Privacy Policy – For customers in the EEA and the UK
This section applies to customers in the EEA and the UK
1. Legal basis
The legal basis for Processing your Personal Information is as follows:
| (a) | Contract. This is where we need to process your Personal Information to perform the contract we enter into with you. |
|---|---|
| (b) | Legitimate Interests. This is where the processing of your Personal Information is necessary for legitimate interests pursued by us or a third party (e.g. to respond to your inquiries) and your interests and fundamental rights do not override those interests. You may obtain further details about legitimate interests by contacting us using the information about us indicated in Section 8 of this Privacy Policy. |
| (c) | Consent. This is where you have given consent for us to process your Personal Information. The withdrawal of your consent shall not affect the lawfulness of processing performed based on the consent before your withdrawal. |
| (d) | Legal obligation. This is where the processing of your Personal Information is required by the law to which we are subject. |
2. Transfers of Personal Information outside the EEA or the UK
Your Personal Information may be transferred to, and stored by, a third party outside the EEA or the UK. Where we transfer your Personal Information to a third party outside the EEA or the UK, we will ensure that:
| (a) | the recipient destination has been subject to a finding from the European Commission (with respect to Personal Information of customers in the EEA) or has been designated by the government of the UK (with respect to Personal Information of customers in the UK) as ensuring an adequate level of protection for the rights and freedoms that you possess in respect of your Personal Information; or |
|---|---|
| (b) | the recipient enters into standard data protection clauses that have been approved by the European Commission, or other contracts for the transfer of Personal Information as required by data protection laws, with us. |
You can obtain more details of the protection given to your Personal Information when it is transferred outside the EEA or the UK by contacting us using the information about us indicated in Section 8 of this Privacy Policy.
3. Your rights
Notwithstanding Section 6 of this Privacy Policy, you have a number of legal rights in relation to the Personal Information that we hold about you. The following is a summary of each of the rights you may exercise.
| (a) | the right to obtain information regarding the processing of your Personal Information and access to the Personal Information which we hold about you; |
|---|---|
| (b) | the right to request that we rectify your Personal Information if it is inaccurate or incomplete; |
| (c) | the right to request that we erase your Personal Information in certain circumstances. This may include (but is not limited to) circumstances in which:
(i) it is no longer necessary for us to retain your Personal Information for the purposes for which we collected it;
(ii) we are only entitled to process your Personal Information with your consent, and you withdraw your consent; or
(iii) you object to our processing of your Personal Information for our legitimate interests, and our legitimate interests do not override your own interests, rights and freedoms; |
| (d) | the right to request that we restrict our processing of your Personal Information in certain circumstances. This may include (but is not limited to) circumstances in which:
(i) you dispute the accuracy of your Personal Information (but only for the period of time necessary for us to verify its accuracy);
(ii) we no longer need to use the Personal Information except for the establishment, exercise or defence of legal claims; or
(iii) you object to our processing your Personal Information for our legitimate interests (but only for the period of time necessary for us to assess whether our legitimate interests override your own interests, rights and freedoms); |
| (e) | the right to object to us about our processing of your Personal Information; |
| (f) | the right to receive any Personal Information which we process about you on the basis of your consent or on a contract (as opposed to any other legal ground) and where the processing is carried out by automated means in a structured, commonly used and machine-readable format and/or request that we transmit that data to a recipient where this is technically feasible. Please note that this right only applies to Personal Information which you have provided to us; |
| (g) | the right to withdraw your consent to our processing of your Personal Information at any time. Please note, however, that we may still be entitled to process your Personal Information if we can rely on another legal ground for doing so. |
You can exercise your rights by contacting us using the information about us indicated in Section 8 of this Privacy Policy. You can also lodge a complaint with the data protection authority if you think that any of your rights have been infringed by us.