If you wish to exercise your rights, please contact FOA’s Data Protection Officer (DPO).
3.1 Access to your data
You have the right to be informed, at any time, about which personal data we process about you, where it originated and what we use it for. You can also receive information about how long we store your personal data and who receives personal data about you, insofar as we disclose data.
3.2 Rectification of your data
If you believe that the personal data we process about you is incorrect or inaccurate, you have the right to have it rectified. You will need to contact FOA’s Data Protection Officer (DPO) and inform us about the inaccuracies and how they can be rectified.
3.3 Erasure of your data
In some cases, we will have an obligation to erase your personal data. This may be the case, for example, if you choose to withdraw your consent or unsubscribe. You can also request that your personal data be erased if you believe that it is no longer necessary for the purpose for which we obtained it. You can also contact FOA’s Data Protection Officer (DPO) if you believe that your personal data is being processed in violation of legislation or other legal obligations.
When you contact us with a request to rectify or erase your personal data, we will check whether the conditions are met and, if they are, we will implement changes or erasure as soon as possible.
We will only store your personal data for as long as we have a purpose for doing so. As a basic principle, you have the right to have your personal data erased, but there may be cases where FOA has the right to store your personal data, because of legal requirements, for example.
The right to have your personal data erased is intended to protect your right to privacy. The assessment of the storage of your personal data will include whether such storage involves a real risk of infringing on your right to the protection of your privacy.
The more sensitive the personal data – individually or in combination with general information – the more overriding is your interest in having the personal data erased. In some cases, legislation may require us to store personal data for a longer period, because of logging, bookkeeping or auditing requirements, for example.
3.4 Objection and restriction
You have the right to object to our processing of your personal data. If your objection is justified, we will ensure that we stop processing your personal data.
You have the right for the processing of your personal data to be restricted, in certain cases. If you have the right to have your processing restricted, we will in future only be able to process the data – with the exception of storage – with your consent or for the establishment, exercise or defence of legal claims, or for the protection of a person or important public interests.
3.5 Transfer of your data
In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to transfer this personal data from one controller to another without hindrance; this is known as data portability.