Glacier Field Historical Research is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides additional information about how we meet our data protection obligations and how you can exercise your rights.
Data Controller
Glacier Field Historical Research is the data controller responsible for your personal information. We determine the purposes and means of processing personal data in connection with our historical research and consultation services.
Lawful Basis for Processing
We process personal data only where we have a valid lawful basis to do so. The specific lawful basis depends on the type of processing activity:
Contract Performance
When you engage our services, we process your personal data as necessary to fulfil our contractual obligations. This includes conducting research, communicating findings, and managing the client relationship.
Legitimate Interests
We may process certain data based on our legitimate interests in operating and improving our business, provided such interests are not overridden by your fundamental rights. Examples include website analytics and business administration.
Consent
Where we rely on consent as the lawful basis for processing, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
Special Category Data
Historical and genealogical research may involve processing special category data, including information revealing racial or ethnic origin, religious beliefs, or health conditions of ancestors. We process such data only with your explicit consent and for the purpose of providing the research services you have requested.
Your Data Subject Rights
Under the UK GDPR, you have the following rights:
Right of Access
You have the right to obtain confirmation as to whether we process your personal data and, if so, to access that data along with information about how it is processed. We will respond to access requests within one month.
Right to Rectification
You have the right to have inaccurate personal data corrected and incomplete data completed. Please contact us if you believe any information we hold about you is incorrect.
Right to Erasure
In certain circumstances, you have the right to request deletion of your personal data. This right is not absolute and is subject to legal exceptions, including where we need to retain data to comply with legal obligations.
Right to Restriction
You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have challenged.
Right to Data Portability
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Rights Related to Automated Decision-Making
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
Exercising Your Rights
To exercise any of your data subject rights, please contact us using the details below. We may need to verify your identity before processing your request. We will respond to valid requests within one month, though this period may be extended by two further months for complex requests.
Data Protection Impact Assessments
We conduct data protection impact assessments where processing is likely to result in high risk to individuals' rights and freedoms. This includes assessments for new services or significant changes to existing processing activities.
Data Breach Notification
We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in high risk to your rights and freedoms, we will notify you without undue delay and inform the Information Commissioner's Office within 72 hours.
International Data Transfers
Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office or transfers to countries with adequate data protection laws.
Contact Information
For data protection enquiries or to exercise your rights:
Glacier Field Historical Research
47 Cathedral Close
Winchester
Hampshire SO23 9LT
United Kingdom
Email: [email protected]
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Last updated: January 2024