EU/UK Privacy Rights
You may have certain rights under the European Union's GDPR 2016/679, for example, if you are a data subject in the European Union protected by the GDPR (the UK, Norway, and Switzerland, while not EU nations, have either adopted the GDPR or similar date protection laws). The GDRP defines "data subjects" as all living individuals whose Personal Data are being collected and processed. These rights are in addition to the commitments we are making elsewhere in this policy to safeguard your privacy.
The GDPR is a complex regulatory scheme and we do not intend to provide every detail here. If you are interested you should read the GDPR itself and the relevant guidance provided by the applicable authorities for a fuller explanation. The GDPR applies to businesses that market their products and services to people in the EU or monitor the behavior of people in the EU. We wish to assure visitors to our website that we have put in place processes and procedures to comply with GDPR.
The GDPR steps up the standards for disclosures when obtaining consent. Consent must be "freely given, specific, informed and unambiguous". The consent must be in "clear and plain" language that EU residents can pick out and distinguish from other matters. If the GDPR applies to you, you must know exactly what you are consenting to when you consent and you must be informed in advance of your right to withdraw that consent.
Your Rights Under GDPR
Under the GDPR European Union data subjects have two new rights where applicable, namely, the "right to be forgotten" and the right to "data portability". More specifically, the GDPR provides the right, where applicable:
- (a) to access your Personal Data (as defined in the GDPR)
- (b) to publication of your Personal Data
- (c) to have your Personal Data rectified or erased
- (d) to restrict the processing of your Personal Data
- (e) to object to the processing of your Personal Data
- (f) to data portability, meaning to obtain your Personal Data in a structured, commonly used and machine-readable format, so you can transmit it to another data controller
- (g) to complain to a supervisory authority
- (h) to withdraw your consent with respect to the processing of your Personal Data
You do not have to give us reasons for exercising these rights.
Detailed Rights Explanation
Right to Access
Where applicable, the GDPR provides you with the right to confirm whether we process or have processed your Personal Data and to access your data, together with certain other information including the purposes of the processing, the categories of Personal Data concerned, and the recipients of the Personal Data. Where applicable, and providing that we do not affect the rights and freedoms of anyone else, we will supply you with one copy of your Personal Data. The first copy is free. We may charge a reasonable fee for additional copies.
Right to Rectification
Where applicable, the GDPR provides the rights to rectify any inaccurate Personal Data about you and, taking into account the purposes of the processing, to complete any incomplete data about you.
Right to Erasure
In some circumstances the GDPR provides you the right to erase your Personal Data without undue delay, including when we no longer need the Personal Data for the purposes for which we collected or processed the Personal Data, if you withdraw your consent to consent-based processing, if you object to the processing of the Personal Data under certain rules of the GDPR, if the processing is for the purpose of direct marketing, and if the Personal Data have been unlawfully processed. However, the GDPR provides exceptions or exclusions to the right to erase, including where the processing is necessary for the exercise of free expression and information, to comply with a legal obligation, or to establish, exercise, or defend a legal claim.
Right to Restrict Processing
In some circumstances the GDPR provides you the right to restrict the processing of your Personal Data, such as to contest the accuracy of the Personal Data, where the processing is unlawful but you oppose erasure, or when we no longer need the Personal Data for the purpose of our processing but you require Personal Data to establish, exercise or defend a legal claim, and you have objected to the processing pending the verification of that objection. When processing has been restricted on this basis, we may continue to store your Personal Data. But we will process your data otherwise only with your consent, to establish, exercise or defend a legal claim, or to protect another natural or legal person's rights, or for reasons of important public interest.
Right to Object
If applicable, the GDPR provides the right to object to our processing of your Personal Data on grounds relating to your situation, but only to the extent that the processing is necessary for a task carried out in the public interest or to exercise any official authority vested in our company, or for a legitimate interest that we or someone else might pursue. If you object, we shall stop processing the Personal Data unless we can demonstrate compelling legitimate grounds to process the information that override your interests, rights and freedoms, or the purpose of the processing is to establish, exercise or defend a legal claim.
You may object to our processing of your Personal Data for direct marketing purposes including profiling for direct marketing purposes. If you notify us of such an objection, we shall stop processing your Personal Data for direct-marketing purposes.
You may object to our processing of your Personal Data for scientific or historical research or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for a task carried out in the public interest.
Right to Data Portability
If the legal basis for our processing your Personal Data is consent or that the processing is necessary to perform a contract to which you are a party, or in order to take steps at your request before entering into a contract, and such processing is carried out by automatic means, you have the right to receive your Personal Data from us in a structured, commonly used, and machine-readable format. But this right does not apply when its application will affect the rights and freedoms of others adversely.
Right to Lodge a Complaint
If you believe that our processing of your Personal Data infringes any data-protection statute, rule or regulation, you may lodge a complaint with the appropriate authorities responsible for data protection. If applicable, you may lodge that complaint in the European Union member state of your habitual residence, your workplace, or the place of the alleged infringement.
Right to Withdraw Consent
To the extent that we base our processing of your Personal Data on your consent, you may withdraw that consent at any time. But your withdrawal of that consent will not affect the lawfulness of any processing we do before your withdrawal.
Contact Information
If applicable, you may exercise any of your rights in relation to your Personal Data by emailing us at contact@ty.com