Your Data Subject Rights

Right of Access (Article 15)

You have the right to obtain confirmation as to whether or not your personal data is being processed, and if so, to access that data and receive the following information:

• The purposes of the processing
• The categories of personal data concerned
• The recipients or categories of recipients
• The retention period or criteria used to determine it
• Your rights regarding the data
• The source of the data if not collected directly from you
• Whether automated decision-making, including profiling, is being used

How to exercise: Submit a request through our GDPR portal or contact us at [email protected]. We will respond within one month.

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete personal data completed. If we have shared your data with third parties, we will inform them of the correction where possible.

How to exercise: Contact us at [email protected] or use our GDPR portal. You can also update your information directly in your account settings if applicable.

Right to Erasure - "Right to be Forgotten" (Article 17)

You have the right to request the deletion of your personal data in certain circumstances, including when:

• The data is no longer necessary for the original purpose
• You withdraw your consent and there is no other legal basis
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

Note: We may not be able to delete your data if we are required to retain it for legal, regulatory, or contractual reasons.

How to exercise: Submit a deletion request through our GDPR portal or contact us at [email protected].

Right to Restrict Processing (Article 18)

You have the right to restrict the processing of your personal data in certain circumstances, including when:

• You contest the accuracy of the data
• The processing is unlawful, but you prefer restriction over erasure
• We no longer need the data, but you need it for legal claims
• You have objected to processing pending verification

When processing is restricted, we will only process your data with your consent, for legal claims, to protect rights, or for important public interest reasons.

How to exercise: Contact us at [email protected] or use our GDPR portal.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. This right applies when:

• Processing is based on consent or contract
• Processing is carried out by automated means

We will provide your data in a commonly used format (such as JSON or CSV) within one month of your request.

How to exercise: Submit a request through our GDPR portal or contact us at [email protected].

Right to Object (Article 21)

You have the right to object to the processing of your personal data in certain circumstances:

• Processing based on legitimate interests: You can object at any time, and we will stop processing unless we can demonstrate compelling legitimate grounds.
• Direct marketing: You can object to processing for direct marketing purposes at any time, and we will stop processing immediately.
• Scientific/historical research or statistics: You can object unless processing is necessary for public interest tasks.

How to exercise: Contact us at [email protected] or use our GDPR portal. You can also unsubscribe from marketing emails using the link in the email.

Rights Related to Automated Decision Making and Profiling (Article 22)

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. This right does not apply if the decision:

• Is necessary for entering into or performing a contract
• Is authorized by law
• Is based on your explicit consent

Currently, we do not use automated decision-making that produces legal effects or significantly affects you. If this changes, we will inform you and provide appropriate safeguards.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

How to exercise: You can withdraw consent by:

• Updating your cookie preferences through our cookie banner
• Contacting us at [email protected]
• Using our GDPR portal

How to Exercise Your Rights

To exercise any of your rights, you can:

• Submit a request through our secure GDPR portal
• Email us at [email protected]
• Contact our EU/UK GDPR representatives (see Privacy Policy)

We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by up to two additional months, and we will inform you of the extension.

Identity Verification: To protect your privacy, we may need to verify your identity before processing your request. We may ask for additional information to confirm you are the data subject.

Right to Lodge a Complaint

If you believe we have not handled your request appropriately or have concerns about how we process your personal data, you have the right to lodge a complaint with a supervisory authority, particularly in the EU/EEA/UK member state where you live, work, or where the alleged infringement occurred.

However, we encourage you to contact us first so we can address your concerns directly. You can reach us at [email protected] or through our GDPR portal.