What rights do I have in relation to my personal data?
You are entitled to ask us:
- for a copy of your personal data;
- to correct your personal data (if it is inaccurate, incomplete or not up-to-date);
- to 'port' your personal data (i.e. to transfer in a structured, commonly used and machine-readable format, to you or another data controller);
- to erase your personal data; or
- restrict its processing (i.e. processing will temporarily stop (save to the extent that personal data will continue to be stored)).
You also have rights to object to some processing that is based on our legitimate interests, and to processing for direct marketing purposes. Further, where we have asked for your consent to process your data, you are entitled to withdraw this consent as more fully described above.
These rights are limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your personal data. In some instances, this may mean that we are able to retain data even if you withdraw your consent.
Where we require your personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship with you, or to meet obligations placed on us.
We hope that we can satisfy any queries you may have about the way we process your personal data. If you have any concerns about how we process your personal data, you can get in touch at: firstname.lastname@example.org.
If you have unresolved concerns you also have the right to complain to EU data protection authorities. The relevant data protection authority will be the data protection authority of the country: (i) of your habitual residence; (ii) of your place of work; or (iii) in which you consider the alleged infringement has occurred.
How long will you hold my data?
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data [indefinitely] so that we can respect your request in future.
Where we process personal data for site security purposes, we retain it for [12 months].
Where we process personal data in connection with performing a contract or for a competition or survey, we keep the data for 6 years from your last interaction with us.
Where will you send my data?
Licklist intends to transfer (including store) your personal data to countries outside of the European Economic Area (the "EEA") (i.e. all 27 EU Member States plus Iceland, Liechtenstein and Norway) which may not provide the same level of protection as those countries within the EEA.
Where this is the case, and where the transfer is to a country or territory that is not subject to an adequacy decision by the EU Commission, personal data is adequately protected by [EU Commission-approved standard contractual clauses (which have been implemented pursuant to Article 46 (2) of the GDPR)]. If you have any questions about the [standard contractual clauses] and / or would like to obtain a copy of them, please contact us at email@example.com.