Your rights under GDPR

Right of access: You have a right to ask for access to the information we hold on you. We will aim to give you this access as soon as possible but within a month maximum. We reserve the right to remove any Third Party information.

Right of erasure: We will hold your data for 6 years after have finished supporting you. In some cases we are required by legislation or contract requirements to keep your data for longer. E.g. safeguarding information or for European Funded projects.

Lawful basis for processing

The General Data Protection Regulation (GDPR) requires Llamau to state the lawful basis for processing your personal data.

Llamau processes your data under lawful processing conditions:

• ‘Processing is necessary … in the public interest…..and the data controller believes there is a need for the service’
• ‘Processing is necessary ….. because of substantial public interest … and there are appropriate safeguards.’
• ‘Processing is necessary for ….. ……the provision of health or social care systems and services ……’