The following procedure will be carried out when Orange Aero receives a Subject Access Request for information directed to any staff member of Orange Aero Ltd.
The Right of Subject Access
The General Data Protection Regulation gives individuals the right to request copies of all their personal data processed by Orange Aero Limited as a data controller and this document refers to Orange Aero Limited in that role.
Personal data is any information that relates to a living individual who can be identified from that information.
The individual is entitled to see all copies of letters, memos and emails of which the individual is the focus.
In order to get a copy of their personal data the applicant must provide sufficient information to identify themselves and the information they are seeking by contacting.
Howland Road Business Park
Once an individual has provided all information Orange Aero has one month to comply with the request. If Orange Aero does not comply fully with a legitimate request from an individual within the one month time limit, we will be in breach of the GDPR.
Orange Aero will ensure that all Subject Access Requests are acknowledged in writing within 5 working days. At the time of acknowledgement, individuals will be told whether any further information is required.
It will be the policy of Orange Aero to not charge, in compliance with GDPR, per subject access request. Where the request is determined to be ‘manifestly unfounded or excessive’, a fee may be charged consummate with the complexity or time required to the request.
Individuals will be required to provide proof of identity and residence before information will be disclosed. This is to prevent unauthorised disclosures to third parties.
Orange Aero understand the rights of the individual pertaining to Data Portability and will provide details in a structured, commonly used and machine readable format with the exception of paper based files which will be scanned and sent to the applicant.
Orange Aero has the right to withhold personal data if disclosing it would ‘adversely affect the rights and freedoms of others'.
Date of Last Review – July 2021
Review Frequency – 1 year
Review Date – July 2021