LEGAL INFORMATION

GDPR Policies and Procedures

1. The Data Protection Act

The Data Protection Act 2018 controls how your personal information is used by EA Systems and Support Ltd and other UK companies.

The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR).

EAS and other companies using personal data have to follow strict rules called ‘data protection principles’. We must make sure the information is:

• used fairly, lawfully and transparently
• used for specified, explicit purposes
• used in a way that is adequate, relevant and limited to only what is necessary
• accurate and, where necessary, kept up to date
• kept for no longer than is necessary
• handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

There is stronger legal protection for more sensitive information, such as:

• race
• ethnic background
• political opinions
• religious beliefs
• trade union membership
• genetics
• biometrics (where used for identification)
• health
• sex life or orientation

There are separate safeguards for personal data relating to criminal convictions and offences.

Your rights

Under the Data Protection Act 2018, you have the right to find out what information the government and other organisations store about you. These include the right to:

• be informed about how your data is being used
• access personal data
• have incorrect data updated
• have data erased
• stop or restrict the processing of your data
• data portability (allowing you to get and reuse your data for different services)
• object to how your data is processed in certain circumstances

You also have rights when an organisation such as EAS, is using your personal data for:

• automated decision-making processes (without human involvement)
• profiling, for example to predict your behaviour or interests

2. Request for information

You can write to EA Systems and Support Ltd to ask for a copy of the information we hold about you.

How long it should take

EA Systems and Support Ltd are obliged to give you a copy of the data we hold about you as soon as possible, and within 1 month at most.

In certain circumstances, for example particularly complex or multiple requests, this can take a further 2 months to provide data. In this case, we will inform you:

• within 1 month of your request
• why there’s a delay

When information can be withheld

There are some situations when we are allowed to withhold information, for example if the information is about:

• the prevention, detection or investigation of a crime
• national security or the armed forces
• the assessment or collection of tax
• judicial or ministerial appointments

We are not obliged to say why they’re withholding information.

How much it costs

Requests for information are usually free. However, EAS can charge an administrative cost in some circumstances, for example if:

• you’re asking for a large amount of information
• your request will take a lot of time and effort to process