At SAI Aerospace Training Ltd we collect personal data (information) from our
customers,
staff and visitors. We do this so we can provide positive experiences and comply
with
legal requirements.
The responsible handling of your personal data is very important to us. We will
never
sell or pass on your data to others for marketing purposes, and we will always
store
your data securely.
For more information on how we use your personal data, your rights, etc please
visit our
signposts below.
Contact Us
By email:
g.murray@sai-aerotraining.co.uk
By phone: 07526 566599
Or write to:
Accountable Manager
SAI Aerospace Training Ltd
McNee Road
Glasgow Prestwick International Airport
Prestwick
South Ayrshire
KA9 2PH
Data Protection - Your Rights
Data protection laws in the UK give individuals a number of rights in relation
to
personal data. The guidance below explains these rights and provides contact
details for
any enquiries or concerns
Your Personal Data
Personal data is information that relates to a living individual. Any
information about
you where you can be identified, or you are identifiable either directly or
indirectly,
is your personal data.
At SAI Aerospace Training Ltd, we gather personal data in order to provide a
positive
experience for our customers staff and visitors and to ensure compliance with
legal
requirements as part of our service delivery
When we process (use) personal data, we will follow the Data Protection
Principles set
out in Article 5 of UK GDPR
https://www.legislation.gov.uk/eur/2016/679/article/5
This means we must:
-
Have a good reason to use your personal data and tell you what we are doing
with it
-
Only use your personal data for the purposes (reasons) for which you have
given it
to us
- Only collect personal data that is relevant and limited to what we need
-
Ensure your personal data is accurate and kept up–to–date only keep personal
data
that identifies you for as long as it is needed
-
Ensure that your personal data is kept securely and take reasonable steps to
protect
it
Your Rights
Under UK data protection law you have the following rights:
-
Right to be Informed
Your right to be informed if your personal data is being used | ICO
-
You have the right to know how SAI is processing (using) your personal data,
including
- What types of personal data we collect
- Why we are processing (using) your personal data?
- Who we share your personal data with
- How long we keep your personal data for
-
We publish this information in our privacy notices, which we make available
at the
time of collecting information from you
-
You have the right to ask for a copy of the personal data we hold about you,
along
with information on why and how it is processed. This will help you
understand what
your data is being used for and to verify the lawfulness of that use.
-
This is generally known as making a 'Subject Access Request'. A subject
access
request is free of charge, unless it is excessive or repetitive. If this is
the
case, we may charge a reasonable fee to cover the costs of providing the
information
or refuse to provide the information.
-
We will require verification of your identity before responding to the
request, to
make sure we have the right person and the right information. We will
provide you
with the information you have requested within one month, although if the
request is
complex, we may extend the deadline by a further two months. If this is the
case, we
will discuss this with you.
-
There are some exemptions which may apply. This may mean not all of the
information
you request will be available, for example if providing the information
would also
disclose the personal data of another person. In such circumstances we will
redact
(withhold) some or all of the information. We will explain our reasons for
doing
this when we provide the response.
How to make a Data Subject Request
You can exercise any of the rights above by making a Data Subject Request.
You can make a request by writing to us, sending an email or asking over the
phone or in
person.
If you'd rather just email or write to us, you can. We may need to contact you
to
clarify your request if we don't have enough information, but we'll do that as
quickly
as possible.
Contact us using the details above
If you are dissatisfied our response, you have the right to complain to the
Information
Commissioner's Office (ICO):
Contact ICO Online
Telephone: 0303 123 1113
Or write to:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow,
Cheshire,
SK9 5AF
-
You have the right to have your personal data rectified (corrected) if it is
inaccurate or incomplete.
-
Where your personal data is corrected and if we have passed it on to any
other
organisations (in accordance with lawful processing and as described in our
privacy
notices) we will ask them to update the personal data they hold.
-
If we are unable to correct your data and have a legitimate reason for this,
we will
explain our reasons to you. We will not make any changes but will keep your
statement requesting rectification on your record.
You have the right to ask us to delete or remove personal data we process (use)
when
there is no compelling reason for us to keep it. For example:
-
Where data is no longer necessary for the purpose for which it was
originally
collected
-
When you withdraw consentIf you object to the processing and there is no
overriding
legitimate interest for continuing the processing
- Our use of the data is unlawful
- The data has to be erased to comply with a legal obligation
-
The data is processed in relation to the offer of information society
services to a
child
-
The right to be forgotten is not an absolute right, which means we can
refuse a
request for erasure if the processing of personal data is:
- used to exercise the right of freedom of expression and information
-
needed to comply with a legal obligation or the performance of a
public
interest taskneeded for public health purposes in the public
interestused
for archiving in the public interest, for scientific or historical
research,
or for statistical purposes.
-
needed for making or defending legal claims When a request for
erasure is
upheld, we will stop any further processing, delete all your
personal data
and advise any other organisations we may have passed your data to
(in
accordance with lawful processing and as described in our privacy
notices)
to do the same.
You have the right to ask us to stop processing your personal data
if:
- You contest the accuracy of the personal data we hold
-
You believe our processing is unlawful and you would like us to stop (but
not have
your information deleted)
-
We no longer need to process your personal data, but it needs to be kept to
make or
defend a legal claim
-
When this right is exercised, we will retain enough personal data to meet
the
purpose for keeping it. We will also make sure it is not processed for any
of the
purposes for which you have asked us to stop.
You have the right to object to our processing of your personal information in
limited
circumstances. For example:
-
In the legitimate interests of the organisation or because we are carrying
out a
public task in the public interest. We must show compelling legitimate
grounds to be
able to continue to process your data.
- For direct marketing, including profiling
-
For scientific or historical research or for statistical purposes, unless
the
processing is necessary to carry out a public task in the public interest
Where you
exercise this right we will stop processing your personal data unless there
is a
compelling reason that is greater than your individual rights.
Automated decision making is where a decision is made solely by automated means,
without
any human intervention e.g. by a computer algorithm. Profiling is the automated
process
of using personal data to evaluate certain things about an individual.
You have the right:
- To know whether an organisation is using automated decision making
-
Not to be subject to a decision that is based solely on automated processing
if the
decision affects your legal rights or other equally important matters (e.g.
automatic refusal of an online funding application, and e-recruiting
practices
without human intervention)
- To request human intervention and to challenge a decision
- To object to profiling in certain situations, including for direct marketing
-
We are not making any solely automated decisions about individuals at this
time. If
this changes, this will be made known in the relevant privacy notice(s).