General information about your data and your rights
Where we collect data directly from you, we will undertake, In addition to the third party companies expressly detailed in this agreement, to inform you in writing of the name and contact details of the data controller for that data and their representative. For example, where we arrange an investment on your behalf with a third party investment manager, the data controller may be the financial institution in question.
To inform you, where appropriate, of the contact details for any Data Protection Officer appointed by us.
To inform you and make clear the purposes and the legal basis for which the data is to be processed. In the event that the legal basis to be relied on is that of the legitimate interests of the data controller or any third party, we will inform you as to the nature of those legitimate interests.
To inform you of the recipients or categories of recipients of data.
In the event that the data controller proposes to transfer the data to a country other than those covered by the GDPR, to provide you with details of the safeguards surrounding such transfers and how to obtain a copy of them.
To inform you of the period for which we propose to hold the data, or where this is not possible, the criteria which we will apply to data retention.
To remind you of your rights whereby you may:
- request access to data of which you are the data subject
- object to, or withdraw consent for, the processing of the same
- obtain rectification of inaccurate data
- prevent data processing for the purposes of direct marketing
- object to decisions being taken by automated means and to have the logic behind those decisions clearly explained
- claim compensation for damages caused by a breach of the Act
- request data erasure
Where you exercise your right to request (via email or post) access to data of which you are the data subject, we will undertake to respond to you within 30 calendar days of receipt of your request. There will be no charge for this service unless the request is manifestly unfounded or excessive in which case we reserve the right to charge a fee or refuse to respond.
You may at any time, by giving notice in writing, request that we cease to process your data. We will undertake to comply with any such request as soon as is reasonably practicable.
Where the legal basis for the processing of your data is to adhere to compliance with a statutory or contractual obligation, or the necessary precondition to entering into a contract, including compliance with the requirements of any Regulator, we will inform you as to:
- Whether you are legally required to provide such data, and
- The consequences of failing to provide such data
Where we obtain your data otherwise than directly from you, you will have the same or equivalent rights to those set out above.
Save in the circumstance as detailed below, we will inform you of the source the data originated from and whether it came from publicly accessible sources. The information to be provided will be in accordance with the following time periods, whichever shall occur first:
- As soon as practicable after obtaining the data and in any event within one month
- At the time of our first communication with you using the data
- When the data is first disclosed to another person
We shall not be obliged to provide you with this information:
- Where you already have the information
- Where we are subject to an obligation of professional secrecy prohibiting the disclosure of the information
- Where disclosure would render impossible or severely impair the achievement of the reasons for which the data is to be processed. In such cases, we will do what we can to protect your rights and freedoms
You have the right to complain with regard to any aspect of the processing of your data and any breach of the above rights to the relevant supervisory authority, who in the case of the United Kingdom is the Information Commissioners Office, who can be contacted at: