GDPR Compliance
Your rights under the General Data Protection Regulation
Last updated: January 2024
Our Commitment to GDPR
We are committed to protecting your personal data and respecting your privacy rights as outlined in the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with these regulations and your rights as a data subject.
Data Controller Information
For the purposes of data protection legislation, the data controller is:
auratignos
42 George Street
Edinburgh, EH2 2LR
Email: [email protected]
Lawful Basis for Processing
We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you
- Legal obligation: Where processing is necessary to comply with the law
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
Your Rights Under GDPR
Under data protection law, you have the following rights:
Right to Access
You have the right to request a copy of the personal information we hold about you. This is known as a Subject Access Request (SAR). We will respond to valid requests within one month.
Right to Rectification
You have the right to request that we correct any personal information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to request that we transfer your personal data to another organisation, or directly to you, in a commonly used, machine-readable format.
Right to Object
You have the right to object to the processing of your personal data where we are relying on legitimate interests as our lawful basis.
Rights Related to Automated Decision Making
You have rights related to automated decision making and profiling. We do not currently use automated decision-making processes that significantly affect you.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. There is no fee for most requests, but we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
Special Category Data
In providing our consultation services, we may process special category data, including health information relevant to disability benefit applications. We process such data only with your explicit consent and take additional measures to protect this sensitive information.
Data Transfers
Your personal data is stored and processed within the United Kingdom. We do not transfer personal data outside the UK unless appropriate safeguards are in place.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Secure access controls and authentication
- Regular security assessments and updates
- Staff training on data protection
- Incident response procedures
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk, we will also notify you directly.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Changes to This Information
We may update this GDPR compliance information from time to time. Any significant changes will be communicated through our website.