• English
  • Português
  • 中文
  • Español
  • Русский

隐私政策

AirBrush隐私政策

最新修改日期:2019年4月4日

 

本隐私政策(“本政策”)旨在向您说明,在使用Airbrush APP(以下称“产品”或 “服务”)时,您应了解的内容:

一、我们如何收集和使用您的个人信息

二、我们如何使用Cookie

三、我们如何共享、转让、公开披露您的个人信息

四、我们如何保护您的个人信息

五、您的权利

六、我们如何处理未成年人的个人信息

七、您的个人信息如何在全球范围转移

八、适用法律及管辖

九、本政策如何更新

十、我们的联系方式

 

我们非常重视对您的个人信息的保护,我们也致力于维持您对我们的信任,我们承诺将按业界普遍适用的安全标准,采取相应的安全保护措施来保护您的个人信息。但需要特别说明的是,本政策不适用于其他第三方向您提供的产品或服务。如果您使用第三方提供的产品或服务,请关注第三方产品或服务的用户协议及隐私政策。

在使用我们的产品和服务前,请您务必仔细阅读并充分了解本政策。

一、我们如何收集和使用您的个人信息

1、设备信息

 

您在移动设备上使用我们的服务时,Flurry将收集您的设备识别码,而AppsFlyer将收集您的广告标识符(“IDFA”)和应用开发商标示符(“IDFV”),用于计算使用我们产品的设备数量。Flurry和AppsFlyer需要这些信息,以向美图提供唯一身份数量统计分析,包括日活跃用户数(DAU)、日活跃设备数(DAD)、月活跃用户数(MAU)、月活跃设备数(MAD)以及用户留存分析、流量转化漏斗分析、崩溃分析等其他功能。

 

更多关于Flurry的信息,请点击https://developer.yahoo.com/flurry/docs/analytics/gdpr/dsr/;更多关于AppsFlyer的信息,请点击https://www.appsflyer.com/privacy-policy/

 

 

2、崩溃日志

 

我们需要该数据统计用以提升AirBrush的用户体验,同时我们需要该数据来带给您更好的用户体验。为此,Fabric将收集您安装应用的通用唯一识别码(UUID)和崩溃痕迹,而Firebase将收集您的实例ID。此等第三方通过收集这些信息,向美图提供唯一身份产品分析。您可以选择不分享这些信息。操作方法是打开AirBrush应用上的“设置”页面,进入“个性化和数据”,关闭“产品分析”。

 

更多关于Fabric的信息,请点击https://docs.fabric.io/android/fabric/data-privacy.html,请点击https://firebase.google.com/support/privacy/

 

 

3、沟通和反馈

 

我们希望聆听您的意见,与您沟通,但在此之前,我们需要取得您的许可,允许我们使用您在发送反馈时可能提供的姓名、邮箱地址和IP地址。我们需要使用您的姓名和邮箱,以更好地评估您的反馈,找出您报告的问题。我们可能会发邮件给您,以跟踪您提供的反馈。为此,Instabug将代表我们收集您发送反馈给我们时提供的您的姓名、邮箱地址和IP地址。此为个人敏感信息,我们将采取严格的保密措施,并不会向第三方进行共享。

 

更多关于Instabug的信息,请点击https://instabug.com/dpa

 

 

4、广告

我们可能和第三方广告网络合作,在AirBrush应用里显示广告。我们的第三方合作方可能基于您的个人数据(包括设备识别码和定位信息等)向您提供广告。如果您希望选择停用基于兴趣推送的广告,您可以打开AirBrush应用上的“设置”页面,进入“个性化和数据”,关闭“个性化广告”选项。请注意,您将继续接收一般广告。

 

我们的广告网络合作方为Facebook SDK(更多信息请点击https://developers.facebook.com/docs/ios 或者https://developers.facebook.com/docs/android)、Unity AD(更多信息请点击https://unity3d.com/de/legal/privacy-policy)、Altamob(更多信息请点击https://www.altamob.com/en/index.html)、mobpower(更多信息请点击http://home.mobpowertech.com/index/privacy_policy.html)、和mobvisa(https://www.mobvista.com/en/privacy)。

 

5、美图基于其它特别情况对您的个人信息的使用

请您理解,我们向您提供的功能和服务是不断更新和发展的,如果我们要将您的个人信息用于本政策未载明的其它用途,或基于特定目的将收集的信息用于其它目的,我们将以合理的方式(例如页面提示、交互流程、网站公告等)向您告知,并在使用前再次征得您的同意。

二、我们如何使用Cookie

为保证网站正常运行,为帮助您获得更轻松的访问体验,并向您推荐您可能感兴趣的信息,我们会在您的计算机或移动设备上存储名为Cookie的小数据文件。Cookie通常包含标识符、站点名称以及一些号码及字符。借助于Cookie,网站能够存储您的偏好等数据,以此帮助您免去重复填写个人信息、输入历史搜索内容等繁琐;同时我们还可能利用上述技术为您推荐、展示、推送您感兴趣的内容。您可根据自己的偏好管理或删除Cookie,您也可以清除计算机上保存的所有 Cookie。有关详情,请参见AboutCookies.org。我们不会将 Cookie 用于本政策所述目的之外的任何用途。大部分网络浏览器都设有阻止Cookie的功能,您可以通过浏览器设置选项清除计算机上保存的所有Cookie,但如果您这么做,可能会导致您在每一次访问我们的网站时都需要亲自更改用户设置。

三、我们如何共享、转让、公开披露您的个人信息

1、共享

我们不会与任何公司、组织、个人分享您的个人信息,但以下情况除外:

1在获取明确同意的情况下共享:获得您的明确同意后,我们会与其他方共享您的个人信息。

2在法定条件下共享:我们可能会根据法律法规规定、诉讼争议解决需要、按照政府主管部门或司法机关依法提出的强制要求,对外共享您的个人信息。

3)在法律要求或允许的范围内,为了保护美图及其用户或社会公众的利益、财产或安全免遭损害而有必要提供您的个人信息给第三方;

4与我们的关联公司共享:您的个人信息可能会与我司(厦门美图网科技有限公司)的关联公司进行共享,我们只会在为实现向您提供本产品相关功能和服务的目的下共享必要的个人信息且受本隐私政策所声明目的的约束。关联公司若要改变个人信息的处理目的,将再次征求您的授权同意。我们的关联公司包括:厦门鸿天创视科技有限公司;厦门美图之家科技有限公司及其分、子公司;厦门美图移动科技有限公司及其分、子公司等。我司及我司关联公司合称“美图”。

5与授权合作伙伴共享:仅为实现本政策中声明的目的,我们的某些服务将由授权合作伙伴提供。如推广服务、产品分析服务、技术支持服务。我们可能会与合作伙伴共享您的某些个人信息,以提供更好的客户服务和用户体验。我们仅会出于合法、正当、必要、特定、明确的目的共享您的个人信息,并且只会共享提供服务所必要的个人信息;同时,对我们与之共享个人信息的公司、组织和个人,我们会与其签署严格的保密协议,要求其按照我们的隐私政策以及其他任何相关的保密和安全措施来处理个人信息。我们的合作伙伴无权将共享的个人信息用于任何其他用途。如果您拒绝我们的合作伙伴在提供服务时收集或使用为提供服务所必须的个人信息,将可能导致您无法使用该第三方服务。

2、转让

我们将不会将您的个人信息转让给任何公司、组织和个人,但以下情况除外:

1在明确获得您的同意的前提下,我们会向其他方转让您的个人信息;

2在涉及合并、收购或破产清算时,如涉及到个人信息转让,我们会在要求新的持有您个人信息的公司、组织等主体继续接受此隐私政策的约束,如果本政策约定的个人信息的收集、处理方式、使用目的等发生改变,我们将要求该公司、组织等主体重新向您征求授权同意。

3、公开披露

我们仅会在以下情况下,收集或公开披露您的个人信息:

1获得您明确的同意后;

2基于法律法规、司法机关或行政主管部门的强制性要求,我们可能会披露您的个人信息。

4、不经授权收集、共享、转让或公开披露个人信息的例外

根据相关法律法规的规定,在以下情形中,我们可以在不征得您的授权同意的情况下收集、共享、转让或公开披露您的个人信息。

  1. 与国家安全、国防安全等国家利益直接相关的;
  2. 与公共安全、公共卫生、公众知情等重大公共利益直接相关的;
  3. 与犯罪侦查、起诉、审判和判决执行等直接相关的;
  4. 出于维护您或其他个人的生命、财产、声誉等重大合法权益但又很难得到本人同意的;
  5. 根据您要求签订和履行合同所必需的;
  6. 用于维护所提供的产品或服务的安全稳定运行所必需的,例如发现、处置产品或服务的故障;
  7. 出于公共利益开展统计或学术研究所必要,且其对外提供学术研究或描述的结果时,对结果中所包含的个人信息进行去标识化处理的;
  8. 从合法公开披露的信息中收集到的个人信息的,如合法的新闻报道、政府信息公开等渠道;
  9. 法律法规规定的其他情形。

四、我们如何保护您的个人信息

1我们已使用符合业界标准的安全防护措施保护您提供的个人信息, 防止数据遭到未经授权访问、公开披露、使用、修改、损坏或丢失。我们会采取一切合理可行的措施,保护您的个人信息。例如,在您的浏览器与 “服务”之间交换数据时受 SSL 加密保护;我们对产品提供的配套Web服务提供HTTPS 安全访问方式;我们会使用加密技术确保数据的保密性;我们会使用受信赖的保护机制防止数据遭到恶意攻击;我们会部署访问控制机制,确保只有授权人员才可访问个人信息;以及我们会举办安全和隐私保护培训课程,加强员工对于保护个人信息重要性的认识。

2、我们会采取一切合理可行的措施,确保未收集无关的个人信息。我们承诺将使您的个人信息存储时间始终处于法律要求或实现产品功能和服务所需的合理必要的期限内。对于超出期限的个人信息,我们会立即删除或做匿名化处理。

3互联网并非绝对安全的环境,而且电子邮件、即时通讯、及与其他用户的交流方式并未加密,我们强烈建议您不要通过此类方式发送个人信息。请使用复杂密码,协助我们保证您的账号安全。

4互联网环境并非百分之百安全,我们将尽力确保或担保您发送给我们的任何信息的安全性。

5在不幸发生个人信息安全事件后,我们将按照法律法规的要求,及时向您告知:安全事件的基本情况和可能的影响、我们已采取或将要采取 的处置措施、您可自主防范和降低风险的建议、对您的补救措施等。我们将及时将事件相关情况以邮件、信函、电话、推送通知等方式告知您,难以逐一告知个人信息主体时,我们会采取合理、有效的方式发布公告。 同时,我们还将按照监管部门要求,主动上报个人信息安全事件的处置情况。

五、您的权利

按照中国相关的法律、法规、标准,我们保障您对自己的个人信息行使以下权利:

1、访问、删除、更正您的个人信息或撤回部分授权

您可于【Airbrush】-【设置】-【个性化和数据】中撤回您的部分授权,如:

  • 选择是否开启产品性能及用户体验功能。如您开启该功能,我们将收集您的闪退数据,这可以帮助我们发现技术问题并加以解决;同时我们将共享您的使用数据以及APP功能使用等统计信息,可以让我们更好地改善用户体验及功能。这些数据内容可能包含您的IP地址和设备标识符。以上所有数据都将仅作为内部使用,以便我们提升用户体验,并为您展示更多相关内容。我们绝不会向任何第三方披露上述数据。
  • 选择是否打开交流反馈。我们需要收集您的某些个人信息(如电子邮件地址、IP地址等),以回复您的消息,并及时处理您反馈的技术问题。
  • 选择是否打开个性化广告体验。我们将通过与广告合作伙伴,为您展示更个性化的推荐。如您打开个性化体验,即表示您同意我们的广告合作伙伴收集和处理您的个人信息,包含设备标识符和位置数据等,以便更好地为您呈现根据您的需求专门订制的广告体验。

但请您理解并同意,当您撤回某些授权时,将导致与之相关的产品功能不可用,我们无法继续为您提供撤回同意或授权所对应的特定功能和/或服务,并且您撤回授权的决定不会影响此前基于您的授权而开展的个人信息处理。

2、对于您的权利要求的响应

为保障安全,在您提出上述权利主张时,您可能需要提供书面请求,或以其他方式证明您的身份。我们将在验证您的身份后再处理您的请求。一般情况下,我们将在【15】天内做出答复。对于您合理的请求,我们原则上不收取费用,但对多次重复、超出合理限度的请求,我们将酌情收取一定费用。对于与您的身份不直接关联的信息、无端重复信息,或者需要过多技术手段(例如,需要开发新系统或从根本上改变现行惯例)、给他人合法权益带来风险或者不切实际的请求,我们可能会予以拒绝。

在以下情形中,按照法律法规要求,我们将无法响应您的请求:

1、与国家安全、国防安全有关的;

2、与公共安全、公共卫生、重大公共利益有关的;

3、与犯罪侦查、起诉、审判和执行判决等有关的;

4、有充分证据表明个人信息主体存在主观恶意或滥用权利的;

5、响应您的请求将导致您或其他个人、组织的合法权益受到严重损害的;

6、涉及商业秘密的。

六、我们如何处理未成年人的个人信息

  1. 我们特别重视未成年人的个人信息的保护。如果您为14周岁以下的未成年人,在使用我们的产品和/或服务前,请您务必在监护人的陪同下阅读本政策,并确保已征得您的监护人明确同意后,再使用我们的服务并向我们提供您的个人信息。
  2. 对于经监护人同意使用我们的产品或服务而收集未成年人个人信息的情况,我们只会在法律法规允许、监护人明确同意或者保护未成年人所必要的情况下使用、共享、转让或披露此信息。
  3. 如果您的监护人不同意您按照本政策使用我们的服务或向我们提供个人信息,请您立即终止使用我们的服务并及时通知我们。
  4. 如果您对您所监护的未成年人使用我们的产品/服务或其向我们提供的用户信息有任何疑问时,请您及时与我们联系。

七、您的个人信息如何在全球范围内转移

我们会按照法律法规的规定,将中华人民共和国境内(以下简称“中国”)收集的用户个人信息存储于中国境内。

由于我们通过遍布全球的资源和服务器向用户提供产品或服务,这意味着,在获得您的授权同意后,您的个人信息可能会被转移到您使用产品或服务所在国家/地区的境外管辖区,或者受到来自这些管辖区的访问。

此类管辖区可能设有不同的数据保护法,甚至未设立相关法律。在此类情况下,我们会确保您的个人信息得到在中华人民共和国境内足够同等的保护。例如,我们会请求您对跨境转移个人信息的同意,或者在跨境数据转移之前实施数据去标识化等安全举措。

八、适用法律及管辖

本隐私政策适用中华人民共和国大陆地区法律。本隐私政策项下争议,由被告住所地法院管辖。

九、本政策如何更新

我们的隐私政策可能会根据业务的调整、法律法规或政策的变化而适时变更。未经您明确同意,我们不会削减您按照本隐私政策所应享有的权利。我们会在专门页面上发布对本政策所作的任何变更。对于重大变更,我们会在产品或服务内通过弹窗、推送等方式向您提示。

若您不同意修改后的隐私政策,您有权并应立即停止使用我们的产品和/或服务。如果您继续使用我们的产品和/或服务,则视为您接受我们对本政策相关条款所做的修改。

本政策所指的重大变更包括但不限于:

1我们处理个人信息的目的、处理个人信息的类型、个人信息的使用方式等发生变化;

2您参与个人信息处理方面的权利及其行使方式发生变化;

3个人信息安全影响评估报告表明存在风险时。

十、我们的联系方式

我公司为在中华人民共和国境内成立的【厦门美图网科技有限公司】,注册地址: 厦门市软件园二期望海路6号楼302单元。

如果您对本政策内容有任何疑问、意见、建议或进行申诉,您可通过以下方式联系我们:请发送电子邮件至个人信息保护专员邮箱:legal@meitu.com,也可以挂号信方式寄送至:中华人民共和国厦门市思明区软件园二期望海路6号楼2单元1-3层(收件人:美图公司-法务部)。

Information Collected by Third Party Services

Please note that the AirBrush app provided to you contains our service provider’s Application Programming Interfaces (APIs) or Software Development Kits (SDKs), which have tracking tools of such service providers. It is these third parties use APIs and SDKs on AirBrush to collect, store, use, and manage user information. Meitu will not collect, store, manage your information. The third parties may provide Meitu with certain statistic data which must be based on certain user information, and these third parties decide which kind of user information needed in order to get the statistic data, also they decide the means of the processing of user information. That’s means, Meitu only decide which third party’s SDKs or APIs are going to be contained in the AirBrush app and what statistic data it needs; it is these third parties who decide which kind of information will be collected and how the information will be processed.

Device Information

When you use our Services on your mobile device, Flurry will collect your device identifiers, and AppsFlyer will collect your Identifier for Advertising (“IDFA”) and Identifier for Vendor (“IDFV”), which they will use to calculate the number of devices that use our product. These third parties need such information to provide Meitu with unique count analytics such as Daily Active Users (DAU), Daily Active Devices (DAD), Monthly Active Users (MAU), Monthly Active Devices (MAD) and features such as Retention, Funnels, Crash, and others.

For more information about Flurry, please click https://developer.yahoo.com/flurry/docs/analytics/gdpr/dsr/, and for more information about AppsFlyer, please click https://www.appsflyer.com/privacy-policy/ .

Crash Data

We need data to count the number of users which can help Meitu improve AirBrush, meanwhile, we need the data to bring you better user experience. For the purpose of above, Fabric will collect your Installation UUID and Crash traces, Firebase will collect your Instance IDs. By collecting such information can these third parties provide Meitu with unique product analytics. You may choose not to share this information. To do so, open settings on your AirBrush app, tap Personalization & Data and turn off the switch of Product Analytics.

For more information about Fabric, please click https://docs.fabric.io/android/fabric/data-privacy.html, For more information about Firebase, please click https://firebase.google.com/support/privacy/ .

Communication and Feedbacks

We would love to hear from you and talk with you, but before we do, we need to get your approval for use of your name, email address and IP address you may provide as you send the feedback. We need your name, email address to better assess your feedback and identify the problems if you’re reporting one. We may send you emails to follow up on your feedback if you provide one. For this purpose, your name, email and IP address when you send your feedback to us will be collected by Instabug on our behalf.

For more information about Instabug, please click https://instabug.com/dpa.

Advertisement

We may partner with an ad network third party to display advertising within the AirBrush app. Our third-party partners may provide you advertising based on your personal data such as device identifiers and location information. If you wish to opt out of interest-based advertising, you could open settings on your AirBrush app, tap Personalization & Data and turn off the switch of Personalized Ads. Please note you will continue to receive generic ads.

Our partner ad networks are Facebook SDK (for more information please click https://developers.facebook.com/docs/ios or https://developers.facebook.com/docs/android) Unity AD (for more information please click https://unity3d.com/de/legal/privacy-policy) Altamob (for more information please click https://www.altamob.com/en/index.html), mobpower (for more information please click http://home.mobpowertech.com/index/privacy_policy.html) and mobvista (https://www.mobvista.com/en/privacy).

Information Sharing and Disclosure

We make sure the third parties will not share with or disclose to other third parties (other than our service providers) your personal information in whole or in part except for the purposes of:

(i)     protecting the security of others or their property;

(ii)    preventing or dealing with Internet fraud;

(iii)   safeguarding the legitimate rights and interests of Meitu;

(iv)   taking action in line with our purposes as described in the “The Information We Collect” section, provided that recipient of any such disclosure by us is also bound by this Policy and can provide adequate protection for your information; and/or

(v)    complying with laws and regulations or requests by government departments or judicial authorities, which are typically designed to uphold Internet security and the rights, property and safety of us, our users and third parties.

Information Security

We and third parties will take reasonable measures to prevent the loss, improper use of, unauthorized access to or disclosure of information. For example, some of our Services will use encryption techniques (such as SSL) to protect your personal information. However, you understand and accept that (in the Internet industry) even though we and third parties will take all possible security measures, we cannot always guarantee that your information is 100% secure. We and third parties do not accept liability for unintentional disclosure. You understand and accept that the system and communication network used by you to access our Services may fail due to factors beyond our control.

Information Access and Control

We will take all reasonable and appropriate technical measures to ensure that you can access, update and correct your personal information or other personal information provided to us by you when using our Services. Before you access, update, correct or remove such personal information, we may verify your identity in order to protect the security of your account. You may access to your information by sending your request to support@appairbrush.com.

Data Retention and Correction, Update and Deletion

Subject to applicable laws and regulations and the fulfillment of our business purpose, the third parties will retain your information (including your personal information) for such period as is required for us to continue to provide you with our Services. If you wish to exercise your rights under GDPR or other applicable laws, or wish the third party to correct, update or delete your personal information, you may send an email to data-request@appairbrush.com or send a mail to 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong (attention: Legal Department, Meitu). We will process your request within a reasonable period of time after receiving your email or mail, and will make third parties cease collecting, using and disclosing your personal information thereafter, subject to certain exceptions prescribed by law. Please note that if you withdraw your consent or delete your personal information, your use of some of our Services may be influenced.

Information about Children

The third parties will not knowingly collect or request personal information from children under 13 (or any other age stipulated by law applicable to your region). If you are under 13, please do not send your personal information to us or third parties, including your name, address, phone number or email address. If you believe we may have any information about children under 13, you may send an email to compliance@meitu.com or send a registered mail to 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong (attention: Legal Department, Meitu). If we learn that we have collected personal information from children under 13 (or any other age stipulated by law applicable to your region), we will promptly take steps to delete such information.

Governing Law

This Policy is established, comes into force, and will be enforced and interpreted under the laws of Hong Kong Special Administrative Region of the People’s Republic of China, without regard to its conflict of law provisions. Any disputes arising hereunder will also be resolved in accordance with the Terms of Service. We do not represent or warrant that this Policy complies with the privacy law of any jurisdiction. Therefore, you should not interpret this Policy in accordance with such law.

Amendments to this Policy

You agree that we may update this Policy according to relevant laws and regulations or based on Meitu’s business decisions, and you agree to be bound by any such revisions hereto. We will post any significant changes to this Policy on AirBrush or notify you by other means accordingly.

If You Are a Resident of California

If you are a resident of California, every year we will provide you free of charge with an opportunity to obtain a list of third parties to which we have disclosed or with whom we have shared your personal information for their direct marketing purposes during the previous year. If you are a resident of California and wish to obtain this list, you may send an email with the subject “The right to privacy of a California resident” to compliance@meitu.com or send a registered mail to 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong (attention: Legal Department, Meitu).

Additional Information for users in the European Union

If you are in the European Union the following applies in addition to the information given in this Privacy Policy above.

Controller

The Controller for the purposes of Art. 4 no. 7 GDPR with respect to the processing outlined in this Policy is Meitu (China) Limited, 8106B, Level 81, International Commerce Centre, 1 Austin Road West, Kowloon, Hong Kong. You may contact us via registered mail at the above address (attention: Legal Department, Meitu) or via e-mail at compliance@meitu.com.

Representative

Our representative in the European Union is Rivacy GmbH, you may contact our representative via e-mail at info@rivacy.eu or via registered mail at Rivacy GmbH, Hammerbrookstraße 90,20097 Hamburg.

Legal Basis of the Processing

The legal basis for the processing of your personal data listed in section “Device Information” is the performance of a contract with you or the taking of steps at your request prior to entering into a contract (Art. 6 para. 1 lit. b) GDPR). The provision of this information is necessary. Without such information we cannot provide you the respective services.

The legal basis for the processing of your personal data listed in section “Crash Data” is our legitimate interest in optimizing our products and services (Art. 6 para. 1 lit. f) GDPR). The provision of this data is not necessary to enter into a contract.

The legal basis for the processing of your personal data listed in section “Communication and Feedbacks” is the performance of a contract with you or the taking of steps at your request prior to entering into a contract (Art. 6 para. 1 lit. b) GDPR). The provision of this information is necessary. Without such information we cannot provide you the respective services.

The legal basis for the processing of your personal data listed in section “Advertisement” is our legitimate interest in optimizing our products and services and to provide you with location-based advertisement (Art. 6 para. 1 lit. f) GDPR). The provision of this data is not necessary to enter into a contract.

Your rights as a Data Subject

As a data subject in the European Union you have the following rights with regard to the processing of your personal data:

Right of access

As a data subject you have the right to obtain confirmation from us as to whether we are processing your personal data (Art. 15 para. 1 GDPR). If so, you also have the right to obtain access to the personal data and the information listed in Art. 15 para. 1 GDPR. This includes information regarding the purposes of the processing, the categories of personal data that are being processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed.

Right to rectification

As a data subject, you have the right to rectification set out in Art. 16 GDPR, i.e. to have your inaccurate data processed by us rectification and incomplete personal data completed.

Right to erasure (“right to be forgotten”)

As a data subject, you have a right to obtain from us the erasure of your personal data and we are obliged to erase your personal data without undue delay when one of the reasons listed in Art. 17 para. 1 GDPR applies. This can be the case, for example, if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (Art. 17 para. 1lit. a) GDPR).

If we have made the personal data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data (Art. 17 para. 2 GDPR).

The right to erasure (“right to be forgotten”) does not apply if the processing is necessary for one of the reasons listed in Art. 17 para. 3 GDPR. This can be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims (Art. 17 para. 3 lit. a) and e) GDPR).

Right to restriction of processing

As a data subject, you have a right to obtain from us the restriction of processing if one of the conditions provided in Art. 18 para. 1 GDPR applies. This can be the case, for example, if you contest the accuracy of the personal data. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the personal data (Art. 18 para. 1 lit. a) GDPR).

Restriction means that stored personal data are marked with the goal of restricting their future processing (Art. 4 para. 3 GDPR).

Right to data portability

As a data subject, you have a right to receive your personal which you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us if the processing is based on consent pursuant to point Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and the processing is carried out by automated means (Art. 20 para. 1 GDPR).

To verify whether our processing is based on consent pursuant to point Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR please refer to the section “Legal Basis of the Processing” of this Privacy Notice above.

In exercising your right to data portability, you also generally have the right to have your personal data transmitted directly from us to another controller if technically feasible (Art. 20 para. 2 GDPR).

Right to object

As a data subject, you have a right to object under the conditions provided in Art. 21 GDPR.

Right to object on grounds relating to the particular situation of the data subject

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 para. 1, lit. e) or f) GDPR including profiling based on those provisions.

To verify whether our processing is based on Art. 6 para. 1, lit. e) or f) GDPR, please refer to the section “Legal Basis of the Processing” of this Privacy Notice above.

In the event of an objection relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Right to object to direct marketing

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, we no longer process your personal data for these purposes.

Right to withdraw consent

Where our processing of your personal data is based on your consent, you have the right, pursuant to Art. 7 para. 3 GDPR, to withdraw your consent at any time. The withdrawal of your consent does not affect the legitimacy of the processing that occurred based on your consent until the withdrawal.

To verify whether our processing is based on consent pursuant to point Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR please refer to the section “Legal Basis of the Processing” of this Privacy Notice above.

Right to lodge a complaint with a supervisory authority

As a data subject, you have a right to lodge a complaint with a supervisory authority under the conditions provided in Art. 57 para. 1 lit. f) GDPR.

Additional Information on Your Rights as a Data Subject

For further information on your rights as a data subject please refer to Art. 12 to 21 GDPR, which can be accessed here: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.