9. Your Rights
You have rights under data protection law that you can exercise against MTCS but these do not apply in all circumstances. You can exercise those rights free of charge except in very limited circumstances, which will be explained to you if relevant. Here are short descriptions of your rights:
Right of access – you have a right to request access to your personal data, to obtain confirmation that it is being processed, and to obtain certain information about how it is processed.
Right to rectification – you have a right to ask for your personal data to be rectified if it is inaccurate, and completed if it is incomplete. in certain circumstances we can refuse the request for rectification and the reasons why will be explained if it is the case. Where your personal data in question has been disclosed to organisations, they must be informed of the rectification if possible.
Right to be forgotten (erasure) – in certain circumstances, you can ask to have your personal data erased. It is unlikely to be possible to accept your request if, for example, MTCS has a legitimate interest/duty to retain or process your information.
Right to restriction of processing – you have a right to request the restriction or suppression of your personal data in some circumstances. This includes when you contest it as being inaccurate (until the accuracy is proved); if you have objected to the processing (when it was necessary for legitimate interests) and MTCS is considering whether its legitimate interests override your own; if you consider that the processing is unlawful (and if this is true) so that you can oppose erasure and request restriction instead; or if MTCS no longer need the personal data for the purposes they held it but you require one or both of them to continue to hold it to establish, make or defend legal claims.
Right of portability – this right only applies to information you have provided, you have the right to move, copy or transfer your personal data to another organisation or to yourself. This right is only relevant if personal data is being processed based on a consent (or for performance of a contract) and is done automatically. This right is different from the right of access and the types of information you can get under the two separate rights may be different. Using the data portability right, you cannot get all the personal data you can get using the right of access.
Right to object – in certain circumstances, you have the right to object to certain types of processing of your personal data when it is based on legitimate interests, when it is processed for direct marketing (including profiling relevant to direct marketing) or when it is processed for the purposes of statistics. However this may not be relevant if MTCS have compelling legitimate grounds for processing
Automated decision making – Some of our distance learning courses use automated decision making, but solely on the first section. This automated decision making is based on answers you have given to multiple choice questions, made after you have worked through the training material/course content. This demonstrates your knowledge and understanding and is necessary to progress to the second section of the course.
For more information about all these rights, and how to exercise them please contact MTCS at email: enquiries@mtcs.info or telephone 015394 40200
Information Commissioners Office (ICO) – If you have a complaint we hope that you would allow us to try and resolve it for you first however if this has not been possible you have the right to raise the matter directly with the supervisory authority, the Information Commissioner’s Office who can be contacted on 0303 123 1113. You may be asked to provide proof of identity when making these requests.
MTCS UK Ltd Privacy Policy (Rev 003, January 2025)
