{{recruiter}},
On {{dates}} the attached messages were sent to my private email address. This email was unsolicited commercial email and, since we have never had any dealings previously, was unlawfully sent.
In particular, it was contrary to section 22 of The Privacy and Electronic Communications (EC Directive) Regulations, (SI2426/2003) ["PECR"]. In addition, this action breaches your obligations under the Data Protection Act 1998, as there was no consent to process the personal data comprised by the personal email address. As the affected data subject I require you to:
- Confirm whether you are registered as a data controller under the Data Protection Act 1998, and if so, explain how this activity complies with your registration.
- Cease any processing or sale of my data for all purposes, including direct marketing.
- Provide a copy of all data you hold which relates to me.
- Erase any personal data you hold about me.
- Detail any reasons you believe that you have not breached section 22 of PECR.
- Detail any reasons you believe that you have not breached the Data Protection Act.
- Confirm to me in writing where you obtained the data from and on what terms.
- Provide me with a complete list of companies, individuals, etc, that you have shared my data with and on what terms.
- Provide me with undertakings and assurances with regards to steps you are taking to cleanse all your data for future use and your future conduct.
- Offer a suitable level of compensation for your actions in breaching the law to date.
I put you on notice that I may seek compensation for the unlawful collection, and processing of my data under the Data Protection Act 1998, and PECR. I may also file a complaint with the Information Commissioner's Office.
If you do not respond within 21 days of the date of this communication, with suitable response, undertakings of future conduct and agree a suitable settlement I reserve the right to start legal proceedings in the small claims court for damages.