Your rights as a data subject
The new General Data Protection Regulation lays down a number of rights that you, as a citizen of Europe, can exercise. Some of these rights already existed, but they have been strengthened. New ones have also been added.
Right to information on processing
Organisations are obliged to inform the public about the processing of personal data. You have the right to know what happens to your data and why. This applies to any new processing. IssueTissue® will always inform you when your details are collected and what happens to them. This can also be done in the form of information on our website. We only need to inform you again if it has been established that you were informed, for example by sending an e-mail to an e-mail address specified by yourself.
Right of access and rectification
If you wish, you can ask us whether your personal data are being processed automatically and what data they contain. You are not obliged to explain your request for inspection. In addition, as a parent or legal representative, you may make an access request for children up to the age of 16. Incidentally, offline data is also covered by the right of inspection, with the exception of data from documents that have already been stored in an archive repository.
You also have the right to ask us to amend, supplement, delete or block data that is factually incorrect, incomplete, irrelevant or is used or collected in a way that contravenes the law.
We must also inform external parties who work with your details on behalf of IssueTissue®, and we will of course inform you as a data subject about this.
Right to be forgotten
There was already a right to rectification and deletion, but it is now called the right to be forgotten. Furthermore, your rights in this area have been extended. Thus, the right is no longer limited to the deletion of objectively incorrect data, incomplete data or data that is no longer relevant.
You may have your personal data deleted if:
Of course, we will also pass this on to third parties who work with the data on our behalf and, of course, to you as a data subject.
- the data are no longer necessary for the purpose for which they were collected or processed.
- You withdraw your consent to processing or you object to processing.
- We have processed your data unlawfully.
- password data must be deleted on the basis of a rule of Union or national law.
- it concerns data of children younger than 16 years.
Right to object
You can ask us to stop using your personal data. We call this the right to object. You may ask us to do so if we use your data for marketing purposes, but also if you have special personal reasons for doing so, for example if you do not want someone who works for us to be able to view your ‘sensitive’ data. We must then decide within four weeks whether we will stop using the data.
Right to data portability
The right to portability, data portability, means that personal data must be able to be transferred easily, for example if you want to switch. A consumer may ask an organisation to transfer his digital personal data directly. This only concerns digital personal data that has been collected and processed with or without your consent. We are obliged to provide the data in a form that can be easily reused by another organisation. We may use a so-called API link (application programming interface) for this purpose. The link enables a connection between the system or application of IssueTissue® and that of a third party, for example Post NL.
Rights of data subjects in profiling
Profiling is another word for the automated processing of personal data. As a consumer, you have the right not to participate in profiling for marketing purposes. For example, on the basis of information collected, a profile of you can be made which can be used to predict your purchasing behaviour. For example, on the basis of your profile, specific offers can be mailed to you. If you do not appreciate this, you can object. We are obliged to immediately cease processing your data for direct marketing purposes.
Withdrawal of consent
What you will notice most from the General Data Protection Regulation is that we will inform you much more than before about our data processing. And we are now also obliged to ask you for your prior consent. And this will be done differently than in the past. For example, a page where we ask for your permission and where we have already ticked the permission box in advance is no longer legally valid. From now on, you will have to put a tick in the box yourself, or give IssueTissue® active permission for a specific action or processing of your personal details. Before the AVG, a so-called pre-ticked box was sufficient. You are always free to withdraw your consent.
Do you want to exercise one of your rights? Then you can submit your request and e-mail it to firstname.lastname@example.org
Or in writing via
Jan Camperstraat 5 – Building 5 Unit 0.19 – NL 6416 SG Heerlen
You may also call us. We can be reached at telephone number: +31 70 363 09 18