to be forgotten’) – in some limited circumstances, you may have the right to obtain from us the erasure of your personal data without undue delay, when and if:

o Processing your personal data is no longer necessary in relation to the purposes for which your data were collected

o Where you withdraw consent for processing, but only if consent was the legal basis relied upon for that processing

o You object to processing and there are no overriding legitimate grounds for the processing or where you withdraw your consent to marketing.

NB This does not apply to employees or former employees or applicants where we have a legal obligation to retain your data

o Your personal data has been unlawfully processed

o Your personal data has to be erased to comply with a legal obligation to which the Controller is subject

o Your personal data has been collected in relation to the offer of information society services to children

• Right to restriction of processing – In some limited circumstances you have the right to request that the processing of your personal data is restricted, in some cases for a limited time only, specifically when:

o You are contesting the accuracy of your personal data while we verify its accuracy or correct it

o The processing is unlawful and you oppose the erasure of your data;

o Where we no longer need your personal data for the purposes for which it was obtained but where you require the data for the establishment, exercise or defence of legal claims

o Where you have objected to the processing of your data pending the verification whether legitimate grounds of the Controller override your interests

o You have the right to be informed by the Controller before the restriction of processing is lifted

• Right to data portability – This data subject right only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is by automated means.

• Right to object – In some limited circumstances, you have the right to object to our processing of your personal data. When certain conditions are met we, as Controller, will no longer process your personal data. This right can be exercised only when:

o Either the processing is necessary for the performance of a task carried out in the public interest or processing is necessary for the purposes of our legitimate interests (including profiling), but where we cannot demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or where processing is necessary for the establishments, exercise or defence of legal claims

o Processing for direct marketing purposes, including profiling

o When personal data are processed for scientific or historical research purposes or statistic purposes unless the processing is necessary for the performance of a task carried out for reasons of public interest

• Automated decision-making, including profiling – you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significant effects. At the current time SBF does not perform automated decision making or profiling.

• Details of whether you are under a statutory or contractual obligation to provide the personal data – SBF has a legal obligation to perform checks for employment purposes for some roles. Failing to do so would be a breach of the law.

• The existence of automated decision making, including profiling and information about how decisions are made, the significance and the consequences – SBF does not currently perform automated decision making or profiling.

Contact Us

Phone

Email

Address

Drop us a message

Enter your reg to get a free valuation!

Information

Social links

Latest tweet