Data Protection (GDPR)

GDPR FAQs

We’re always on hand to offer advice or make things easier, so to help, we’ve compiled these FAQs. If you’ve got a question then they should do the trick.

 

1. What is the GDPR?

It is an EU Regulation that will supersede the Data Protection Act 1998 and will take effect on 25 May 2018. Its purpose is designed to harmonise data protection laws across the EU and provide greater transparency and privacy in relation to personal data.

2. Who does the GDPR apply to?

The GDPR applies to organisations operating within the EU who process personal data. Lajlo Ltd is a controller of your data.

3. What is a Data Protection Officer (DPO)?

A designated individual who is responsible for compliance with the data protection regulation. Lajlo Ltd has appointed a DPO and they can be contacted at a.ziolkowska@lajlo.com, tel. +447825528619.

4. What is processing?

Any operation(s) in relation to personal data including:

  • Collection, recording, organising, structuring, storage
  • Adaptation or alteration
  • Retrieval, consultation and use
  • Disclosure by transmission, dissemination or otherwise making available
  • Alignment or combination
  • Restriction, erasure or destruction

5. What is the difference between a data controller and a data processor?

A data controller is a person, including a company such as Lajlo Ltd who determines the purposes and manner in which personal data is processed. A data controller is responsible for and must be able to demonstrate compliance with, the principles relating to the processing of personal data.

A data processor is any person who processes personal data on behalf of the data controller.

6. What is a data subject?

A data subject is you an identified or identifiable natural person.

7. What constitutes personal data?

Any information that can be used to directly or indirectly identify a person, it can include anything from:

  • Names
  • Mailing addresses
  • E-mail address
  • Date of birth
  • CCTV images of individuals (in case of the retail shops)
  • IP address

8. What rights do I have as a data subject?

As a data subject, you have the right to:

  • Access your own personal data (otherwise referred to as a Subject Access Request):
    • You can do this if you wish to obtain a copy of your personal information along with an explanation of the categories of data being processed, the purposes of such processing and the categories of third parties to whom your data may be disclosed.
    • You can make a subject access request verbally or in writing.
    • To exercise this right, please contact our Customer Services department on +447825528619. 
  • Ask for any mistakes regarding your personal data to be rectified where it is inaccurate or incomplete:
    • This can be requested where, for example, we have referred to the correct name but wrong address.
    • If you wish to notify us of any errors, please contact our Customer Services department on +447825528619 or alternatively other contact methods can be found on our website under the ‘Contact Us’ link. 
  • Have your personal data deleted
    • This is not an absolute right but can be done where, for instance, you believe your personal data is no longer necessary if you no longer consent to your personal data being processed or where you believe it’s been unlawfully processed.
    • To exercise this right, please contact our Customer Services department on +447825528619 or alternatively complete the request form.
  • Limit the processing of your personal data:
    • You can request this if, for example, you have issues with the content of the personal information held or how it’s been processed.
    • To exercise this right, please contact our Customer Services department on +447825528619 or alternatively complete the request form.
  • Object to your data being processed if it is being used, for example, in:
    • Direct marketing such as marketing via email or telephone calls.
    • To exercise this right, please contact our Customer Services department on +447825528619  or alternatively complete the request form.
  • Receive a copy of your personal data 

    9. How do I exercise my rights as a data subject?

    If you wish to exercise your data subject rights, either contact our Customer Services Department on +447825528619 or email a.ziolkowska@lajlo.com.