YOUR PERSONAL DATA AND YOUR RIGHTS
Accessing Your Personal Data
You may request access at any time to a copy of the personal data we hold about you. Any such request should be submitted to us in writing and sent to firstname.lastname@example.org. We will need to verify your identity in such circumstances and may request more information or clarifications from you if needed to help us locate and provide you with the personal data requested.
There is usually no charge applied to access your personal data (or to exercise any of the other rights). However, if your request is clearly unfounded, repetitive or excessive, we may charge a reasonable fee. Alternatively, we may refuse to comply with your request in these circumstances.
Right of Restriction
You may restrict us from processing your personal data in any of the following circumstances:
- you have contested the accuracy of the personal data we hold on record in relation to you or for a period of time to enable us to verify the accuracy of the personal data;
- the processing of your personal data is unlawful and you request the restriction of use of the personal data instead of its erasure;
- we no longer require your personal data for the purpose of processing but you require this data for the establishment, exercise or defence of legal claims; or
- where you have contested the processing (under Article 21(1) of the GDPR) pending the verification of our legitimate grounds.
Corrections or Erasure (Right to Rectification and Right to Be Forgotten).
If we hold personal data concerning you which are no longer necessary for the purposes for which they were collected or if you withdraw consent for us to process your personal data, you can request the deletion of this personal data. We will retain minimal personal data in order to comply with this request. This right, however, will not apply where we are required to process personal data in order to comply with a legal obligation or where the processing of this information is carried out for reasons of public interest in the area of public health. If the personal information we hold about you is inaccurate, you may request to have your personal information updated and corrected. To do so at any time, please contact us by email at email@example.com
Your Right To Object
You have the right to object to the processing of your personal data at any time:
- for profiling to the extent it relates to direct marketing;
- for direct marketing purposes;
- where we process your personal data for the purposes of legitimate interests pursued by us, except where we can demonstrate compelling legitimate grounds for this processing which would override your interests, rights and freedoms or in connection with the enforcement or defence of a legal claim.
To exercise your right to object at any time, please email firstname.lastname@example.org.
Should you object, we will no longer process your personal data for these purposes unless doing so is justified by a compelling legitimate ground as described above. We will retain minimal personal data in order to comply with this request. For more information about our marketing practices, please see the Marketing Communications section below.
Where we process your personal data by automated means (i.e., not on paper) and this processing is based on your consent or required for the performance of a contract between us, you have the right to request from us a copy of your personal data in a structured, commonly used machine-readable format and, where technically feasible, to request that we transmit your personal data in this format to another controller.
Profiling is an automated form of processing of personal data often used to analyse or predict personal aspects about an individual person. This could relate to a person’s performance at work, economic situation, health, personal preferences, reliability, behaviour, location or movements. An example of this would be where a bank uses an automated credit scoring system to assess and accept/reject a loan application.
You have the right to be informed if your personal data will be subject to automated decision making, including profiling. You also have the right not to be subject to a decision based solely on automated process, including profiling, where that decision impacts on your legal rights. There are some exceptions to this rule, where, for example, the decision is necessary in connection with the performance of a contract between us, is authorised by law or where you have given your explicit consent to this automated processing. In this case, however, we do not engage in profiling or automated processing for profiling purposes.
The rights described in this section are personal rights and are exercisable only by the individual person (or data subject) concerned.