Under the General Data Protection Regulation, you have the right to access, rectify, port and delete some of your data.You also have the right to object to and restrict certain processing of your data.This is a case-by-case determination that depends on things such as the nature of the data,why it is collected and processed, and relevant legal or operational retention needs.
You may exercise any of the rights described in this section before your Data Controller and Payments Data Controllerby sending an email to email@example.com.Please note that we may ask you to verify your identity before taking further action on your request.
Please be aware that whilst we will try to accommodate anyrequest you make in respect of your rights they are not absolute rights.This means that we may have to refuse your request or may only be able to comply with it in part.
You may access and update some of your information through your Account settings.You are responsible for keeping your personal information up-to-date.
You have the right to ask us to correct inaccurate or incomplete personal informationconcerning you (and which you cannot update yourself within your Account).
You have the right to access your personal data held by us and a right to receivecertain personal data in a structured, commonly used, and machine-readable formatand/or request us to transmit this information to another service provider (where technically feasible).
We will retain your personal data for the period necessary to perform the contractbetween you and us and to comply with our legal obligations. Accordingly,the Data Controller and/or the Payments Data Controller shallmaintain your personal data for up to 7 years following the closure of your Account(if applicable) or the last contact with us emanating from you. Where it is no longernecessary to process your personal data, it will be deleted. Please note, however, that we maybe subject to legal and regulatory requirements to keep personal data for a longer period.
You have the right to have certain personal data erased where it is no longer necessaryfor us to process it, where you have withdrawn your consent pursuant to paragraph 5.5,where you have objected pursuant to paragraph 5.6, where your personal data has beenunlawfully processed, or where erasing your personal data is required in accordance with a legal obligation;
Please note that if you request the erasure of your personal information:
a. We can retain and use your personal information to the extent necessary to complywith our legal obligations. For example, we may keep some of your informationfor tax, anti-money laundering reporting and auditing obligations.
b. We can retain some of your personal information as necessary for our legitimatebusiness interests, such as fraud detection and prevention and enhancing safety.
c. Information that we receive about you (including financial transaction data) can be accessedand preserved for an extended period when it is the subject of a legal request orobligation, governmental investigation or investigations of possible breaches of ourTerms or Policies, or otherwise to prevent harm.
Where we have specifically requested your consent to process your personal data and have no otherlawful conditions to rely on, you have the right to withdraw this consent at any time bychanging your Account settings or by sending a communication to firstname.lastname@example.org specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal.
Additionally, applicable law may give you the right to limit the ways in which we use your personal information,in particular where (i) you contest the accuracy of your personal information; (ii) the processingis unlawful and you oppose the erasure of your personal information; (iii) we no longer need yourpersonal information for the purposes of the processing, but you require the information for theestablishment, exercise or defence of legal claims; or (iv) you have objected to the processing pursuantto next section and pending the verification whether the legitimate grounds of the Data Controller override your own.
You have the right to object to processing where lawful basis is that it is in our legitimate interests,but please note that we may still process your personal data where there are other relevantlawful bases or where we have compelling grounds to continue processing your personal data inour interests which are not overridden by your rights, interests or freedoms;
You also have the right to object to direct marketing, which can be done by opting-out ofdirect marketing either via your Account settings or by opting out via the communication itself.You also have a right to object to any profiling to the extent that it relates to direct marketing only.
You have the right to lodge complaints about the data processing activities carried outby the Data Controller and the Payment Data Controller before thecompetent data protection authorities. Please refer to Section 7 for further information.