Subject Access Request
Introduction
At Euro Parking Services Ltd, we are committed to maintaining the highest standards of data privacy and protection. We understand the importance of your personal data and are dedicated to processing it with care and respect. If you wish to have your personal data removed from our records, please follow the process outlined below.
Data Removal Process
To initiate the data removal process under GDPR Guidelines, please follow these steps:
1
Fill Out the Subject Access Request Form
Complete the form with the required details to help us identify and locate your personal data in our systems.
2
Ticket Generation
Once the form is submitted and the payment is processed, a ticket for your data removal request will be raised. You will receive a confirmation along with a ticket number for your records.
3
GDPR Guidelines
We will proceed with your data removal request in accordance with GDPR guidelines. We aim to complete the process within one month and will inform you once your data has been removed.
Form
Subject Access Request Form
Our Commitment to GDPR Compliance
Euro Parking Services Ltd is fully committed to upholding the General Data Protection Regulation (GDPR) standards, ensuring the privacy and protection of all personal data we handle. Our approach is grounded in the GDPR’s core principles, embodying our dedication to the GDPR Principles of data protection by design and default. Here’s how we align with these principles:
Euro Parking Services
Frequently Asked Questions (FAQs)
The General Data Protection Regulation (GDPR) is a significant piece of legislation enacted by the European Union to protect personal data and privacy. Below are detailed answers to some of the commonly asked questions regarding GDPR:
What does GDPR stand for?
GDPR stands for the General Data Protection Regulation.
What is GDPR?
The GDPR stands for General Data Protection Regulation. It’s a law created by the European Union to protect the privacy and personal data of individuals. It applies to companies and organisations that handle or collect data from people within the EU, no matter where those companies are located. The GDPR sets out rules on how data should be handled securely and gives individuals more control over their personal information. If companies don’t follow these rules, they can face hefty fines.
What is the purpose of GDPR?
The primary purpose of the GDPR is to ensure a high level of protection for personal data. It seeks to harmonise data protection laws across member states, making it easier for companies to comply with these laws. GDPR also aims to protect and empower all EU citizens’ data privacy and to reshape the way organisations across the region approach data privacy.
Is GDPR applicable in the UK?
Yes, GDPR is applicable in the UK. Although the UK has left the EU, it has incorporated GDPR into its national law as the UK GDPR, alongside the Data Protection Act 2018. This means the standards set by the GDPR continue to apply in the UK, ensuring the protection of personal data remains robust and consistent with EU standards.
What are individual rights under GDPR?
Under the GDPR, individuals have several rights concerning their personal data, including:
The right to be informed: Individuals have the right to know how their data is being used.
The right of access: Individuals can request access to their personal data and how it’s processed.
The right to rectification: Individuals can have inaccurate personal data corrected.
The right to erasure: Also known as the ‘right to be forgotten’, this allows individuals to have their data removed.
The right to limit processing: People can ask for their information not to be used.
The right to move data: This lets people get and use their personal information on different services.
The right to object: Individuals can object to the processing of their data in certain cases.
Rights in relation to automated decision making and profiling: This provides protections against the risk that a potentially damaging decision is made without human intervention.
What is the Data Protection Act 2018?
The Data Protection Act 2018 is a piece of legislation in the United Kingdom that governs how personal data is processed and protected. It outlines the rights of individuals regarding their personal data, the responsibilities of organisations that collect and process personal data, and the enforcement and penalties for non-compliance. It covers various aspects of data protection, including data processing, security measures, international data transfers, and the rights of data subjects.
Who is responsible for enforcing the GDPR?
In the EU, GDPR enforcement is the responsibility of Data Protection Authorities (DPAs) in each member state. In the UK, the Information Commissioner’s Office (ICO) is the independent authority responsible for upholding information rights in the public interest, promoting openness by public bodies, and data privacy for individuals, thereby enforcing the GDPR within the UK context.
Can an organisation charge a fee for fulfilling a data removal request?
Yes, an organisation can charge a reasonable fee if they determine that a request for data removal is manifestly unfounded or excessive, but they choose to respond to it. However, they are not obligated to charge a fee and can still refuse to deal with the request if they find it unreasonable or excessive. The decision to charge a fee must be justified, and the requester must be notified and provided with an explanation for the fee. If a fee is requested, the organisation should not unnecessarily delay in doing so, and they should justify the cost if challenged. It’s essential to note that there are currently no specified limits on fees for dealing with such requests, so organisations must ensure the fee is reasonable. For further guidance on charging fees and handling requests, refer to the UK GDPR right of access guidance.