You have the right to request confirmation of whether we process specific Personal Data related to you, as well as the right to receive a copy of such Personal Data along with additional information about how and why we use it. It is important to note that the protections provided by the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) differ. Under the GDPR, you have access to all Personal Data processed by the controller, while the CCPA's "Access Right" applies only to Personal Information collected within the preceding 12 months of the request. Once we receive your request, we will carefully assess its validity and appropriateness. Subsequently, we will provide you with confirmation of the processing, a copy of the requested Personal Data, or a description of the Personal Data and the categories of data processed. We will also disclose the purpose for which such data is being held and processed, as well as details about the source of any Personal Data not provided by you. We are committed to responding to your request within the timeframe required by law. Please refer to the "Response Timing and Format" section below for additional information on this matter.
The Company is legally obliged to honor requests for the deletion of Personal Data under the following circumstances: When the data is no longer necessary for its original purpose, and there are no other lawful grounds for continued processing. When the lawful basis for processing is based on the data subject's consent, and the consent is withdrawn. When the data subject exercises their right to object to the Company's processing of their Personal Data, and there are no compelling legitimate reasons for the data to be processed. When the Personal Data is being processed unlawfully. When the erasure of Personal Data is necessary to comply with applicable laws. When the Company has shared Personal Data with third parties, the data subject has the right to request that the Company informs those third parties about the need to erase the information. It is important to note that the right to data erasure is not absolute. Even if a data subject falls within one of the categories described above, the Company may reject the request and continue processing the data in accordance with applicable laws if: The processing is necessary to fulfill legal obligations. The processing is necessary to establish, exercise, or defend legal claims or for scientific research purposes, among others. The processing is necessary to fulfill contractual obligations between the data subject and the Company. The processing is necessary to detect security incidents, protect against malicious or illegal activity, or prosecute those responsible for such activity. The processing is necessary for debugging purposes to identify and rectify errors that impair the intended functionality. The processing is solely for internal purposes that are reasonably aligned with the data subject's expectations based on their relationship with the Company.
In accordance with the legal basis of our legitimate interests and in relation to the processing of Personal Data, including direct marketing, you have the right to object to our processing based on such reasons. However, if we receive your objection, we may still be authorized to continue processing the Personal Data if: 1. our legitimate interests for processing outweigh your rights, interests, and freedoms; 2. the processing of such Personal Data is necessary to establish, exercise, or defend a legal claim or right, etc., as permitted by applicable laws and regulations.
It is the responsibility of the Company to ensure the accuracy of all Personal Data it possesses and utilizes concerning a data subject. If such data is found to be incorrect or inaccurate, the data subject has the right to request that the Company updates the information to ensure its accuracy. Furthermore, if the Company has shared inaccurate information about a data subject with third parties, the data subject also has the right to request that the Company informs those third parties about the need to update the information accordingly.
In the event that the Personal Data we hold is found to be inaccurate, you have the right to request that we update the information to ensure its accuracy. Additionally, if we have shared incorrect information about you with a third party, you also have the right to request that we inform those third parties about the need to update the relevant information.
A data subject has the right to restrict the processing of their Personal Data by the Company, under certain circumstances. The Company's processing activities may be limited if any of the following conditions are met: The accuracy of the data is contested by the data subject. The processing is deemed unlawful, and the data subject requests restriction instead of erasure. The Company no longer requires the data for its original purpose, but the data is still necessary for the establishment, exercise, or defense of legal rights. There are overriding grounds that need to be considered in relation to an erasure request.
You have the right to request the transfer or "porting" of your Personal Data held by us to a third-party entity. However, please be aware that the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) have different requirements regarding this right. Therefore, we will handle your request in accordance with the applicable jurisdiction you are subject to.
In accordance with the California Consumer Privacy Act (CCPA), you are entitled to exercise your rights without facing any form of discrimination. This means that we are prohibited from denying you goods or services, charging you different fees, offering discounts or benefits, or imposing penalties based on your decision to exercise your rights. You should not receive a different price or rate for goods or services as a result of exercising your rights. However, it is important to note that the CCPA allows for the establishment of programs that provide financial incentives, and you have the option to voluntarily participate in such programs.
We are committed to promptly responding to verifiable consumer requests, aiming to provide a response within 30 days from the receipt of the request, in accordance with the GDPR, and within a timeframe of 10-45 days from receipt of the request, as per the CCPA. If additional time is needed to process the request, we will notify you in writing, explaining the reason for the extension and providing an estimated timeframe. If we are unable to comply with a request, we will provide an explanation for such inability, if applicable. For data portability requests, we will choose a format that allows for the easy utilization and transmission of your Personal Data between different entities, ensuring minimal hindrance. It's important to note that under the CCPA, your rights apply only to Personal Information collected within the previous 12 months, and you have a limit of submitting no more than two requests within a 12-month period. Please be aware that this Policy exclusively pertains to your rights regarding the processing of Personal Data/Personal Information, as defined by the relevant applicable law, carried out by our organization.
Fill in the Data Subject Request form .
Send an email to: firstname.lastname@example.org.