UK-GDPR and DPA Notice
Last updated: July 9, 2021
“DPA” means the Data Protection Act passed in 2018 to implement the EU’s General Data Protection Regulation (GDPR) into United Kingdom (UK) law. The DPA was amended on January 1, 2021, by regulations under the European Union (Withdrawal) Act 2018, to reflect the UK’s status outside the EU (commonly referred to as “Brexit”).
“UK-GDPR” means the new UK domestic data privacy law enacted in anticipation of Brexit that took effect on January 31, 2020, which alongside the DPA governs all processing of personal data of UK individuals to empower them to control their personal data. (“Personal Data” is defined as “any information relating to an identified or identifiable natural person” — an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location number, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.)
The UK is made up of England, Scotland, Wales, and Northern Ireland. If you are an individual located in the UK, or these regulations apply to you otherwise, you have several rights regarding your Personal Data, including:
• Right to request access to your Personal Data.
This right allows you to receive a copy of the Personal Data that SI holds about you.
• Right to request correction of the Personal Data.
This right allows you to request to have any incomplete or inaccurate Personal Data that SI holds about you corrected, although we may need to verify the accuracy of the new data you provide to us.
• Right to request erasure of your Personal Data.
This right allows you to request that SI deletes or removes your Personal Data where there is no legitimate reason for us to continue processing it. You can also request that we delete or remove your Personal Data where you have successfully exercised your right to object to its processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be provided to you, if applicable, at the time of your request.
• Right to object to the processing of your Personal Data.
This right allows you to object to SI’s processing of your Personal Data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to the processing on this basis, as you feel it impacts your fundamental rights and freedoms.
• Right to request restriction of processing of your Personal Data.
This right allows you to request that SI suspend the processing of your Personal Data in the following circumstances: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it, as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Right to request the transfer of your Personal Data to you or to a third party.
This right allows you to request that SI provides to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. This right applies only to automated information for which you initially provided consent to use.
• Right to withdraw consent.
This right allows you to withdraw your consent to SI’s processing of your Personal Data at any time where we are relying solely on your consent to process your Personal Data. However, this right does not affect the lawfulness of any processing carried out before you withdraw your consent. If you do withdraw your consent, then we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
• Right to make a complaint to a regulatory body concerning our processing of your Personal Data.
While you have this right, we would appreciate if you contacted us first and give us the opportunity to address your concerns.
In connection with any request pursuant to these rights, we may ask for additional information to confirm your identity and to ensure your right to access the Personal Data requested. Any request for additional information is a part of SI’s security measures to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to expedite our response.
You may exercise any or all these rights at no cost. Where practical and not subject to statutory exemption, SI will attempt to respond to all legitimate requests within 30 days of the request. Occasionally, it may take us longer to respond if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.
If you would like to exercise any of these rights, please contact:
Executive Vice President/Chief Compliance Officer
Scherzer International Corporation
21650 Oxnard Street, Suite 300
Woodland Hills, CA 91367