In order to give you more control regarding the processing of personal data, you have various rights at your disposal. These rights are inter alia discussed and provided in articles 15-22 GDPR.
In particular, you have the following rights:
- Right of access to the processed personal data (art. 15 GDPR):
You have the right to obtain our confirmation as to whether or not your personal data is being processed, and, where that is the case, to obtain access to the personal data and the following information:
a) The purposes of the processing;
b) The categories of personal data concerned;
c) The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
d) Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, any available information as to their source;
h) the existence of automated decision-making.
In the event that we cannot provide you access to the personal data (for example in the event of a legal obligation to restrict the data subject from access to such information), we shall inform you of the reasons of such an inability.
Furthermore, you can also request a copy of the personal data undergoing processing free of charge. Please note however, that we are entitled to charge reasonable fee based on administrative costs for each additional copy you request.
- The right to be forgotten or to request erasure of personal data (art. 17 GDPR)
In certain instances, you may request Virtual Surveyor to erase your personal data. Be aware however that under such circumstance, Virtual Surveyor will not be able to provide you with the services any longer. Furthermore, Virtual Surveyor asks you to bear in mind that the ‘right to be forgotten’ is not an absolute right.
Virtual Surveyor shall have the right to continue to store your personal data, inter alia, in the following cases: (i) where such storage is necessary for the performance of a contract to which you are a contracting party, (ii) where such storage is necessary for compliance with a legal obligation, or (iii) where such storage is necessary for the establishment, exercise or defence of legal claims. Virtual Surveyor shall inform you of the reasons for the storage of your personal data in its response to your request of erasure.
- The right to rectification (art. 16 GDPR):
In the event that your personal data are inaccurate, dated or incomplete, you can request Virtual Surveyor to rectify or complete your personal data.
- The right to data portability (art. 20 GDPR):
Under certain conditions, you shall also have the right to request Virtual Surveyor to transmit the personal data you provided with and for which you have given us your consent, to another controller. Virtual Surveyor shall transmit such personal data directly to the new controller in so far as such transmission is technically feasible.
- Right to restriction of processing (art. 18 GDPR):
You shall have the right to obtain the restriction of processing where one of the following applies:
a) You contest the accuracy of the personal data (in such an event the use of the personal data shall be limited for a period enabling us to verify the accuracy of the personal data);
b) The processing of the personal data is unlawful;
c) Virtual Surveyor no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims;
d) Pending the verification whether the legitimate grounds for the processing of the personal data override those of the data subject, you may request Virtual Surveyor to limit the usage of the personal data.
- The right to object (art. 21 GDPR):
You have the right to object, on grounds relating to your particular situation, the processing of your personal data in case that such processing is done for the performance of a task carried out in the public interest or for the purposes of the legitimate interests pursued by Virtual Surveyor. In such an event, Virtual Surveyor shall no longer process the personal data unless (i) there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or (ii) the processing of the personal data is done for the establishment, exercise or defence of legal claims.
- Automate individual decision-making, including profiling (art. 22 GDPR):
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects, or which may significantly affect you in a similar manner.
Such right can however not be invoked in the following circumstances:
a) If the decision is authorised by law (for example: in order to prevent tax fraud);
b) If the decision is based on the data subject’s explicit consent; or
c) If the decision is necessary for entering into, or performance of, a contract between the data subject and the data controller (note that in such instances, we shall always make a case by case assessment of whether less privacy intrusive methods can be applied to facilitate the entry into, or performance of the contract).
- The right to withdraw your consent (art. 7 GDPR):
Where the processing of personal data is based on consent, you shall have the right to withdraw such consent at any time through a simple request.