Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | Next revision Both sides next revision | ||
|
policies:privacy [2018/05/06 20:51] floele gdpr update |
policies:privacy [2018/05/06 20:55] floele |
||
|---|---|---|---|
| Line 117: | Line 117: | ||
| Each data subject shall have the right granted by the European legislator to obtain from the controller free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information: | Each data subject shall have the right granted by the European legislator to obtain from the controller free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information: | ||
| - | the purposes of the processing; | + | * the purposes of the processing; |
| - | the categories of personal data concerned; | + | * the categories of personal data concerned; |
| - | the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; | + | * the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject, or to object to such processing; the existence of the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject. |
| - | where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; | + | |
| - | the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject, or to object to such processing; | + | |
| - | the existence of the right to lodge a complaint with a supervisory authority; | + | |
| - | where the personal data are not collected from the data subject, any available information as to their source; | + | |
| - | the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject. | + | |
| Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or to an international organisation. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer. | Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or to an international organisation. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer. | ||
| - | If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the controller. | + | If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the controller. |
| c) Right to rectification | c) Right to rectification | ||
| Line 139: | Line 134: | ||
| Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary: | Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary: | ||
| - | The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. | + | * The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. |
| - | The data subject withdraws consent to which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing. | + | * The data subject withdraws consent to which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing. |
| - | The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR. | + | * The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR. |
| - | The personal data have been unlawfully processed. | + | * The personal data have been unlawfully processed. |
| - | The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject. | + | * The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject. |
| - | The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR. | + | * The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR. |
| If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the Canneverbe Limited, he or she may, at any time, contact any employee of the controller. An employee of Canneverbe Limited shall promptly ensure that the erasure request is complied with immediately. | If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the Canneverbe Limited, he or she may, at any time, contact any employee of the controller. An employee of Canneverbe Limited shall promptly ensure that the erasure request is complied with immediately. | ||
| Line 150: | Line 145: | ||
| Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the Canneverbe Limited will arrange the necessary measures in individual cases. | Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the Canneverbe Limited will arrange the necessary measures in individual cases. | ||
| - | e) Right of restriction of processing | + | e) Right of restriction of processing |
| Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies: | Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies: | ||
| - | The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data. | + | * The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data. |
| - | The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use instead. | + | * The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use instead. |
| - | The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims. | + | * The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims. |
| - | The data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject. | + | * The data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject. |
| If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the Canneverbe Limited, he or she may at any time contact any employee of the controller. The employee of the Canneverbe Limited will arrange the restriction of the processing. | If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the Canneverbe Limited, he or she may at any time contact any employee of the controller. The employee of the Canneverbe Limited will arrange the restriction of the processing. | ||