Privacy Policy – For Customers in the European Economic Area and the United Kingdom
This section applies to customers in the European Economic Area and the United Kingdom
I. Legal Basis
The legal basis for processing your personal information is as follows:
(a) Contract. This is where we need to process your personal information to perform our contract with you.
(b) Legitimate Interest. This is where processing your personal information is necessary for the purposes of the legitimate interests pursued by us or a third party (such as responding to your enquiry), and your interests and fundamental rights do not override those interests. You can contact us using the information about us specified in Section 8 of this Privacy Policy for further details about legitimate interests.
(c) Consent. This is where you have given us your consent to process your personal information. Withdrawing your consent will not affect the lawfulness of processing based on consent before you withdraw it.
(d) Legal Obligation. This is where we are subject to a legal requirement to process your personal information.
- Transferring Personal Information Outside the European Economic Area or the United Kingdom
Your personal information may be transferred to, and stored by, a third party outside the European Economic Area or the United Kingdom. If we transfer your personal information to a third party outside the EEA or the UK, we will ensure that:
(a) the recipient destination has ensured an adequate level of protection for your rights and freedoms in relation to your personal information, based on findings by the European Commission (for personal information of EEA customers) or designation by the UK government (for personal information of UK customers); or
(b) the recipient has entered into a standard data protection clause with us approved by the European Commission, or other contract for the transfer of personal information required by data protection law.
You can contact us using the information about us specified in Section 8 of this Privacy Policy for further details on the protection afforded to your personal information when it is transferred outside the EEA or the UK.
- Your rights
Notwithstanding Section 6 of this Privacy Policy, you have a number of legal rights in relation to the personal information we hold about you. Below is a summary of each of the rights you can exercise.
(a) the right to obtain information about the processing of your personal information and access the personal information we hold about you;
(b) the right to request that we correct your personal information if it is inaccurate or incomplete;
(c) the right to request that we delete your personal information in certain circumstances. This may include (but is not limited to) the following situations:
(i) we no longer need to retain your personal information for the purposes for which we collected it;
(ii) we only process your personal information with your consent and you withdraw your consent; or
(iii) you object to us processing your personal information for our legitimate interests and our legitimate interests do not override your own interests, rights and freedoms;
(iv) the right to request that we restrict our processing of your personal information in certain circumstances. This may include (but is not limited to) the following situations:
(i) you contest the accuracy of your personal information (but only for so long as we need to verify its accuracy);
(ii) we no longer need to use the personal information except for the establishment, exercise or defence of legal claims; or
(iii) you object to us processing your personal information for our legitimate interests (but only for so long as we need to assess whether our legitimate interests override your own interests, rights and freedoms);
(v) the right to object to us processing your personal information;
(vi) the right to receive any personal information we process about you based on your consent or a contract (as opposed to any other legal basis) and the processing is carried out by automated means in a structured, commonly used and machine-readable format and/or to require us to transmit that data to a technically feasible recipient. Please note that this right only applies to personal information you have provided to us;