C. European Privacy Rights
Your rights in connection with personal information
Under certain circumstances and subject to applicable law, you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you.
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- Where personal information is processed by automated means and:
- where we process your personal information on the basis of your consent; or
- where such processing is necessary for entering into or performing our obligations under a contract with you, request the transfer of your personal information to you or to another party (also known as “data portability”).
- Where we process your personal information on the basis of your consent, you may withdraw that consent at any time. If you do not give your consent or withdraw your consent this may affect our ability to provide you with services. Please note that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- In certain circumstances, request not to be subject to automated decision-making, including profiling.
Certain of these rights are not absolute under the applicable legislation (as sometimes there may be overriding interests that require the processing to continue, for example); nonetheless we will consider your request and respond to you. Moreover, the exercise of some of these rights may result in terminating the digital identification process.
Finally, you have the right to lodge a complaint with the supervisory authority in the jurisdiction where you live or work, or in the place where you think an issue in relation to your personal information has arisen.