8. Your rights as a data subject
At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:
•The right to be informed
•Right of access – you have the right to request a copy of the information that we hold about you.
•Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
•Right to be forgotten – Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.
•Right to restriction of processing – You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies you may exercise the right to restrict processing:
oa) The accuracy of the personal data is contested.
ob) Processing of the personal data is unlawful.
oc) We no longer need the personal data for processing but the personal data is required for part of a legal process.
od) The right to object has been exercised and processing is restricted pending a decision on the status of the processing.
•Right of portability – You may request your set of personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means and if the processing is based on the fulfilment of a contractual obligation.
•Right to object - You have the right to object to our processing of your data where
oa) Processing is based on legitimate interest, except when the data controller’s compelling legitimate interest - such as monitoring the behavior of employees as necessary - overrides the interests or the fundamental rights and freedoms of the data subject.
ob) Processing is for the purpose of direct marketing.
oc) Processing is for the purposes of scientific or historic research.
od) Processing involves automated decision-making and profiling.
•Right to judicial review: in the event that Wiitrans refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in section 9 below.
In order to process your request, we will ask you to provide two valid forms of identification for verification purposes.