You have a right under General Data Protection Regulations to
- be informed about our processing of your personal data;
- have your personal data corrected if it is inaccurate and to have incomplete personal data completed;
- object to the processing of your personal data;
- restrict processing of your personal data;
- have your personal data erased;
- request access to your personal data and information about how we process it;
- move, copy or transfer your personal data;
- Rights in relation to automated decision making including profiling;
- Right to complain to the Information Commissioner's Office (ICO).
GDPR Data Subject Requests (DSRs) cannot be made by phone, and must be authenticated by using the correct channel:
- For social media you control your own data by setting your choice of preferences and using the content editing features of the social media platform.
- For our systems with User Access Control such as our Appointment Booking and Ticket Reservation systems, log in and then:
- Update your personal data under My User Profile in the Main Menu;
- View your booking history and status of transactions under My Bookings;
- View your Support Forum posts under Customer Support;
- Request erasure or export of personal data under Data Subject Request.
- For emails you must email your Data Subject Request to the email address concerned from the email address you used for the original correspondence.
- For paper records you must apply by paper post to the Data Controller, supplying proof of identity, type of record and the subject heading, at the following address:
Data Protection Officer,
LRF and ET Heyes,
Wye Valley Visitor Centre,
Whitchurch,
Ross on Wye,
HR9 6DA
Please note that your rights are restricted We can't help where a third party is Data Controller (e.g. social media, payment processors, or eBay); We decline DSRs which could be prejudicial to the rights of a third party, which includes data retained for accounting or other evidential purposes such as CCTV records; We decline DSRs made on your behalf unless your formal consent for disclosure is authenticated. If a grounded Data Subject Request is declined, you can appeal to the
Information Commissioner's Office (ICO)
.
The Wye Valley Visitor Centre Data Controller is LRF and ET Heyes, ICO Registration Certificate Ref. No: ZA390686.
