GRUPI PRIVACY NOTICE

1. The Right to Object to us Processing your Data

You have the right to object to us processing your data in the manner referred to in this policy. W here we are relying on your legitimate interest or that of a third party and there is something about your particular situation which makes you want to object to processing of the information you can do so on the grounds that you feel it impacts on your fundamental rights and freedoms. If you serve us a notice to exercise any of your rights, we will endeavour to respond to the notice within twenty-one (21) days after receipt of a notice. In our response, we will inform you (a) that we have complied or intend to comply with you notice or where we do not intend to comply with your request provide our reasons for our decision. Please note however that there may be instances we will proceed to process the said data irrespective of your objection provided we can demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

2. Request for Access to Data

You can request that we give a description of your data held by us and data about the identity of a third party or a category of a third party who has or has had access to the said data. We shall request for specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. If we need further information before responding to your request, we will contact you to ask you for the further information to speed up our response. We may request you to pay a reasonable fee for us to provide you the information requested; (c) in a reasonable manner and format; and (d) in a form that is generally understandable.

3. Right to Request a Restriction on Processing of your Data

You have the right to ask us to restrict or suspend the processing of your personal data if:

• You want us to establish the data’s accuracy; or
• Where our use of the data is unlawful, but you do not want us to erase it; or
• Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
• You have objected to our use of your data, but we need to verify whether we have overriding and legitimate grounds to continue using it.

4. Right to Rectification, Deletion and Destruction

It is important that the personal data we hold about you is accurate and current so please keep us informed if your personal data changes during your relationship with us. You have the right to request that we correct your data because it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully or that it is incompatible with the legitimate purposes for which the GRUPI obtained the said data. Further to the above, you can request that we destroy or delete a record of personal data about you that we no longer have your consent to retain. To exercise any of these rights, you must serve us with a notice in which you must state the reasons why you believe that the data we hold is inaccurate or incomplete or is being held in a manner which is incompatible with the legitimate purposes pursued by us. On receipt of the request, we shall comply with the request or provide you with credible evidence in support of the data. Where we are unable to reach an agreement, we shall attach to the record an indication that a request for the data has been made but has not been complied with. Where we comply with the request, we shall inform each person to whom the data has been disclosed of the correction made. We shall notify you of the action taken as a result of the request.