This section of our Privacy Policy provides certain required information to persons located in the European Union (“EU”), a European Economic Area (“EEA”) member state, United Kingdom (“UK”), or Switzerland, as well as persons whose personal information is processed in or transferred from the EU, EEA, UK, or Switzerland. Before Asset-Map collects any personal information, as defined by the General Data Protection Regulation (“GDPR”), you are entitled to the information in this section of our Privacy Policy as required by the GDPR.
You are entitled by law to access, correct, amend, or delete personal information about you that we hold. A summary listing these rights appears below. Please note that these rights are not absolute and certain exemptions may apply to specific requests that you may submit to us.
To exercise these rights, please contact us using the information below in the “Contact Us” section. For your protection, we may need to verify your identity before responding to your request. In the event that we refuse a request, we will provide you a reason as to why.
Asking us to access your personal information
You have the right to obtain from us confirmation as to whether or not we are processing personal information about you, and if so, the right to be provided with the information contained in this notice. You also have the right to ask us for copies of your personal information. When making a request, please provide an accurate description of the personal information to which you want access. Where requests are repetitive or manifestly unfounded or excessive, we may charge a reasonable fee based on administrative cost.
Asking us to rectify your personal information
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Asking us to delete your personal information
You have the right to ask us to erase your personal information if:
- We no longer need it for the purposes for which we collected it;
- We have been using it with no valid legal basis;
- We are obligated to erase it to comply with a legal obligation to which we are subject;
- We need your consent to use the information and you withdraw consent; or
- You object to us processing your personal information where our legal basis for doing so is our legitimate interests and there are no overriding legitimate grounds for the processing.
However, this right is not absolute. Even if you make a request for deletion, we may need to retain certain information for legal or administrative purposes, such as record keeping, maintenance of opt-out requirements, defending or making legal claims, or detecting fraudulent activities. We will retain information in accordance with the “How Long Is Your Personal Information Kept” section below.
If you do exercise a valid right to have your personal information deleted, please keep in mind that deletion by third parties to whom the information has been provided might not be immediate and that the deleted information may persist in backup copies for a reasonable period (but will not be available to others).
Asking us to restrict our use of your personal information
You have the right to ask us to place a restriction on our use of your personal information if one of the following applies to you:
- You contest the accuracy of the information that we hold about you, while we verify its accuracy;
- We have used your information unlawfully, but you request us to restrict its use instead of erasing it;
- We no longer need the information for the purpose for which we collected it, but you need it to deal with a legal claim; or
- You have objected to us using your information, while we check whether our legitimate grounds override your right to object.
The right to transfer your personal information to another service provider
You have the right to ask that we transfer the personal information you gave us from one organization to another, or give it to you (i.e. data portability). This applies to personal information we are processing to service a contract with you and to personal information we are processing based on your consent.
The right to withdraw consent
If we obtain your written consent to collect and process your personal information, you can subsequently withdraw such consent as to any further processing of such information.The right to lodge a complaint with a supervisory authorityIf you believe your rights under the GDPR have been violated, the GDPR gives you the right to file a complaint with your supervisory authority. A list of supervisory authorities is available here:EEA and EU Data Protection Authorities (DPAs); Swiss Federal Data Protection and Information Commissioner (FDPIC); UK Information Commissioner’s Office (ICO).
Rights related to automated decision-making
To the extent that we engage in decision-making based solely on automated processing, including profiling, which produces legal effects concerning you or which significantly affects you, you have the right not to be subject to such decision-making.
Right to object to processing
You have the right to object to the processing of your personal information that is based on legitimate interests or your consent (rather than when the reason for using it is to perform an obligation due to you under a contract with us). If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or we can demonstrate the processing is for the establishment, exercise, or defense of legal claims. You can object to the processing of your personal information by contacting us using the information in the “Contact Us” section below.
Legal Bases for Processing Your Personal Information
Asset-Map collects your personal information to provide our products and services to you; otherwise, we may not be able to process the transactions you request. We will only process your personal information when we have a lawful basis for doing so. If you are in a country in the EU, EEA, UK, or Switzerland, you are entitled to an explanation of the legal bases we rely on to process your personal information. The legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it, which is discussed below.
- Consent. We may process your personal information based on your consent such as when you purchase a service or ask us to send you certain kinds of marketing communications. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.
- Children’s Consent. We do not knowingly process data of EU, EEA, UK, or Swiss residents under the age of 16 without reasonably verified parental consent.
- Our Legitimate Interests. We may process your personal information if doing so is necessary for our legitimate interests relating to our business purposes arising from your relationship with us, and your rights as an individual do not override those legitimate interests. For example, our legitimate interests include but are not limited to when we process your personal information to carry out fraud prevention activities and activities to increase network and information security, identify usage trends, determine the effectiveness of promotional campaigns, expand our business activities and improve our services and the content and functionality of our Services. Our legitimate interests also include providing you with the products and services you request, view, engage with, or purchase and communicating with you regarding your account or transactions with us.
- To Perform a Contract. We may process your personal information to administer and fulfill contractual obligations to you. We will also collect and process your personal information as necessary for the performance of a contract to which you are a party.
- To Enable Us to Comply With a Legal Obligation. We may process your personal information to comply with legal obligations to which we are subject. This may include any requirement to produce audited accounts, any legal obligation to share information with law enforcement agencies, public or governmental authorities, and to comply with legal process.
- Necessary for the Exercise or Defense of Legal Claims. If you bring a claim against us or we bring a claim against you, we may process your personal information in relation to that claim.
Depending on the situation, we may be the controller or the processor for personal information collected from residents of the EU, EEA, UK or Switzerland. If you have any questions about or need further information concerning the legal basis on which we collect and use your personal information for any specific processing activity, please contact us using the “Contact Us” section below.