Your Data Protection Rights Under Uk Gdpr

Learn about your comprehensive data protection rights and how to exercise them. We are committed to transparency and your control over personal data.

Your Data Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have comprehensive rights regarding your personal data. These rights are fundamental to ensuring your privacy and control over how your information is processed.

Right of Access (Article 15): You have the right to obtain confirmation as to whether your personal data is being processed, and if so, access to that data along with specific information about the processing. You may request a copy of your personal data free of charge once per calendar year.

Right to Rectification (Article 16): You have the right to have inaccurate personal data corrected without undue delay. You also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to Erasure - 'Right to be Forgotten' (Article 17): You have the right to obtain the erasure of your personal data without undue delay where specific grounds apply, including where the data is no longer necessary for the original purposes or you withdraw consent.

Right to Restrict Processing (Article 18): You have the right to restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing whilst we verify legitimate grounds.

Right to Data Portability (Article 20): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object (Article 21): You have the right to object to processing of your personal data based on legitimate interests, direct marketing (including profiling), or processing for scientific, historical research, or statistical purposes.

Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights: To exercise any of these rights, please contact us at bookworm@bookworm.app with your specific request. We will respond within one month of receipt, though this may be extended by two months for complex requests.

Identity Verification: To protect your privacy and security, we may need to verify your identity before processing your request. This may involve requesting additional information or documentation.

No Fee Policy: We will not charge a fee for processing your request unless it is manifestly unfounded, excessive, or repetitive. In such cases, we may charge a reasonable fee or refuse to act on the request.

Right to Lodge a Complaint: If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

ICO Contact Information: You can contact the ICO at ico.org.uk, by telephone on 0303 123 1113, or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Children's Rights: For users under 18, these rights may be exercised by a parent or guardian. We take particular care to protect children's personal data and ensure their rights are fully respected.

Response Timeframes: We aim to respond to all data rights requests within one month. For complex requests, we may extend this period by up to two additional months, and we will inform you of any such extension within the first month.

Data Subject Rights Register: We maintain a register of all data subject rights requests to ensure compliance and proper handling. This helps us track response times and ensure your rights are fully respected.

For any questions about your data rights or to make a request, please contact our Data Protection Officer at bookworm@bookworm.app. We are committed to upholding your privacy rights and ensuring full compliance with UK data protection legislation.