DATA PROTECTION
What is the General Data Protection Regulation?
The General Data Protection Regulation (GDPR) came into force in the EU on 25 May 2018 and strengthened the Date Protection Act 1998 (DPA). It has a broader definition of personal data and provided new rights to individuals concerning their personal data. The Act was amended on 01 January 2021 by regulations under the European Union (Withdrawal) Act 2018, to reflect the UK’s status outside the EU
What do these regulations mean for me?
The rights of individuals to know how their personal data is handled and stored has been enhanced. You can find out about these rights on the Information Commissioner’s Office (ICO) website at https://ico.org.uk/. In addition, you have the right make various requests, which are outlined below.
Subject Access Request - To request information, we hold about you
Under these regulations everyone can make a written request to the Institute for the information we hold about them for free. Please only ask for the information you need, to save time and to allow us to be more efficient. We will need proof of your identity and address, before we can process any requests. As soon as we receive a valid request, we will provide you with the information you requested within one month as stipulated in the legislation. In certain circumstances this time period can be extended. Please note that we are allowed to remove (redact) certain information, for example, legal advice or information about other people. Your request should be made on our subject access request form, which you can download here
Consent
We rely on consent to process your data. You can download a copy of our data subject consent form here
Transparency
To comply with legislation, we must provide detailed information on why and how we are processing your data. Further details can be found on our Privacy Notice here.
Correction
You also have the right to make changes to inaccurate data.
Erasure
You have the right to withdraw your consent at any time and ask for your data to be deleted. You can download a copy of our data subject withdrawal form here and our data subject erasure here
Legal basis
We need to consider appropriate lawful grounds for processing your data, if you have consented to the processing and decide later to withdraw your consent
Complaints
If for any reason you are not satisfied with the way in which we have handled your personal data you may raise a complaint with us. You can download a copy of our data complaints procedure here and the complaints form here
Completed forms should be sent to:
Operations Manager,
Institute of Tourist Guiding,
Coppergate House,
10 Whites Row,
London, E1 7NF
Or email dataprotection@itg.org.uk.
Alternatively, you may contact wish to contact the Information Commissioner’s Office:
Information Commissioner's Office
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire SK9 5AF.