Legal rights you may exercise over your personal data are briefly described below:
Right to request access
You have the right to ask for a copy of personal data we hold about you and to check we are dealing with it lawfully by asking for information about how we process it.
Right to request correction
You have the right to ask us to correct incomplete or inaccurate information about you.
Right to request erasure
You have the right to ask us to delete or remove your personal data.
Right to object to processing
If we are relying on a legitimate interest to process your personal data, you have the right to object. Our legitimate interest in processing your information may override your rights and freedoms. You also have the right to object to us processing your personal data for direct marketing purposes.
Right to withdraw consent
If we are processing your personal data on the basis of your consent, you can withdraw your consent at any time.
Right to request restriction of processing.
You can ask us to suspend processing of your personal data where: (a) you contest the data’s accuracy; or (b) processing of your data is unlawful but you do not want us to erase it; or (c) we no longer need your data but you need us to hold it for a legal claim; or (d) you object to our processing of your data and we are checking whether the legitimate interest we rely on overrides your rights.
Right to request transfer
You have the right to ask us to transfer your personal data to you, or to a third party. This right applies only to automated information you gave us consent to use, or where we used the information to perform a contract with you.
Right to object to automated decision-making
You have the right not to be subject to automated decision-making, including profiling, which has legal or other significant effects on you. This right does not apply when the automated decision is necessary for entering into or performing a contract with you, or is based on your explicit consent.
How to exercise your rights
To exercise your rights email firstname.lastname@example.org. As a security measure we will ask you to verify your identity. If a third party is making a request on your behalf we will ask them to prove that they have your permission to act for you.
We may contact you to ask you for further information to help you exercise your legal rights, or to speed up our response. We will try to respond to requests within one month and we will let you know if we need to take longer, for example because your request is complicated. We may have an overriding lawful basis for processing your personal data, or certain exemptions may apply. If we refuse your request we will explain why.