Rights Regarding Personal Information

Under certain circumstances and in accordance with EU/EEA or other applicable data protection laws (including the GDPR), an individual has the following rights:

• Access — entitled to ask if we are processing information and, if we are, request access to personal information. This enables the individual to receive a copy of the personal information we hold and certain other information about it;

• Correction — entitled to request that any incomplete or inaccurate personal information we hold is corrected;

• Erasure — entitled to ask us to delete or remove personal information in certain circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal information is required for compliance with law or in connection with claims;

• Restriction — entitled to ask us to suspend the processing of certain of personal information, for example to establish its accuracy or the reason for processing it;

• Transfer — request the transfer certain of personal information to another party;

• Objection — one may challenge when we are processing personal information based on a legitimate interest (or those of a third party) or for direct marketing purposes. However, we may be entitled to continue processing information;

• Automated decisions — contest any automated decision made where this has a legal or similar significant effect and ask for it to be reconsidered.

• Consent — where we are processing personal information with consent, withdrawal of consent. Individuals also have a right to lodge a complaint with a data protection supervisory authority, in particular in the country/province/state where you are habitually resident and where we are based or where an alleged infringement of data protection law has taken place.

To exercise any of these rights, please contact us as set forth in the “Contact” section.