Your data protection rights under UK GDPR and the Data Protection Act 2018
moss-marten is committed to ensuring the protection of personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our obligations as a data controller and your rights as a data subject.
moss-marten acts as the data controller for personal information collected through this website and during the provision of our consulting services.
Contact details:
moss-marten
54 Exchange Street East
Liverpool, L2 3PH
United Kingdom
Email: [email protected]
We process personal data under one or more of the following lawful bases:
As a data subject, you have the following rights:
You have the right to be informed about the collection and use of your personal data. This is provided through our Privacy Policy and this GDPR information page.
You have the right to obtain confirmation that your data is being processed and to access your personal data. You may request a copy of the personal data we hold about you.
You have the right to have inaccurate personal data corrected or completed if it is incomplete.
Also known as the right to be forgotten, you may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose it was collected, or where you withdraw consent.
You have the right to request restriction of processing in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have rights related to automated decision making and profiling. We do not currently use automated decision-making processes that produce legal or similarly significant effects.
To exercise any of your data protection rights, please contact us at:
Email: [email protected]
We will respond to your request within one month of receipt. This period may be extended by a further two months where requests are complex or numerous, in which case we will inform you of the extension and the reasons for it.
There is generally no fee for exercising your rights, though we may charge a reasonable fee or refuse to comply with requests that are manifestly unfounded or excessive.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Where we transfer personal data outside the UK, we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the Information Commissioner's Office or transfers to countries deemed to provide adequate protection.
Given the nature and scale of our data processing activities, we are not required to appoint a Data Protection Officer. However, data protection queries can be directed to our general contact address.
If you are not satisfied with our response to a data protection matter, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
This GDPR information page may be updated periodically to reflect changes in our practices or legal requirements. The date of last update is indicated at the top of this page.