Data Protection

DATA PROTECTION

What is the General Data Protection Regulation?

The General Data Protection Regulation (GDPR) came into force in the EU on 25 May 2018 and strengthened the Date Protection Act 1998 (DPA). It has a broader definition of personal data and provided new rights to individuals concerning their personal data. The Act was amended on 01 January 2021 by regulations under the European Union (Withdrawal) Act 2018, to reflect the UK’s status outside the EU

What do these regulations mean for me?

The rights of individuals to know how their personal data is handled and stored has been enhanced.  You can find out about these  rights on the Information Commissioner’s Office (ICO) website at https://ico.org.uk/.  In addition, you  have the right make various requests, which are outlined below.

Subject Access Request - To request information, we hold about you

Under these regulations everyone can make a written request to the Institute for the information we hold about them for free.   Please only ask for the information you need, to save time and to allow us to be more efficient.  We will need proof of your identity and address, before we can process any requests. As soon as we receive a valid request, we will provide you with the information you requested within one month as stipulated in the legislation. In certain circumstances this time period can be extended.  Please note that we are allowed to remove (redact) certain information, for example, legal advice or information about other people. Your request should be made on our subject access request form, which you can download here

Consent

We rely on consent to process your data. You can download a copy of our data subject consent form here

Transparency

To comply with legislation, we must provide detailed information on why and how we are processing your data.  Further details can be found on our Privacy Notice here.

Correction

You also have the right to make changes to inaccurate data.

Erasure

You have the right to withdraw your consent at any time and ask for your data to be deleted.  You can download a copy of our data subject withdrawal  form here and our data subject erasure here 

Legal basis

We need to consider appropriate lawful grounds for processing your data, if you have consented to the processing and decide later to withdraw your consent

Complaints

If for any reason you are not satisfied with the way in which we have handled your personal data you may raise a complaint with us.  You can download a copy of  our data complaints procedure  here and the complaints form here

Completed forms should be sent to:

Operations Manager,

Institute of Tourist Guiding,

Coppergate House,

10 Whites Row,

London, E1 7NF

Or email dataprotection@itg.org.uk.

Alternatively, you may contact wish to contact the Information Commissioner’s Office:

Information Commissioner's Office

Wycliffe House,

Water Lane,

Wilmslow,

Cheshire SK9 5AF.