Privacy and your rights

You have the right to see all the personal information we hold about you.

We’ll handle routine enquiries as part of our usual customer service. If you want to see more of the information that we have about you, you can make a Data Subject Access Request (SAR).

As part of an access request you can also ask:

a) purpose of processing
b) categories of personal data concerned
c) the recipients or categories of recipients to whom the personal data has or will be disclosed
d) the period of time for which the information will be stored
e) your right to request rectification or erasure or restriction of processing
f) where the information is not collected directly from you, any detail as to its source
g) the existence of automated decision making, including profiling as well as the significance/ consequences of such processing
h) if transferred to a third country, the right to be informed of the safeguards in place relating to the transfer

To help you make your request, we have produced a form which you can find on our website here. We may reply to you where we need further information to help respond effectively to your request.

To ensure that we only give your information out to you and not someone else, you will need to provide us with two current forms of identification.

Once we receive your written request, any clarifications and identification, we respond as soon as we can within 1 calendar month.

You can either post your form to:

SAR Team
Northumbrian Water
Customer Centre
PO Box 200
Durham
DH1 9WQ

Or email it to us:

SAR@nwl.co.uk

If you want to contact us about your rights or to find out more please email data.protection@nwl.co.uk

You have the right to ask us to correct any of your personal data we hold about you which is inaccurate.

We always try to maintain your personal data as accurately as possible.

If you want to contact us about your rights or to find out more please email data.protection@nwl.co.uk

The right to erasure allows for you to have your personal data erased. You may have heard this right called ‘the right to be forgotten’.

This right is not absolute and only applies in the following circumstances:

a) the personal data is no longer necessary for the purpose which we originally collected or processed it for;
b) we are relying on consent as our lawful basis for holding the data, and you have withdrawn your consent;
c) we are relying on legitimate interests as our basis for processing, you object to the processing of your data, and there is no overriding legitimate interest to continue this processing;
d) we are processing the personal data for direct marketing purposes and you object to that processing;
e) we have processed the personal data unlawfully
f) we have to do it to comply with a legal obligation; or
g) we have processed the personal data to offer information society services to a child.

If you want to contact us about your rights or to find out more please email data.protection@nwl.co.uk

You have the right to ask NWL to restrict processing of your personal data. This is not an absolute right and only applies when:

• you contest the accuracy of your personal data
• the processing is unlawful

If you want to contact us about your rights or to find out more please email data.protection@nwl.co.uk

The right to data portability allows you to obtain and reuse your personal data for your own purposes across different services. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way.

This right would only apply if we process your personal data on the basis of:

• your consent
• a contract
• the processing is carried out by automated means

If you want to contact us about your rights or to find out more please email data.protection@nwl.co.uk

You have the right to object at any time to automated processing (making a decision solely by automated means without any human involvement) or profiling.

If you want to contact us about your rights or to find out more please email data.protection@nwl.co.uk