|Your right||What does it mean?||Limitations and conditions of your right|
|Right of access||Subject to certain conditions, you are entitled to have access to your personal data (this is more commonly known as submitting a “data subject access request”).||If possible, you should specify the type of information you would like to see to ensure that our disclosure is meeting your expectations. We must be able to verify your identity. Your request may not impact the rights and freedoms of other people, eg privacy and confidentiality rights of other staff, Buyers or Professionals.|
|Right to data portability||Subject to certain conditions, you are entitled to receive the personal data which you have provided to us and which is processed by us by automated means, in a structured, commonly-used machine readable format.||If you exercise this right, you should specify the type of information you would like to receive (and where we should send it) where possible to ensure that our disclosure is meeting your expectations. This right only applies if the processing is based on your consent or on our contract with you and when the processing is carried out by automated means. It covers only the personal data that has been provided to us by you.|
|Rights in relation to inaccurate personal or incomplete data||You may challenge the accuracy or completeness of your personal data and have it corrected or completed, as applicable. You have a responsibility to help us to keep your personal information accurate and up to date. We encourage you to notify us of any changes regarding your personal data as soon as they occur, including changes to your contact details.||Please always check first whether there are any available self-help tools within your profile on our website to correct the personal data we process about you. This right only applies to your own personal data. When exercising this right, please be as specific as possible.|
|Right to object to or restrict our data processing||Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data.||This right applies where our processing of your personal data is necessary for our legitimate interests. You can also object to our processing of your personal data for direct marketing purposes.|
|Right to erasure||Subject to certain conditions, you are entitled to have your personal data erased (also known as the “right to be forgotten”), e.g. where your personal data is no longer needed for the purposes it was collected for, or where the relevant processing is unlawful.||We may not be in a position to erase your personal data, if for example, we need it to (i) comply with a legal obligation, or (ii) exercise or defend legal claims.|
|Right to withdrawal of consent||As stated above, where our processing of your personal data is based on your consent you have the right to withdraw your consent at any time.||If you withdraw your consent, this will only take effect for future processing.|
If you wish to exercise any of your rights please contact firstname.lastname@example.org in the first instance.
You also have the right to lodge a complaint with the Information Commissioner’s Office, which is the UK data protection regulator. More information can be found on the Information Commissioner’s Office website at https://ico.org.uk/.