A.; Right of Access

The data subject has the right to obtain confirmation from the Data Controller as to whether their personal data is being processed. If such processing is taking place, the data subject has the right to access the personal data and the following information:

1.; The purposes of the data processing

2.; The categories of personal data concerned

3.; The recipients or categories of recipients to whom the personal data have been or will be disclosed, including recipients in third countries or international organizations

4.; Where possible, the anticipated storage period for the personal data, or, if not possible, the criteria used to determine that period

5.; The right to request rectification, erasure, or restriction of processing of personal data, and the right to object to such processing

6.; The right to lodge a complaint with a supervisory authority

7.; Where the personal data have not been collected from the data subject, any available information regarding the source

8.; The existence of automated decision-making, including profiling, and, at least in such cases, meaningful information about the logic involved, as well as the significance and potential consequences of such processing for the data subject
The data subject also has the right to obtain a copy of their personal data undergoing processing. The Data Controller may charge a reasonable fee based on administrative costs for any additional copies requested by the data subject. Exercising the right to obtain a copy must not adversely affect the rights and freedoms of others. To comply with data security requirements and protect the rights of the data subject, the Data Controller must verify the identity of the individual requesting access before providing any personal data or information.

B.; Right to Rectification

    The data subject has the right to request the Data Controller to correct inaccurate personal data concerning them, provided that the inaccuracy can be demonstrated. Taking into account the purpose of the data processing, the data subject also has the right to request the completion of incomplete personal data.

C.; Right to Erasure (“Right to be Forgotten”)

    The data subject has the right to request that the Data Controller erase their personal data without undue delay if:

1.; The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

2.; The processing is unlawful;

3.;The data subject withdraws consent and there is no other legal basis for processingg;

4.; The data subject objects to the processing and there are no overriding legitimate grounds for processing, or their data is being processed for direct marketing purposes;

5.; The deletion of data is required by law, an EU legal act, a court order, or another authority’s decision However, the Data Controller is not required to fulfill the deletion request if the processing is necessary for;

6.; Exercising the right to freedom of expression and information

7.; Establishing, exercising, or defending legal claims;

8.; Compliance with a legal obligation to which the Data Controller is subject;

9.; Reasons of public interest in the field of public health;

10.; Archiving purposes in the public interest, scientific or historical research, or statistical purposes, if erasure would render the objectives of processing impossible or seriously jeopardize them.

D.; Right to Restriction of Processing

    TThe data subject has the right to request that the Data Controller restrict processing if any of the following conditions apply:

1.; The data subject contests the accuracy of their personal data; in this case, the restriction applies for the period necessary for the Data Controller to verify the accuracy of the personal data.

2.; The processing is unlawful, but the data subject opposes the deletion of the data and instead requests a restriction on its use.

3.; The Data Controller no longer needs the personal data for processing purposes, but the data subject requires them for the establishment, exercise, or defense of legal claims.

E.; Right to Data Portability

    If processing is based on the data subject’s consent and carried out by automated means, the data subject has the right to receive their personal data, which they have provided to the Data Controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit these data to another data controller.

F.; Right to Object

    The data subject has the right to object at any time to the processing of their personal data on grounds relating to their particular situation if the processing is necessary for the legitimate interests pursued by the Data Controller or a third party.
For the data processing described in this Privacy Notice, based on the legal grounds set out, the right to object does not apply to the data subject.