Disclosure of your personal information
There are a number of instances where we may need to share your data with third parties: This may include with; law enforcement to support investigations or for detection and prevention of crime including for public safety; to safeguard the vulnerable such as children. We thoroughly consider and balance any potential impacts on you, both positive and negative, and your rights under data protection laws.
International processing of personal information?
We may need to transfer your personal data outside the UK to service providers and subcontractors in countries where data protection laws may not provide the same level of protection as those in the European Economic Area, such as the USA. These data transfers are covered by an adequacy decision of the European Commission (Article 45 GDPR). Where this is not the case e.g., when it comes to transfers to the USA, the data transfers are especially based on standard data protection clauses/standard contractual clauses in line with the templates adopted by the European Commission (Article 46 Para. 2.lit. c, Para. 5 S. 2 GDPR) or by an exemption according to Article 49 GDPR.
The same applies to external service providers who work on behalf of us (for example IT service providers or data centres) or third parties, insofar as they come into contact with your personal data and are based in third countries.
Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organisations.
Retention of your personal information?
Marketing and profiling
If you have given your consent, we will contact you about the products and services we offer.
Legitimate Interests means the interests of our company in conducting and managing our business. When we process your personal information for our Legitimate Interests, we thoroughly consider and balance any potential impacts on you, both positive and negative, and your rights under data protection laws. Our legitimate business interests do not automatically override your interests.
How to exercise your rights?
Data protection law provides data subjects with numerous rights, including the right to: access, rectify, erase, restrict, transport, and object to the processing of, their personal data. Data subjects also have the right to lodge a complaint with the relevant data protection authority if they believe that their personal data is not being processed in accordance with applicable data protection law.
Right to make subject access request (SAR). Data subjects may, where permitted by applicable law, request copies of their personal data. If you would like to make a SAR, i.e., a request for copies of the personal data we hold about you, you may do so by writing to Data Protection Officer, Legal & Compliance, xxx or emailing Data Protection Officer firstname.lastname@example.org The request should make clear that a SAR is being made. You may also be required to submit a proof of your identity.
Right to rectification. You may request that we rectify any inaccurate and/or complete any incomplete personal data.
Right to withdraw consent. You may, as permitted by applicable law, withdraw your consent to the processing of your personal data at any time. Such withdrawal will not affect the lawfulness of processing based on your previous consent. Please note that if you withdraw your consent, you may not be able to benefit certain service features for which the processing of your personal data is essential.
Right to object to processing. Including automated processing and profiling. You may, as permitted by applicable law, request that we stop processing your personal data. In relation to automated processing and profiling, you may object to the processing, and you will have the right to obtain human intervention.
Right to erasure. You may request that we erase your personal data, and we will comply, unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for keeping your personal data, such as, a legal obligation that we have to comply with, or if retention is necessary for us to comply with our legal obligations.
Right to data portability. In certain circumstances, you may request that we provide your personal data to you in a structured, commonly used, and machine-readable format and have it transferred to another provider of the same or similar services. We will comply with such transfer as far as it is technically feasible. Please note that a transfer to another provider does not imply erasure of your personal data which may still be required for legitimate and lawful purposes.
Your right to lodge a complaint with the supervisory authority. We suggest that you contact us about any questions or if you have a complaint in relation to how we process your personal data. However, you do have the right to contact the relevant supervisory authority directly. To contact the Information Commissioner’s Office, the supervisory authority in the United Kingdom, please visit the ICO website for instructions. https://ico.org.uk
For more information on how to exercise your rights, you can email our Data Protection Officer at email@example.com or by post to:
Data Protection Officer
Exercising your rights is free and we will respond to any request as quickly as we can. Under current law, we have up to a calendar month to respond to any request. If we are not able to meet this, we’ll contact you to explain why and confirm when your request will be processed.
If you have any questions or concerns about how we have used your personal information you can contact us for more information
By email at firstname.lastname@example.org