For the purposes of this notice a reference to ASCL also includes a reference to ASCL Professional Development Ltd.
This document sets out information to enable ASCL to respond to a data subject access requests (DSAR) under data protection legislation.
A DSAR is a request by any means (phone, email, letter etc) for personal information (known as personal data) held about an individual by ASCL. Data protection legislation gives individuals the right to know what information is held about them. However, this right is subject to certain exemptions.
You can submit a DSAR by contacting us at
info@ascl.org.uk so that we can capture all the relevant information to support your request.
When we receive a DSAR we will first check that we have enough information to be sure of the data subject identity. Often, we will have no reason to doubt a person’s identity, for example, if we have regularly corresponded with them. However, if we have good cause to doubt a person’s identity, we can ask for any evidence we reasonably need to confirm the identity.
We will gather any manual or electronically held information (including emails) and identify any information provided by a third party or which identifies a third party, with conditions being met.
If we have identified information that relates to third parties, we will write to them asking whether there is any reason why this information should not be disclosed. We do not have to supply the information to the data subject unless the other party has provided their consent or it is reasonable to do so without their consent. If the third-party objects to the information being disclosed we may seek legal advice on what we should do.
We will deal with the DSAR without undue delay and in any event within one month of receipt of your request. However, if the work involved is particularly complex or if numerous requests are made then we may extend this period by up to two additional months. In this case, we will inform the data subject about the extension and explain the reasons.
We will not charge a fee for dealing with a DSAR request unless it is manifestly unfounded or excessive. If we charge a fee, we will inform the data subject of this and explain the reasons for doing so.
We will explain what steps have been taken in dealing with the request i.e. we will set out the source of the personal information we have gathered.
The information will be provided in a concise, transparent and easily accessible form. It may be provided in writing, or by other means, including, where appropriate, by electronic