Your data protection rights under UK GDPR
Last updated: September 2024
Rapidotter Environmental Consulting is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our responsibilities as a data controller seriously and have implemented measures to ensure your personal data is processed lawfully, fairly, and transparently.
For the purposes of data protection legislation, the data controller is:
Rapidotter Environmental Consulting
47 Malone Road
Belfast BT9 6RY
United Kingdom
Email: [email protected]
The UK GDPR provides you with the following rights regarding your personal data:
You have the right to be informed about how we collect and use your personal data. Our Privacy Policy provides this information in a clear and accessible manner.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
Also known as the "right to be forgotten", you may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You have the right to request that we limit how we use your personal data in certain circumstances, for example while we verify the accuracy of data you have challenged.
Where we process your data based on consent or for contract performance, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have rights regarding automated decision making, including profiling. We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these rights, please contact us at [email protected] or write to us at our registered address. We may need to verify your identity before processing your request.
We will respond to your request within one month of receiving it. In some cases, where requests are complex or numerous, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.
We only process personal data when we have a lawful basis to do so. The lawful bases we rely on include:
In accordance with UK GDPR, we ensure that personal data is:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If we transfer your personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the Information Commissioner's Office.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance notice from time to time to reflect changes in our practices or applicable law. Any updates will be posted on this page with a revised effective date.