GBG (The Data Controller) will assess an individual’s right in relation to their request “To Be Forgotten” and if upheld personal data will be suppressed from our Products & Services. The GBG Suppression List will also be used where an individual has requests restriction or processing or rectification, so that in the event further personal data is passed to GBG to process from a new data supplier, then we can honour your initial request to cover new data sources.
We appreciate this could be confusing, therefore we have documented the approach we apply below, so we can be as transparent with you as possible.
Before we explain further, it’s important to highlight GBG only share your personal data with organisations (our customers) who have a relationship with you or where they have a lawful reason. Our customer use of our Products & Services includes the tracing of individuals, verification and/or validation of the identity of individuals for the purposes of, but not limited to, anti-money laundering regulations, national security, crime prevention and detection, anti-fraud processes, asset recovery and asset reunification.
GBG source your personal data from data suppliers. These organisations typically provide it to a number of companies other than GBG, so it is also best to ensure your data is suppressed at source.
It is important to note GBG, the Data Supplier and GBG’s Customers are separate independent Data Controllers. This means GBG cannot control or influence how they choose to respond if you have or do make a data subject rights request to them.
GBG will action the suppression as quickly as possible, although it can take up to one month for your personal details to no longer be available for customers to access due to the data build process used.
GBG’s Suppression List will match based on Name & Postcode, with additional attributes that we are aware of, such as Landline/Mobile/Email/Date of Birth also recorded. This will be an exact match, so if Kathryn Jones is recorded and we receive a Kate Jones at the same address, we would then only introduce Kate Jones to the database, as there is no way for us to determine Kathryn and Kate are the same person.
If you wish to add other forenames to the Suppression List by which you are known, then we must be notified. These must be similar or there must be other evidence (such as a passport or driving licence to prove your identity) so we are confident it is for the same person, e.g. Kathryn could be Kate, Katy, Katie, Kat, Kath or Kathy, or your name may be Alison Kathryn, but you are known by your middle name.
In these circumstances please complete our webform https://www.gbgplc.com/contact/general-enquiry/individual-data-enquiry/ or email firstname.lastname@example.org with the specific requirement for us to action.
We sometimes receive requests from individuals with only an email address. Without further information (name and address), we are unable to add this to GBG’s Suppression List.
GBG’s Suppression List is applied to the following data GBG host. This includes:
GBG operate a model of continuous improvement as part of our privacy management programme, so where we feel we can make further enhancements, we will.