In order to give you more control regarding the processing of personal data, you have various rights at your disposal. These rights are inter alia discussed and provided in articles 15-22 GDPR. You have the following rights:Right of access to the processed personal data (art. 15 GDPR)
You have the right to obtain our confirmation as to whether or not your personal data is being processed, and, where that is the case, to obtain access to the personal data and the following information:
- The purposes of the processing
- The categories of personal data concerned
- The recipients or categories of the recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
- Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
- The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
- The right to lodge a complaint with a supervisory authority
- The existence of automated decision-making
In the event that we cannot provide you access to the personal data (for example in the event of a legal obligation to restrict the data subject from access to such information), we shall inform you of the reasons for such an inability.
Furthermore, you can also request a copy of the personal data undergoing processing free of charge. Please note however, that we are entitled to charge reasonable fees based on administrative costs for each additional copy you request. The right to be forgotten or to request erasure of personal data (art. 17 GDPR)
In certain instances, you may request us to erase your personal data. Be aware however that under such circumstance, we might not be able to fully fulfil our duties or obligations any longer. Furthermore, we ask you to bear in mind that the 'right to be forgotten' is not an absolute right. We shall have the right to continue to store your personal data, inter alia, in the following cases:
- where such storage is necessary for the performance of a contract to which you are a contracting party,
- where such storage is necessary for compliance with a legal obligation, or
- where such storage is necessary for the establishment, exercise or defence of legal claims.
We shall inform you of the reasons for the storage of your personal data in our response to your request of erasure. The right to rectification (art. 16 GDPR)
In the event that your personal data are inaccurate, dated or incomplete, you can request us to rectify or complete your personal data. The right to data portability (art. 20 GDPR):
Under certain conditions, you shall also have the right to request us to transmit the personal data you provided us with and for which you have given us your consent, to another controller. We shall transmit such personal data directly to the new controller in so far as such transmission is technically feasible. Right to restriction of processing (art. 18 GDPR)
You shall have the right to obtain the restriction of processing where one of the following applies:
The right to object (art. 21 GDPR):
- You contest the accuracy of the personal data (in such an event the use of the personal data shall be limited for a period enabling us to verify the accuracy of the personal data);
- The processing of the personal data is unlawful;
- We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
- Pending the verification whether the legitimate grounds for the processing of the personal data override those of the data subject, you may request us to limit the usage of the personal data.
You have the right to object, on grounds relating to your particular situation, the processing of your personal data in case that such processing is done for the performance of a task carried out in the public interest or for the purposes of the legitimate interests pursued by us. In such an event, we shall no longer process the personal data unless:
Automate individual decision-making, including profiling (art. 22 GDPR):
- there are compelling legitimate grounds for processing which override your interests, rights and freedoms, or
- the processing of the personal data is done for the establishment, exercise or defence of legal claims.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or which may significantly affect you in a similar manner.
Such right can however not be invoked in the following circumstances:
The right to withdraw your consent (art. 7 AVG):
- If the decision is authorised by law (for example: in order to prevent tax fraud);
- If the decision is based on the data subject's explicit consent;
- If the decision is necessary for entering into, or performance of, a contract between the data subject and the data controller (note that in such instances, we shall always make a case by case assessment of whether less privacy intrusive methods can be applied to facilitate the entry into, or performance of the contract).
Where the processing of personal data is based on consent, you shall have the right to withdraw such consent at any time through a simple request.