Data Protection and GDPR
Since May 2018, Almond Housing Association has been subject to the rules set out in the General Data Protection Regulation (GDPR).
We are required to hold information (data) about our customers, prospective customers, employees, prospective employees, Board members and other stakeholders to allow us to deliver our services. However, we must be clear about the information we collect from you, how we hold it, who we share it with, and how we dispose of it. We have developed Privacy Notices that provide more information about this:
Data Subject Rights
All customers (data subjects) have the rights under GDPR. Almond will comply with individuals’:
- Right to be Informed – by ensuring individuals are informed of the reasons for processing their data in a clear, transparent and easily accessible form
- Right to Access – by ensuring that individuals are aware of their right to obtain confirmation that their data is being processed; access to copies of their personal data and other information such as a privacy notice
- Right to Rectification – by correcting personal data that is found to be inaccurate. AHA will advise data subjects on how to inform us that their data is inaccurate. Inaccuracies with be rectified without undue delay.
- Right to Erasure (sometimes referred to as ‘the right to be forgotten’) – we will advise data subjects of their right to request the deletion or removal of personal data where processing is no longer required or justified.
- Rights to Restrict Processing – we will restrict processing when a valid request is received by a data subject and inform individuals of how to exercise this right.
- Right to Data Portability – by allowing, where possible, data to be transferred to similar organisation in a machine-readable format.
- Right to Object – by stopping processing personal data, unless legitimate grounds can be demonstrated for the processing which override the interest, rights and freedoms of an individual
Accessing your personal data
Customers have the right to ask for a copy of the information held by us about them - this is called a right of access and is commonly known as making a Subject Access Request or SAR.
It’s important to note that:
It is preferred that an SAR is made in writing, however this is not essential and you can make a request verbally
Proof of identification may be needed before we can respond to a SAR
We will reply to you within one calendar month of receiving your request
You can make a SAR by sending us an email at enquiries@almondha.org.uk or you can contact the office to speak to a member of staff. All SARs will be processed in accordance with our Data Protection and Access to Personal Information Procedure. The Information Commissioner's Office website contains information about your personal data rights including Subject Access Requests.
Related Documents: