Data Protection
Data Protection legislation gives an individual the right to access personal data and other certain information held about them by organisations.
To make a Subject Access Request to Nexus please email subject.access@nexus.org.uk.
To make a Subject Access Request to the North East Mayoral Strategic Authority please email dataprotection@northeast-ca.gov.uk
When receiving a subject access request, we will reserve the right to verify the identity of the individual making the request. Acceptable documents include: passport, driving licence, medical card, birth certificate/adoption certificate, recent utility bill confirming current address dated within the last three months. Photocopied documents are acceptable. Two documents are required with at least one of those documents including a photograph.
There is no charge for Subject Access Requests, but we may charge a reasonable fee for the administrative costs of complying with a request if is manifestly unfounded or excessive, or if you request further copies of your data. You will normally receive a response within one calendar month.
Your information rights
Contacting the Data Protection Officer
A Data Protection Officer has been appointed for Nexus and its subsidiary companies.
You can contact the Data Protection Officer by email at subject.access@nexus.org.uk or by writing to:
Data Protection Officer
Nexus
Nexus Head Office
The Spark
Newcastle Helix
St James Boulevard
Newcastle upon Tyne
NE4 5DE.
Please note that this office is not open to the public
What the Data Protection Officer does
It is a requirement for public authorities to appoint a Data Protection Officer to oversee the collection, handling and use of personal data. The Data Protection Officer informs and advises Nexus and its subsidiaries about our obligations to comply with the General Data Protection Regulation (GDPR) and other data protection legislation.
Your rights under data protection legislation
Right to withdraw consent
If we have relied on consent as the grounds for processing your personal data, you can withdraw this consent at any time.
Right to be informed
There must be a clear reason why Nexus needs to collect or use personal data. We tell people when we’re collecting their personal data and what we’re going to do with it.
Right of access
Individuals have the right to access copies of their personal data. This is done via a subject access request.
To make a Subject Access Request to Nexus please email subject.access@nexus.org.uk.
To make a Subject Access Request to the North East Mayoral Strategic Authority please email dataprotection@northeast-ca.gov.uk
Right to rectification
You can ask us to correct the information we hold about you if it is inaccurate or incomplete. If we have passed the information on to others, we will take steps to pass on the correction too. If we find that the information should not be changed, we will contact you within one month to explain our decision and provide details about how you can challenge the decision if you are dissatisfied with the outcome.
Right to erasure
The right to erasure gives individuals, in certain circumstances, the opportunity to ask organisations to delete personal data it holds about them. If we have passed the information on to others, we will take steps to tell them it has been deleted.
Right to restrict processing
Individuals have the right to ask or stop their personal data being used whilst an objection or rectification request is being considered, or if it has been used unlawfully. You may also ask us to retain data required to establish, exercise or defend a legal claim.
Right to data portability
The right to data portability allows individuals to request their personal data from an organisation in a way that is accessible such as a CSV, JSON or XML file.
Right to object
Individuals have the right to object to the processing of their personal data in certain circumstances.
Rights related to automated decision making including profiling
This right enables individuals, in certain circumstances, to prevent the automated profiling of their personal data.
We are required to tell you if we are using automated decision making to make decisions that would have legal, or similarly significant effect on you. We will explain what information we use, why we use it and what the effects might be.
For further information on the rights of an individual please visit the ICO website.
How to exercise your rights under data protection legislation
We have published privacy notices on our website and an easy to use form to help you access your data.
You should email dataprotection@northeast-ca.gov.uk if you have a concern about the accuracy of the personal data we hold about you, if you want us to erase or restrict use of your personal data, if you object to the use of your personal data or if with to exercise rights in relation to automated decision making.
The right to contact the Information Commissioner’s Office
You are also entitled to raise a concern with the Information Commissioner’s Office, the UK’s independent body set up to uphold information rights. For information visit the ICO website.
