Right to be informed
Individuals have the right to be informed about the collection and use of their personal data. The right to be informed is a key transparency requirement under the GDPR. You must provide individuals with information including your purposes for processing their personal data, your retention periods for that personal data, and who it will be shared with.
This information must be provided at the time you start collecting their personal data from them and is typically included in your privacy policy.
Full Fabric allows you to set up and manage your privacy policy. It then requires users to accept your privacy policy at the point of data collection. This could be at sign up, when registering for an event, or when submitting a form on a landing page.
Right of access
Individuals have the right to access their personal data and supplementary information and confirmation that their data is being processed, or confirmation of the processes highlighted in your privacy policy.
Full Fabric allows you to export profile and application data as a PDF, which you can then make available to the data subject.
Right to rectification
The GDPR includes a right for individuals to have inaccurate personal data rectified, or completed if it is incomplete (although this will depend on the purposes for the processing).
Once you have received a request for rectification, you can use Full Fabric to update the relevant data.
Right to erasure
The GDPR introduces a right for individuals to have personal data erased, also known as the right to be forgotten. This right is not absolute and only applies in certain circumstances.
Full Fabric supports the ability to:
Delete all data associated with a profile
Delete specific data associated with a profile and mark the profile as 'forgotten'
Right to restrict processing
Individuals have the right to request you to restrict the processing of their personal data if:
They contest/disagree with that data's accuracy
The data has been unlawfully processed
The individual has objected to processing and the request is under review.
Full Fabric supports the ability to restrict access to a specific profile.
Right to data portability
The right to data portability lets individuals access and transfer their personal data between services and allows:
Individuals to obtain and reuse their personal data for their own purposes across different services
Individuals to move, copy or transfer personal data easily from one environment or platform to another in a safe and secure way.
Individual profile and application data can be exported in machine readable CSV format, either by the applicants from the Student Portal or by the staff from the Full Fabric backend.