Your data protection rights under GDPR
quesiincap is committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We respect your privacy and are dedicated to protecting your personal data. This page outlines your rights under GDPR and how we fulfil our obligations as a data controller.
For the purposes of data protection law, the data controller is:
quesiincap
47 Pemberton Street
Birmingham, B18 6NY
United Kingdom
Email: [email protected]
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month of receipt.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will respond to your request within one month.
You have the right to request that we delete your personal data in certain circumstances, including:
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
Where we process your data based on consent or for the performance of a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis for processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not currently use automated decision-making processes.
To exercise any of your rights under GDPR, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to all legitimate requests within one month, though this may be extended by a further two months for complex requests.
There is no fee for exercising your rights, except where requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to comply.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach where required by law.
If you are not satisfied with how we handle your personal data or your rights request, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.
Last updated: August 2024