Your rights under the GDPR
You have certain rights in relation to your personal data.
Your rights in relation to your own personal data include the following:
The right to request access to your personal data. You can request a copy of the personal data that we hold about you.
The right to have your personal data rectified if it is inaccurate. You can also supplement incomplete personal data, whereby the purposes of the processing should always be taken into account.
The right to request the erasure of your personal data where:
Your personal data are no longer necessary for the purposes for which we collected or processed them; or
you withdraw your consent where the collection of your personal data was based on your consent and there are no other legal grounds for doing so; or you object to the processing of your personal data and we have no overriding legitimate basis for the processing; or your personal data is processed in an unlawful manner; or your personal data must be erased to comply with a legal obligation.
The right to object to the processing of your personal data. We adhere to your requirement; unless we have an overriding legitimate interest in processing or we need to continue processing your personal information to establish, exercise or defend a legal claim.
The right to restrict the processing of your personal data when:
the accuracy of your personal data is contested by you for the period in which we need to verify the accuracy of the personal data; or
the processing is unlawful and you oppose the erasure of your personal data and request a restriction of processing; or
we no longer need your personal data for the purposes of processing, but your data is still required by you for certain legal claims; or
you have objected to the processing; namely for the period in which we verify whether there are compelling legitimate reasons.
The right to data portability. You can request that this personal information be sent to a third party, where practicable. You only have this right if it concerns personal data that you have made available to us and the processing is dependent on your consent or is necessary for the performance of a contract between you and us and the processing is carried out using automated methods.
You also have the right to lodge a complaint with your national data protection authority.
You do not have to pay a fee to access your personal data (or to exercise any of your rights described in this notice). However, we may charge a fee if your request proves unjustified, repetitive or disproportionate.
We may need specific information from you so that we can verify your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request so that we can process it as quickly as possible. You can exercise various rights through the personal information section of your account. To exercise your other rights, you can make a request by clicking here.
Use of data
We only use your personal data when permitted by law.
According to the GDPR, we use your personal data in one or more of the following cases:
Where we need to perform the contract we are about to enter into or have entered into with you
Where it is necessary for our legitimate interests (or those of a third party) and those interests are not overridden by your interests and fundamental rights.
When we need to comply with a legal or regulatory obligation
With your consent
International transfers
Your personal data may be transferred to and/or held in countries outside the EEA for the purposes set out in this notice. When we store your personal information in countries outside the EEA, we take the following safeguards to ensure that your personal information is adequately protected.
Where we store your personal information in, or transfer it to, countries outside the EEA, we will always comply with applicable laws and ensure appropriate safeguards are in place to provide an adequate level of protection. Transfers of personal data take place:
to countries which, according to the European Commission, have an adequate level of protection; or
to countries that do not have adequate safeguards in place, but whose transfers are subject to standard European Commission contractual clauses or that implement other appropriate cross-border transfer solutions to provide adequate safeguards.
By using our Services, you acknowledge that your personal data may be transferred to our facilities and the facilities of third parties with whom we share the information as described in this notice.