GDPR Data Requests
Data protection law, including the GDPR in the EU and EEA, the UK GDPR and the Swiss Federal Act on Data Protection, gives you rights over your personal data. This page explains how to exercise them with Syott Limited ("Syott").
Is Syott the right organisation to ask?
Syott is the controller of personal data about visitors to our website, people who contact us, job candidates and the contacts of our customers. You can send requests about that data to us.
If your data is in Syott HR, Syott Recruit or Syott Company OS because your employer or another organisation uses our products, that organisation is the controller, so please send your request to it. If you send it to us, we'll refer it to that organisation and help it respond.
What you can ask for
- Access — a copy of your personal data and information about how we use it.
- Correction — fixing data that is inaccurate or incomplete.
- Erasure — deleting your data where we have no good reason to keep it.
- Restriction — limiting how we use your data, for example while we check its accuracy.
- Objection — stopping processing that is based on our legitimate interests, and stopping direct marketing at any time.
- Portability — receiving the data you gave us in a structured, machine-readable format.
- Withdrawal of consent — for processing based on your consent, such as optional cookies.
Our Privacy Policy explains what we collect and why.
How to make a request
Email privacy@syott.co or write to us at the address below. You don't need to use a form. To help us find your data quickly, tell us:
- which right you want to exercise;
- the email address or other details you used with us, for example on a form, in a job application or in the chat; and
- how you'd like us to reply.
Someone else, such as a lawyer, can make a request on your behalf if they send us your written authorisation.
Some things don't need a request at all: you can change your cookie choices at any time through Cookie Settings in the footer of our website.
Confirming your identity
To protect your data, we need to be sure that a request comes from you. Usually we do this by writing to the email address we already hold for you. We ask for more information only when we really need it, and we use it only to verify your request.
Timing and cost
We respond within one month of receiving your request. If a request is complex, or you've sent several, we may need up to two further months; if so, we'll tell you why within the first month.
Making a request is free. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse it, and we'll explain why.
When we can't do everything you ask
Sometimes we can't fully meet a request, for example when the law requires us to keep certain records, when we need data to establish or defend legal claims, or when responding would reveal personal data about someone else. If that happens, we'll tell you what we can't do and why.
If you're not satisfied
Please tell us first, so that we can try to put things right. You can also complain to a data protection authority. Syott's lead supervisory authority is the Data Protection Commission in Ireland (www.dataprotection.ie), and you can also contact the authority in the country where you live or work. In the UK, that is the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner. You may also have the right to take the matter to court.
Contact
Syott Limited, Privacy, Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland. Email: privacy@syott.co.