Subject Access Rights

Data subject rights
You have the right to get a copy of the information that is held about you. This is known as a subject access request. This right of subject access means that you can make a request to any organisation processing your personal data.
Summary of your data subject rights

1. Right to rectification of inaccurate data
2. Right to erasure (‘right to be forgotten’) – where data is no longer necessary in relation to the purpose for which they were collected, the data subject withdraws consent, objects to the processing, data is processed unlawfully, for compliance with a law or the data concerns a child and was processed by a website. The company needs to be able to identify other data controllers to whom it has disclosed data to tell them that the individual wants to be forgotten (subject to cost and available technology).
3. Right to restriction of processing to verify accuracy of data, where processing is unlawful but the individual does not want erasure, the controller no longer needs the data but the individual requires the controller to keep the data for defence of legal claims or pending verification of whether the legitimate interests of the controller in processing override those of the individual.
4. Right to data portability – controllers have to give data subjects their data in a format which the individual can take to another controller.
5. Right to object where processing is based on public interests or legitimate interests or for direct marketing.

Requesting personal details from the ISTC
If you would like to exercise any of the above data subject rights, please send an email to data@istc.org.uk which our Administrators will process. Please include the following information if possible:-

1. your full name, address and contact telephone number;
2. any other information which can distinguish you from others such as account numbers, unique ID’s etc;
3. details of the specific information you require and any relevant date

Subject Access requests are dealt with without undue delay and the Administrators will co-ordinate, gather and dispatch the requested data within one month.

The ISTC may contact you to be sure we have enough information, to be sure of the requester’s identity and ask further questions to ensure we have all the information from the requester to find what they want.

Proof of Identity
To ensure we are releasing data to the right person we require you to provide us with proof of your identity and of your address. Please supply us with a photocopy or scanned image (do not send the originals) of one of both of the following:

1. Proof of Identity – Passport, photo driving licence, national identity card, birth certificate.
2. Proof of Address – Utility bill, bank statement, credit card statement (no more than 3 months old); current driving licence; current TV licence; local authority tax bill, HMRC tax document (no more than 1 year old).

Revoking Consent
You have the right to withdraw your consent at any time just email: data@istc.org.uk clearly stating you want to revoke your consent to be contacted by the ISTC.
Requests to revoke consent should include the following information if possible:-

• your full name, address and contact telephone number;
• any other information which can distinguish you from others such as account numbers, unique ID’s etc;
• Proof of identity

Inform us of any inaccurate data
You have the right to inform us of any inaccurate data at any time, just email data@istc.org.uk.
Please provide the following information:-

• your full name, address and contact telephone number;
• inaccurate data is erased securely or corrected without delay
• Proof of identity

Ensure inaccurate data is erased securely or corrected without delay
You have the right to request that inaccurate data is erased securely or corrected without delay, just email: data@istc.org.uk.
Please provide the following information:-

• your full name, address and contact telephone number;
• list or describe the inaccurate data you want erased
• Proof of identity

Complete any incomplete personal data
You have the right to request that incomplete personal data is completed without delay, just email: data@istc.org.uk
Please provide the following information:-

• your full name, address and contact telephone number;
• list or describe the incomplete data that requires updating
• Proof of identity

Requests for rectification is dealt with without undue delay
You have the right to request rectification of your personal data is carried out without delay, just email: data@istc.org.uk
Please provide the following information:-

• your full name, address and contact telephone number;
• personal data you want rectified
• Proof of identity