9.1 Right of access and to information
9.1.1 You have the right to obtain a confirmation from us as to whether or not personal data concerning you are being processed by us, and, where that is the case, you have the right to access that personal data.
9.1.2 We will provide a copy of your personal data undergoing processing. For any further copies requested, we may charge a reasonable fee based on administrative costs. If you make the request by electronic means, and unless otherwise requested by you, the information will be provided in a commonly used electronic form.
9.2 Right to rectification
You have the right to obtain from us, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed.
9.3 Right to erasure (”right to be forgotten”)
9.3.1 You have the right to obtain from us, the erasure of personal data concerning you and we have the obligation to erase your personal data in some situations, for example:
(a) if the personal data is no longer necessary in relation to the purposes for which they were collected,
(b) if the processing is based on your consent and you withdraw that consent,
(c) if the processing is based on our legitimate interests and you object to the processing and there are no overriding legitimate grounds for the processing,
(d) if the personal data have been unlawfully processed, or
(e) if the personal data have to be erased for compliance with a legal obligation, etc.
9.3.2 There might be reasons as to why we cannot immediately erase all your personal data. Our continuous processing of your personal data might for example be necessary in order for us to fulfil a legal obligation that requires processing of your personal data, for example bookkeeping and tax legislation, or to establish, exercise or defend a legal claim. In that case we will block the information that could not be immediately erased from use for any other purposes than the ones that hindered the information from being erased immediately.
9.4 Right to restriction of processing
You have the right, under certain conditions; to obtain from us restriction of processing of your personal data. Restriction of processing means that your stored personal data will be marked with the aim of limiting their processing in the future to certain given purposes. The right to restriction applies for example when you have contested the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data, and when you have objected to our processing based on our legitimate interests, pending the verification whether our legitimate grounds override yours.
9.5 Right to data portability
9.5.1 You have the right, under certain conditions, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from us.
9.5.2 When exercising your right to data portability you have the right to have your personal data transmitted directly from us to another controller, where technically feasible.
9.6 Right to object
9.6.1 You have the right to object, on grounds relating to your particular situation, at any time to certain processing of your personal data. The right to object applies e.g. when we process your personal data on the basis of our legitimate interests.
9.6.2 Where personal data are processed for direct marketing purposes, you have the right to object at any time to our processing of your personal data for such marketing.
9.7 Right to object to automated individual decision-making (including profiling)
You have the right, with certain exemptions, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
9.8 Right to lodge a complaint
If you consider that our processing of your personal data infringes the GDPR you have the right to lodge a complaint with the supervisory authority.
9.9 Exercise your rights
If you wish to exercise any of your rights you can easily do that by contacting us, using the contact information under section 11. In order to protect your integrity and your personal data we might require that you identify yourself when you require our assistance.