You have rights under the General Data Protection Regulation 2016 (GDPR) regarding the personal data that THH, as the Data Controller, processes about you.
Right to notification
A privacy notice will be provided to you explaining how and why we intend to process your data. This ‘Privacy Notice’ will be based on the general statement on our website but with details specific to the service you are involved with. This information will be on the website, on the form you complete or you will be about it over the phone.
Subject Access Rights
You can ask for a copy of the data we hold on you and we must respond within one month. You will not have to pay a fee to access your personal information. However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
Right to be forgotten
This allows you to request that we delete our records or some of our records in so far as they identify you. It does not apply in all circumstances.
Right to rectifications
This concerns correcting your personal data that is held.
Right to restriction of processing
You can ask that access to your records is limited in certain circumstances.
Right to portability
This allows you to be provided with a copy of your data in an accessible electronic format. This does not apply to all data.
Right to object
You have the right to object to THH processing your data if you dispute the authority to processed data.
Right to object to automated decision making
Some decisions are made by machine calculation of data held.
Right to complaint to Supervisory Body (the Information Commissioner)
You have the right to complain to the Information Commissioner if you believe the processing of your personal data infringes the General Data Protection Regulation.
Right to Judicial Remedy against Supervisory Body (the Information Commissioner)
You have the right to seek a judicial remedy against the Information Commissioner without prejudicing any other administrative or non-judicial remedy about a binding decision of the commissioner or if the Commissioner does not handle a complaint within three months. This is likely to be achieved in a tribunal.
Right to Judicial Remedy against THH
You have the right to seek a judicial remedy against THH, without prejudicing any other administrative or non-judicial remedy about the processing of your data where you believe the data processing did not comply with the GDPR. This can be achieved in the County Court or High Court in England.
Right to compensation
You have a right to receive compensation from the controller or processor if you have suffered material or non-material damage as a result of an infringement of the GDPR.
Such a claim can be made in the County Court or High Court.
How to exercise your rights
If you are dissatisfied with our handling of your data or how we have dealt with your data subject rights, you can complain to our data protection officer, and also to the Information Commissioner's office casework@ICO.org.uk. You can also seek judicial remedy in some circumstances.
We will respond to your request to exercise any of the above rights as soon as we can and within one month (30 days) of your request. If this is not possible due to the complexity or size of the request we will let you know. In exceptional circumstances we can extend the timescale to 3 months or 90 days. We will let you know why if this is the case.
How to contact us and the Information Commissioner
For further information, or to make a request to exercise any of your data subject rights you can contact us or the Information Commissioner’s Office.
Data Protection Officer
Tower Hamlets Homes
PO Box 66355
Tel: 020 7364 5015
Information Commissioner’s Office
Tel: 0303 123 1113
Visit the Information Commissioner's website.