5. Your rights in relation to EU Personal Data
You have the following rights regarding your EU Personal Data that we hold:
(1) Right of access
You can request details of your EU Personal Data that we hold. We will confirm whether we are processing your EU Personal Data and we will disclose supplementary information including the categories of data, the sources from which it originated, the purpose and legal basis for the processing, the expected retention period, and the safeguards regarding data transfers to non-EEA countries, subject to the limitations set out in applicable laws and regulations. We will provide you free of charge with a copy of your EU Personal Data, but we may charge you a fee to cover our administrative costs if you request further copies of the same information.
(2) Right of correction
We will comply with your request to correct incomplete or inaccurate parts of your EU Personal Data, although we may need to verify the accuracy of the new information you provide us.
(3)Right to be forgotten
At your request, we will delete your EU Personal Data promptly if:
-
it is no longer necessary to retain your EU Personal Data;
-
you withdraw the consent which formed the basis of your EU Personal Data processing;
-
you object to the processing of your EU Personal Data and there are no overriding legitimate grounds for such processing;
-
the EU Personal Data was processed illegally; or
-
the EU Personal Data must be deleted for us to comply with our legal obligations.
We will decline your request for deletion if processing of your EU Personal Data is necessary:
-
to comply with our legal obligations;
-
in pursuit of a legal action;
-
to detect and monitor fraud; or
-
for the performance of a task in the public interest.
(4) Right to restrict processing of your EU Personal Data
At your request, we will limit the processing of your EU Personal Data if:
-
you dispute the accuracy of your EU Personal Data;
-
your EU Personal Data was processed unlawfully and you request a limitation on processing, rather than the deletion of your EU Personal Data;
-
we no longer need to process your EU Personal Data, but you require your EU Personal Data in connection with a legal claim; or
-
you object to the processing pending verification as to whether an overriding legitimate ground for such processing exists.
We may continue to store your EU Personal Data to the extent required to ensure that your request to limit the processing is respected in the future.
(5) Right to data portability
At your request, we will provide you free of charge with your EU Personal Data in a structured, commonly used and machine readable format, if:
-
you provided us with EU Personal Data;
-
the processing of your EU Personal Data is based on your consent or required for the performance of a contract; or
-
the processing is carried out by automated means.
(6) Right to object
Where we process your EU Personal Data based upon our legitimate interest (or that of a third party), you have the right to object to this processing on grounds relating to your particular situation if you feel it impacts on your fundamental rights and freedoms. We will comply with your request unless we have compelling legitimate grounds for the processing which override your rights and freedoms, or where the processing is in connection with the establishment, exercise or defense of legal claims.
(7) Right not to be subject to decisions based solely on automated processing
You will not be subject to decisions with a legal or similarly significant effect (including profiling) that are based solely on the automated processing of your EU Personal Data, unless you have given us your explicit consent or where they are necessary for a contract with us.
(8) Right to withdraw consent
You have the right to withdraw any consent you may have previously given us at any time.
(9) Right to complain to a supervisory authority
If you are not satisfied with our response, you have the right to complain to or seek advice from a supervisory authority and/or bring a claim against us in any court of competent jurisdiction.
If you wish to contact us in connection with the exercise of your rights listed above, please email us at the email address listed in section 13. Contact Us of this policy. We will respond to your written request as soon as possible and no later than 30 days from receiving it.
Unless stated otherwise, we will not charge you any fee in connection with the exercise of your rights. In so far as it is practicable, we will notify the recipients of your EU Personal Data of any correction, deletion, and/or limitation on processing of your EU Personal Data.
Please note that if you decide to exercise your rights under sub-sections (3), (4), (5), (7), and (8), depending on our response, you may not be able to take full advantage of all of our benefits and services from that point on.