Personal data must be processed in line with individuals’ rights, including the right to:​​

 

• access to the personal data we hold about you;

• request that any inaccurate personal data is corrected;

• request that personal data is deleted and destroyed. You may request that we delete your personal data if you believe that: – we no longer need to process your information for the purposes for which it was provided; – we have requested your permission to process your personal data and you wish to withdraw your consent; or – we are not using your information in a lawful manner. Please note that if you request us to delete your information, we may have to suspend the services we provide to you.;

• restrict the processing of your personal data. You may request us to restrict processing your personal data if you believe that: – any of the information that we hold about you is inaccurate; – we no longer need to process your information for the purposes for which it was provided, but you require the information to establish, exercise or defend legal claims; or – we are not using your information in a lawful manner. Please note that if you request us to restrict processing your information, we may have to suspend the services we provide to you;

• data portability. Where we have requested your permission to process your personal data or you have provided us with information for the purposes of entering into a contract with us, you have a right to receive the personal data you provided to us in a portable format. You may also request us to provide it directly to a third party, if technically feasible. We are not responsible for any such third party’s use of your account information, which will be governed by their agreement with you and any privacy statement they provide to you. If you would like to request the personal data you provided to us in a portable format, please contact the Data Protection Officer;

• object to the processing of your personal data. You have a right to object to us processing your personal data (and to request us to restrict processing) unless we can demonstrate compelling and legitimate grounds for the processing, which may override your own interests or where we need to process your information to investigate and protect us or others from legal claims. Depending on the circumstances, we may need to restrict or cease processing your personal data altogether, or, where requested, delete your information. Please note that if you object to us processing your information, we may have to suspend the services we provide to you.

• object at any time to processing of your personal data for direct marketing purposes, including profiling you for the purposes of direct marketing;

• withdraw your consent. Where we rely on your permission to process your personal data, you have a right to withdraw your consent at any time. We will always make it clear where we need your permission to undertake specific processing activities; and

• lodge a complaint with the regulator. If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter. We hope that we can address any concerns you may have, but you can always contact the relevant data protection authority. For more information please visit: www.gra.gi.

​​

Should you wish to make a request in line with your rights as an individual, please forward it to the Data Protection Officer data@cornwalls.gi.

​

Our staff must notify or inform the Data Protection Officer immediately if they receive a request in relation to personal data which the firm processes.

​

If we choose not to action your request we will explain to you the reasons for our refusal.