Article 15 of the EU Data Protection Law provides that individuals (the data subject) have the right to know what personal data is being held about them and how that data is used.
You may apply to access your data. Our preferred method is through the completion of our Data Subject Access Request Form. Using this form ensures that you know the types of information that we need in order to comply with your request.
Before we can act on your request as an individual (data subject), we must be sure of your identity and be supplied with information from you in order to locate the information that you are seeking. You have the right to obtain from the Seminary confirmation as to whether personal data concerning you is being processed by the Seminary, and, where that is the case, have access to the personal data.
Article 15 lays out your rights as follows:
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- where the personal data are not collected from the data subject, any available information as to their source;
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
On receipt of your completed request, with the verification of your identity and sufficient details given to enable us to locate the information, the Seminary will generally respond within 30 calendar days.
All Data Subject Access Requests can be communicated through firstname.lastname@example.org.