Data Subject Access Requests
The GDPR allows you to have free and transparent visibility of your personal data and how that data is used. As part of AMLCERT's commitment to open and transparent processing of data, we have made the following processes available to you.
To Submit a GDPR Request:
Please choose ‘type’ as "GDPR Request" when opening a ticket below then select the appropriate request type require in relation to your information.
In order to provide you with a report on your data and to make any changes, we will need a few pieces of information from you first in order to confirm who you are.
The information you will need to provide to us in order to fulfil a subject access request is:
· Company name/requester name
· Requester email address
· Customer reference number (where applicable)
· Proof of identification and address (to enable us to verify your identity)
Once we have this information, the following options will be available:
Subject Access Requests (SAR):
An SAR will allow you to see all information we hold on you and give you options to make changes to this information.
Rectification Request:
If you believe that the information held within the AMLCERT systems to be inaccurate or incomplete, please provide details of what the inaccurate data is and evidence supporting the correction.
*Please note that AMLCERT has an obligation to respond within a 30 day timeframe of request raised, however this can be extended by two months where the request for rectification is complex.
**Please note some of the data AMLCERT hold is obtained from public or government sources and it may be necessary to direct your request to that external body in order to effect a correction.
Right of Erasure (right to be forgotten):
Under GDPR you have the right to request your personal data is removed, this, however, does not provide an absolute “right to be deleted”.
If you feel you have suitable grounds to request Right of Erasure then you have the option to request this by providing as much supporting evidence to AMLCERT. Individuals have the right to suppress or block the processing of personal data, this right can be exercised where:
· You contest the accuracy of the personal data
· You feel there are legitimate grounds to enable the restriction of processing
· The information held is no longer necessary to the purposes for which they were collected.
Should you wish to suppress or block any personal data you will be required to fill in as much information below (included any evidence or screen shots of where you believe the data to be held and specifically what you require to be suppressed / removed).
Opting out of Email:
You can choose to opt out of receiving email from AMLCERT at any time. You have a number of options for opting out of the different services we offer.
For any of the available options, if you wish to opt out with respect to more than one email address, you must provide a separate request for each email address.
Email Messages Sent from AMLCERT as the Marketer:
AMLCERT also markets some of its own products and services by email. When AMLCERT is the marketer, we will always be identified as such in the mailing's content. Every email sent from AMLCERT will include appropriate unsubscribe instructions. To opt out of all email marketing messages from AMLCERT, you may click the unsubscribe link found at the bottom of our marketing emails.
AMLCERT’s Permission-Based Email Database:
AMLCERT maintains a database of permission-based email addresses that are used by AMLCERT and other marketers to send you offers of interest via email. To opt out of this database, send an email to [email protected] from the email address you wish to unsubscribe. Please clearly state in your email, "Unsubscribe me from AMLCERT’s email database." Your request will be processed in a timely manner. Once your request has been processed, your email address will no longer be used by AMLCERT or be shared with third parties. If you opt out of AMLCERT’s email database, you may continue to receive email messages from other marketers with which you have opted in. Additionally, opting out with a partner of AMLCERT does not opt you out of AMLCERT’s email database. If you have received an email from a client of AMLCERT, please contact that client directly to be removed from their database.
Opting out of Direct Mail:
As a responsible company we respect your choice to not receive direct mail advertising from us. AMLCERT subscribes to and suppresses any name and address on the MPS mail preference service file from its direct mail marketing lists.
Contacting AMLCERT to Opt Out:
you also may contact AMLCERT directly to be suppressed from AMLCERT’s marketing lists. Opting-out of direct mail marketing from AMLCERT will only stop mailings that use AMLCERT’ s marketing data. You may continue to receive direct mail as advertisers often work with multiple data providers.
You can contact AMLCERT by sending your complete name (including any name variations), mailing address, complete telephone number (including area code), and email address to [email protected] or to the below postal address.
AMLCERT Business Solutions Limited
Ty Meridian,
Cardiff Gate Business Park,
Malthouse Avenue,
Pontprennau,
Cardiff,
CF23 8AU
Please specify if you wish to be removed from mailing lists, telemarketing lists or email marketing lists. If you move or change your name, you will need to opt-out again with your new address or name. When you opt-out with AMLCERT, your information is not deleted from the AMLCERT marketing database. AMLCERT will mark your record as “Do Not Mail” for a period of 5 years. If AMLCERT removed your information completely, we would have no way to know your mail preference.
Opting out of Telemarketing:
Responsible marketing companies respect your choice to not receive telemarketing calls. DMA members, as a condition of membership, are required to suppress the phone numbers of companies who have registered on the corporate telephone preference service (CTPS). As a DMA member, AMLCERT subscribes to and suppresses any phone number on the corporate telephone preference service (CTPS) file from its telemarketing lists.
Corporate Telephone Preference Service (CTPS):
If you are a UK business you can register your opt-out preference online at http://corporate.ctpsonline.org.uk/
Contacting AMLCERT to opt out:
You may also contact AMLCERT directly to be suppressed from AMLCERT’s telemarketing lists. Opting-out of telemarketing from AMLCERT will only stop telemarketing that uses AMLCERT’s marketing data. You may continue to receive telemarketing calls as advertisers often work with multiple data providers. You can contact AMLCERT by sending your complete name (including any name variations), mailing address, complete telephone number (including area code), and email address to [email protected] or to the below postal address.
AMLCERT Business Solutions Limited
Ty Meridian,
Cardiff Gate Business Park,
Malthouse Avenue,
Pontprennau,
Cardiff,
CF23 8AU
Please specify if you wish to be removed from mailing lists, telemarketing lists or our email marketing database. If you move or change your name, you will need to opt-out again with your new address or name. When you opt-out with AMLCERT, your information is not deleted from the AMLCERT marketing database. AMLCERT will mark your record as “Do Not Mail” for a period of 5 years. If AMLCERT removed your information completely, we would have no way to know your telemarketing preference.
Right to Transparency of processing:
You have the right to request information on how your data is used and the basis of use. This information can be found within the privacy policy which is available on all AMLCERT websites.