General Data Protection Regulation ADDENDUM (“addendum”)
Last modified: April 18, 2020
- Your Rights. Under the GDPR you have a number of important rights free of charge (subject to section 3 below). In summary, those include rights to:
- Fair processing of information and transparency over how we use your use Personal Information
- Access to your Personal Information
- Require us to correct any mistakes in your Personal Information which we hold
- Require the erasure of Personal Information concerning you in certain situations
- Receive the Personal Information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
- Object at any time to processing of Personal Information concerning you for direct marketing
- Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- Object in certain other situations to our continued processing of your Personal Information
- Otherwise restrict our processing of your Personal Information in certain circumstances
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.
- Exercise Your Rights
If you would like to exercise any of those rights, please:
- Let us have enough information to identify you (e.g., account number, user name, registration details)
- Let us have proof of your identity and address
- Let us know the information to which your request relates including any account or reference numbers, if you have them
- Fees for Requests
- We are required to give effect to your rights of access, rectification, erasure, and the right to object free of charge. However, we may charge a reasonable fee for repetitive requests, unfounded or excessive requests, or further copies beyond the initial copy provided.
- Right To Make A Complaint to the Relevant DPA
- Data Protection Authorities (“DPAs”) are the regulatory authorities responsible for monitoring and enforcing data protection laws at a national level and providing guidance on the interpretation of those laws. DPAs are empowered to oversee enforcement of the GDPR, investigate breaches of the GDPR, and bring legal proceedings where necessary. If you believe that your rights have been infringed by us, you have the right to ask us to remedy the situation. If you believe you have not received an adequate response from us, you may file a complaint with the relevant DPA (either the DPA for the EU Member State in which you live or work or the Member State in which the alleged infringement occurred). A list of DPAs may be found at: https://edpb.europa.eu/about-edpb/board/members_en (current as of April 2020).