10. Your rights You have certain rights under the Data Protection Legislation which you can exercise by contacting us at: Leeds Hospitals Charity Ground Floor, Trust Headquarters, St James's University Hospital Beckett Street, Leeds, LS9 7TF Phone 0113 539 7020 Email [email protected] Your rights include the following. Requesting access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of your personal data that we hold and to check that we are processing it lawfully. Requesting correction of your personal data that we hold. This enables you to have any incomplete or inaccurate data we hold about you corrected. Please note we may need to verify the accuracy of the new data you provide to us. Requesting erasure of your personal data. This enables you to ask us to delete or remove personal data for the following reasons: where we have no good reason for continuing to process it; where you have successfully exercised your right to object to processing (see below); where we may have processed your information unlawfully; or where we are required to erase your personal data to comply with local law. Please note that we may not always be able to comply with your request of erasure due to specific legal reasons which we will make you aware of, if applicable, at the time of your request. Objecting to processing of your personal data where Leeds Hospitals Charity is relying on a legitimate interest (or those of a third party), which you want to object to as you feel it impacts on your fundamental rights and freedoms. Please be aware that we may demonstrate to have compelling legitimate grounds to process your information which override your rights and freedoms. Requesting restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data for reasons outlined below. If you want Leeds Hospitals Charity to establish the data's accuracy. Where we have used the data unlawfully, but you do not wish us to erase it. Where you need us to hold the data, even if we no longer require it, as you need the data to establish, exercise or defend legal claims. Where you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it. Requesting the transfer of your personal data to you or a third party. We will provide your personal data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use, or where we used the information to perform a contract with you. Withdrawing consent of your data at any time, where we are relying on consent to process your personal data. Please note this will not affect the lawfulness of any processing carried out before you withdraw your consent. Further details about your rights can be found on the Information Commissioner's Office (ICO) website at https://ico.org.uk/ There are some exemptions to the above rights permitted under the Data Protection Legislation. If you have any queries regarding this, please get in touch with us. Please note that if you choose to exercise your rights to have personal data restricted, deleted or withdrawn, then we may not be able to provide you with a full service which we will make you aware of at the time. We will need you to provide identification in order to comply with your request to exercise your rights. Once we have received your information request and your identification, we will respond within the required timescales unless a permitted exemption applies.