Individuals may exercise the following rights with regard to their personal data voluntarily submitted to us for contractual obligations:
1. The Right to be Informed
In compliance with the General Data Protection Regulation 2018 (GDPR), individuals have the right to be informed about the collection and use of their personal data voluntarily submitted to us both verbally and written.
2. The Right to Access
Individuals have the right to access their personal data being processed by us at any time they may wish. Individuals also have the right to obtain disclosure regarding the processing and obtain an electronic or hard copy of their data being processed.
3. The Right to Rectification
On request, individuals have the right to verify the accuracy of their data and request for the data to be updated or amended.
4. The Right to Erasure (“The right to be Forgotten”)
Individuals have the right, under certain circumstances, to obtain the erasure of their data retained by us.
5. The Right to Restrict Processing
Individuals have the right, under certain circumstances, to restrict the processing of their data.
6. The Right to Data Portability
Individuals have the right to receive their data in a structured, portable and machine readable format if they so wish and, if technically feasible, to have it transmitted to another controller without any hindrance.
7. The Right to Object
Individuals have the right, under certain circumstances, to object to the processing of their data.
8. The Right to Lodge a Complaint
Individuals have the right to bring a claim before their competent data protection authority should they not be afforded the above rights.
9. Retention Time
Personal data is retained for the time necessary to provide the service requested by the client and the client can always request that we suspend or remove their data or until such service is complete between the owner and the client.
We may be allowed to retain personal data for a longer period whenever the client has given consent to such processing, as long as such consent is not withdrawn.
Furthermore, we may be obliged to retain personal data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
At such time that the retention period expires, personal data shall be deleted. At and after such time, the right to access, the right to rectification, the right to erasure and the right to data portability cannot be enforced after deletion.