Data Protection Complaints Procedure

Ascom (UK) Ltd

1. Purpose

This procedure sets out how Ascom UK handles complaints relating to the processing of personal data, in compliance with applicable UK data protection laws.

It applies to all complaints in connection with personal data processing activities carried out by or on behalf of Ascom UK. 

2. Complaints process and acknowledgement 

Individuals may raise a data protection complaint to Ascom UK by email to: dpo@ascom.com

Your complaint will be acknowledged within 30 days of receipt. 

The acknowledgement will confirm receipt of your complaint and outline the next steps. We will also, where reasonably possible, provide indicative timelines to provide a substantive response to your complaint. You may be asked to provide identification documents (i.e. passport, national ID card or driving license) and further details to assist us in properly understanding and assessing the nature of your complaint.

3. Investigation 

We will then take the following steps:

  • assess and categorise the complaint;
  • initiate appropriate enquiries without undue delay;
  • engage relevant internal stakeholders (as necessary); and
  • ensure the complaint is handled confidentially.

We will keep the complainant up to date regarding the progress of the complaint where appropriate. 

4. Response and outcome

We will provide a reasoned outcome without undue delay explaining the findings of the investigation, whether data protection law has been complied with and whether any remedial actions are required (if applicable). 

Where appropriate, corrective actions may include rectification or deletion of data, changes to internal processes or staff training/further action.

5. Right to complain to Information Commissioner’s Office (“ICO”)

In the event that you remain dissatisfied with our response to your complaint, you have the right to escalate your complaint to the ICO. Details can be found on the ICO’s website. 

6. Record keeping

We will maintain records of complaints received, acknowledgement dates, investigative steps undertaken, outcomes and any subsequent actions taken. 

Records will be retained in accordance with Ascom’s data retention policy.