GDPR / UK GDPR data subject rights

This page summarises your rights as a data subject under the EU General Data Protection Regulation (Regulation 2016/679) and the UK GDPR. For the full description of how we process personal data, see our Privacy Policy and Data Processing Agreement.

Your rights

• Right of access (Art. 15): obtain confirmation of whether we process your personal data, and a copy of that data.
• Right to rectification (Art. 16): correct inaccurate or complete incomplete data.
• Right to erasure (Art. 17): have your data deleted in defined circumstances.
• Right to restrict processing (Art. 18): suspend processing while a dispute is resolved.
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
• Right to object (Art. 21): object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making (Art. 22): request human review of decisions that produce legal or similarly significant effects (we do not make such decisions on the marketing site).

How to exercise your rights

Email [email protected]. We will acknowledge within five business days and respond substantively within one calendar month (extendable by two months for complex requests).

Lodging a complaint

You have the right to lodge a complaint with the supervisory authority in the Member State of your habitual residence (in the UK: the Information Commissioner’s Office at ico.org.uk).

International transfers

Where we transfer your personal data outside the EEA / UK, we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.