This section shows the rights granted and activated by the interested party to protect its personal data pursuant to arts. 15-22 of EU Regulation 679/16
Art. 15 (Right of access), art. 16 (Right of rectification)
The interested party has the right to obtain confirmation from the Data Controller that it is or is not undergoing processing of personal data concerning him/her and in this case, to obtain access to personal data and the following information:
- a) purposes of processing;
- b) categories of personal data concerned;
- c) recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients in third countries or international organisations;
- d) storage period of personal data provided, or if that is not possible, the criteria used to determine that period;
- e) existence of the right of the interested party to request from the Data controller rectification or deletion of personal data, or restriction of processing of personal data concerning him/her, or to object to such processing;
- f) right to lodge a complaint with a Supervisory Authority;
- h) existence of an automated decision-making procedure, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the interested party.
Art. 17 – Right to cancellation (“Right to be forgotten”)
The interested person has the right to obtain from the Data Controller the deletion of personal data concerning him/her without undue delay and the Data Controller is obliged to cancel the personal data without undue delay if one of the following reasons exists:
- a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
- b) the interested party revokes the consent on which the processing is based in accordance with art. 6, par. 1, letter a), or art. 9, par. 2 letter a), and if there is no other legal basis for the processing;
- c) the interested party opposes the processing pursuant to art. 21, par. 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to art. 21, par. 2;
- d) personal data have been unlawfully processed;
- e) personal data must be erased for compliance with a legal obligation provided for in the Union or Member State law to which the data controller is subject;
- f) personal data have been collected in relation to the offer of information society services pursuant to art. 8, par. 1 of EU Reg. n.679/16.
Art. 18 – Right to restriction of processing
The interested party has the right to obtain restriction of processing from the Data Controller when one of the following applies:
- a) the interested party disputes the accuracy of the personal data, for the period necessary for the Data Controller to verify the accuracy of such personal data;
- b) the processing is unlawful and the interested party opposes the erasure of the personal data and requests instead the restriction of their use;
- c) although the Data controller no longer needs the personal data for processing purposes, the personal data are required by the interested party to ascertain, exercise or defend a right in court;
- d) the interested party has opposed the processing pursuant to art. 21, par. 1, EU Reg. No. 679/16 pending verification of the possible prevalence of the legitimate reasons of the Data Controller with respect to those of the interested party.
Art. 20 – Right to data portability
The interested party shall have the right to receive the personal data concerning him/her, which he/she has provided to a Data controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance from the Data controller.
Art. 21 – Right to object
The interested party has the right to oppose at any time, for reasons related to his/her particular situation or if the personal data are processed for direct marketing purposes (including profiling), to the processing of personal data concerning him/her.
The Data Controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or the defence of a right in court.
Revocation of consent to processing
You have the right to revoke your consent to the processing of your personal data by sending an e-mail to the following e-mail address: firstname.lastname@example.org After sending the e-mail you will receive a message that will allow you to delete or modify your data independently.
If you would like more information on the processing of your personal data, that is to say exercise the rights referred to in arts. 15-22 GDPR, you can send an e-mail to the following e-mail address: email@example.com.