Where the European Union’s General Data Protection Regulation 2016/679, or GDPR, applies, in certain circumstances and subject to data processing agreements, you have rights in relation to your personal information held. Outlined below are those rights and how to exercise those them. Please note that we will require you to verify your identity before responding to any requests to exercise your rights by providing details only known to the account holder. Please note that for each of the rights below we may have valid legal reasons to refuse your request, in such instances we will let you know if that is the case.
Access
You have the right to know whether we process personal information about you, and if so, to access the data held as well as certain information about its use.
Portability
You have the right to receive a subset of the personal information you provided us if we process it on the legal bases of our contract with you or with your consent. This will be done in a structured, commonly used and machine-readable format and you have the right to request transfer such personal information to another party. If this is desired, please ensure you detail that party and note that we can only do so where it is technically feasible. We are not responsible for the security of the personal information or its processing once received by the third party.
Correction
You have the right to require corrections to any personal information held about you that is inaccurate. When requesting a correction, please explain in detail why you believe the personal information we hold is inaccurate or incomplete. Please note that while we assess whether the personal information we hold about you is inaccurate or incomplete, you may exercise your right to restrict our processing of the applicable data as described below.
Erasure
You may request that we erase any held personal information in the following circumstances:
- where you believe it is no longer necessary for us to hold the personal information;
- when we are processing it on the basis of your consent and you wish to withdraw consent;
- when we are processing your data on the basis of our legitimate interest and you object to such processing;
- when you no longer wish us to use your data to send you marketing; or
- you believe we are unlawfully processing your data.
Please provide as much detail as possible regarding your reasons for the request. This will assist us in determining whether you have a valid basis for erasure.
Restriction of Processing to Storage Only
You have a right to require us to stop processing the personal information we hold about you other than for storage purposes in the following circumstances:
- You believe the personal information is not accurate for the period it takes for us to verify whether the data is accurate;
- We wish to erase the personal information as the processing we are doing is unlawful but you want us to simply restrict the use of that data;
- When we no longer need the personal information for the purposes of the processing but you require us to retain the data for the establishment, exercise or defense of legal claims; or
- You have objected to us processing personal information we hold about you on the basis of our legitimate interest and you wish us to stop processing the personal information while we determine whether there is an overriding interest in us retaining such personal information.
Objection
You have the right to object to our processing of data about you. You will need to provide details so that we can determine if there is a compelling overriding interest in us continuing to process such data or we need to process it in relation to legal claims.
You also have the right to object to our processing of data about you in order to send you marketing information, including where we build profiles for such purposes and we will stop processing the data for that purpose.
Withdrawal of Consent
You have the right to withdraw consent regarding the use of your personal information where we rely on your consent as a legal basis to justify using your personal data.