Your GDPR Rights

1. Right to Be Informed

You have the right to be informed about how we collect, use, and process your personal data. We provide this information through our Privacy Policy and Terms and Conditions.

2. Right of Access

You have the right to request access to your personal data. This means you can ask us for:

• Confirmation that we are processing your personal data
• A copy of the personal data we hold about you
• Information about how we use your personal data

We will provide this information in a commonly used electronic format (such as CSV or JSON) within 30 days of your request.

3. Right to Rectification

You have the right to have inaccurate or incomplete personal data corrected. If you notice any errors in your personal information, you can:

• Update your account information directly in your account settings
• Contact us to request corrections

We will make the corrections within 30 days and notify any third parties with whom we have shared your data (if applicable).

4. Right to Erasure ("Right to be Forgotten")

You have the right to request that we delete your personal data in certain circumstances, including when:

• The data is no longer necessary for the purpose it was collected
• You withdraw your consent (where consent was the legal basis)
• You object to the processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

Note: We may not be able to delete your data if we have a legal obligation to retain it (e.g., financial records for tax purposes, which we must keep for 7 years).

5. Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain situations, such as when:

• You contest the accuracy of the data (during the verification period)
• The processing is unlawful but you don't want the data erased
• We no longer need the data but you need it for legal claims
• You have objected to processing (pending verification of whether our legitimate grounds override yours)

When processing is restricted, we can still store your data but cannot use it without your consent (except for legal claims or protection of others' rights).

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON). You can also request that we transfer your data directly to another service provider where technically feasible.

This right applies when:

• The processing is based on your consent or a contract
• The processing is carried out by automated means

7. Right to Object

You have the right to object to processing of your personal data when:

• Processing is based on legitimate interests or the performance of a task in the public interest
• Processing is for direct marketing purposes
• Processing is for scientific, historical research, or statistical purposes

Direct Marketing: You have an absolute right to stop your data being used for direct marketing. You can unsubscribe from marketing emails at any time using the unsubscribe link in our emails.

8. Rights Related to Automated Decision Making and Profiling

You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal effects or similarly significantly affect you.

Note: We do not currently use automated decision-making or profiling that produces legal effects or similarly significantly affects you. If this changes in the future, we will inform you and provide information about your rights.