Your Rights Under UK GDPR
The UK GDPR gives individuals a number of rights in relation to their personal data. Jesus Youth UK is committed to respecting and facilitating these rights.
Right of Access (Article 15)
You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data along with information about how it is processed. This is commonly known as a Subject Access Request (SAR).
Right to Rectification (Article 16)
You have the right to have inaccurate personal data corrected. If the data we hold about you is incomplete, you have the right to have it completed.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data in certain circumstances, including:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent and there is no other lawful basis for processing
- The data has been unlawfully processed
Please note: This right does not apply where we are required to retain data for legal obligations, safeguarding purposes, or the establishment, exercise, or defence of legal claims.
Right to Restriction of Processing (Article 18)
You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have contested.
Right to Data Portability (Article 20)
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object (Article 21)
You have the right to object to processing based on legitimate interests. Where you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Rights Related to Automated Decision-Making (Article 22)
Jesus Youth UK does not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals.
How to Make a Subject Access Request
To make a Subject Access Request or exercise any of your rights, please:
- Contact us in writing at safeguarding@jesusyouth.co.uk
- Provide sufficient information for us to verify your identity and locate the relevant data
- Specify which right you wish to exercise and, if applicable, the specific data concerned
We do not charge a fee for handling requests unless the request is manifestly unfounded or excessive.
Children’s Rights and Parental Requests
Children have the same data protection rights as adults. However, the way these rights are exercised may differ depending on the child’s age and understanding:
- Children aged 13 and over — may be able to exercise their own rights, depending on their maturity and understanding. We will assess this on a case-by-case basis.
- Children under 13 — rights are normally exercised by a parent or guardian on the child’s behalf.
- Parental requests — where a parent or guardian makes a request on behalf of a child, we will consider the child’s best interests, including whether disclosing information might cause the child harm.
Where there is a safeguarding concern, we may limit or refuse a request if disclosure could put a child or vulnerable adult at risk.
Response Timeframes
We will respond to all valid requests within one calendar month of receiving the request. This period may be extended by a further two months where requests are complex or numerous, in which case we will inform you within the first month.
If we are unable to comply with a request, we will explain the reasons and inform you of your right to complain to the Information Commissioner’s Office (ICO).
Complaints
If you are not satisfied with how we have handled your request or your personal data, you have the right to complain to the ICO:
Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk
We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please contact us first at safeguarding@jesusyouth.co.uk.