You have certain rights under current data protection legislation concerning the personal data we have collected about you.
To make it as clear as possible for you, we have chosen to explain the rights below. To get an exhaustive description of the rights according to Chapter III of the GDPR, see the Data Protection Agency’s website in your country.
Request access (Article 15 GDPR) to your data. You normally have the right to receive a copy of your data that we process (a so-called register extract) as well as additional information about how and why we process your personal data.
Request correction (Article 16 GDPR) of personal data that you consider to be incorrect or incomplete. Taking into account the purpose of the processing, you also have the right to supplement incomplete personal data, for example, by submitting a supplementary statement to us.
Request deletion (Article 17 GDPR) of your personal data. In addition to the right to object to a processing activity that may result in us being obliged to cease the processing (see more about the right to object below), you have the right under certain circumstances to have your personal data deleted. This is, e.g., the case of:
- the personal data that we process is no longer necessary for a certain purpose or is otherwise processed illegally, or
- the personal data must be deleted to comply with a legal obligation.
If you have the right to the deletion of personal data that we have made public, we will, based on the circumstances of the individual case (e.g., costs and technical conditions), contact other data controllers who process your personal data to make them aware that you have requested to be deleted.
However, our obligation to delete your personal data and notify other data controllers does not apply if we must save your personal data to, for example:
- fulfill a legal obligation to which we are subject, or
- establish, enforce, or defend legal claims.
Object to processing (Article 21 of the GDPR), which is based on our or someone else's legitimate interest (Article 6.1 (f) of the GDPR) for reasons relating to your specific situation. However, we may continue to process your data, even though you have objected to the processing, if we can demonstrate a decisive legitimate reason for the processing that outweighs your privacy interest or if the processing in question is necessary to establish, assert, or defend legal claims.
See the table below regarding the processing that takes place with the support of a legitimate interest assessment to better understand when the right to object is applicable.
Request data portability (Article 20 of the GDPR) regarding the processing of your personal data that you have provided to us and which takes place with the support of an agreement (Article 6.1 b) of the GDPR) or consent (Article 6.1 a) of the GDPR) implying that you have the right to receive this personal data in a commonly used machine-readable format and if it is technically possible to have such personal data transferred to another personal data controller.
See the table below regarding our processing that takes place with the support of an agreement or your consent to better understand when the right to data portability is applicable.
Withdraw consent (Article 7 GDPR) that you have given for a certain processing of your personal data at any time, with future effect.
Request that the processing of your personal data be restricted (Article 18 of the GDPR). You also have the right to request that the processing of your personal data be restricted under certain circumstances. If your personal data is restricted, we may, in addition to storage, normally only process such personal data with the support of your consent or to establish, assert, and defend legal claims.
If you request that the processing of your data be restricted, it may, however, mean that we cannot fulfill our potential obligations toward you during the time that the processing is restricted.
You have the right to demand that a processing activity be limited:
- during the time that, as a result of you questioning the correctness of the personal data, we check whether your personal data is correct,
- if the processing is illegal, but you have objected to us deleting personal data and instead requested that the use of the data be restricted, or
- if you have objected to the processing (see more about this right above) and during the period that we assess whether we have decisive legitimate reasons that outweigh your privacy interest.
Automated Decision Making. Our processing of your personal data will not be subject to automated decision-making in the manner referred to in the GDPR.
Complaint to the supervisory authority. If you have questions about this information or the handling of your personal data or want to assert your rights, you are welcome to contact us. If you are not satisfied with the answer you have received or our handling of your personal data, you have the right to submit a complaint to your supervisory authority.
If you wish to exercise your rights, please contact us through our digital forms or at the contact details below.