7.1 In this section 7, we have summarized the rights you have under data protection law. Some rights are complex and not all details have been included in our summaries. Therefore, you should read the applicable laws and regulatory guidelines for a full explanation of these rights.
7.2 Your fundamental rights under the Data Protection Act are:
(a) the right of access;
(b) the right of rectification;
(c) the right of erasure;
(d) the right to restrict processing;
(e) the right to object to the processing;
(f) the right to transmit data;
(g) the right to complain to the supervisory authority; and
(h) the right to withdraw consent.
7.3 You have the right to confirm whether we can process your personal data and where we access it together with other information. This additional information shall include details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. The granting of the rights and freedoms of others is not affected, we will provide you with a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.
7.4 You have the right to correct any inaccurate personal data and with regard to the purposes of processing, if you have provided us with inaccurate or incorrect data.
7.5 In certain circumstances, you have the right to delete your personal data without undue delay. These circumstances include: personal data are no longer needed for the purpose for which they were collected or otherwise processed; you withdraw consent to processing on the basis of consent; you have objections to the processing according to certain rules of the applicable data protection law; processing is intended for direct marketing purposes; and personal data have been processed illegally. However, there are exceptions to the right to delete. General exceptions apply where processing is required: for the exercise of the right to freedom of expression and information; compliance with legal obligations; or for the creation, exercise or defense of legal claims.
7.6 In certain circumstances, you have the right to restrict the processing of your personal data. These circumstances are: you question the accuracy of personal data; processing is illegal, but you exclude deletion; we no longer need personal data for the purposes of our processing, but you request personal data to establish, assert or defend legal claims; and you objected to the processing, pending verification of this objection. If processing on this basis is limited, we may continue to store your personal information. However, we will process them differently: with your consent; for the creation, exercise or defense of legal claims; to protect the rights of another natural or legal person; or for reasons of overriding public interest.
7.7 You have the right to object to the processing of your personal data due to your specific situation, but only to the extent that the legal basis allows. Processing is necessary for: the performance of a task carried out in the public interest or in the performance of any official body entrusted to us; or for the purposes of legitimate interests that we pursue on our behalf or with a third party. If you make such an objection and we cannot demonstrate compelling legitimate reasons for the processing that exceed your interests, rights and freedoms, or the processing is for the creation, exercise or defense of legal claims, we will stop processing personal information.
7.8 You have the right to object to the processing of your personal data for direct marketing purposes (including profiling). If you make such an objection, we will stop processing your personal data for this purpose.
7.9 You have the right to object to the processing of your personal data for scientific or historical research purposes or for statistical purposes on grounds relating to your specific situation, unless the processing is necessary for tasks performed in the public interest.
7.10 The legal basis for the processing of your personal data is:
(a) consent; or
(b) if the processing is necessary for the performance of a contract to which you are a party or for the performance of steps at your request prior to the conclusion of the contract,
(c) and such processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format. However, this right shall not apply if it would adversely affect the rights and freedoms of others.
7.11 If you believe that our processing of your personal data violates data protection laws, you have the legal right to complain to the data protection supervisory authority. You can do so in the EU Member State of your habitual residence, place of work or alleged infringement.
7.12 To the extent that the legal basis for the processing of your personal data is agreed, you have the right to withdraw this consent at any time.
7.13 You may exercise any of your rights in relation to your personal data by written notice.