12.2 Your right to access, rectification, erasure and restriction
12.2.1 You have the right to request:
a) Access to your personal data. This means that you have the right to request access to personal data that we hold about you. You also have the right to be provided, at no cost, with information about which personal data we are processing about you. We have the right to charge a reasonable administration fee if you request further copies. If you make a request by electronic means, e.g. via email, we will provide you with the information in commonly used electronic format.
b) Rectification of your personal data. At your request or on our own initiative, we will correct, anonymize, delete or complete data that we know to be inaccurate, incomplete or misleading. Also, you have the right to complete any incomplete personal data if something relevant is missing.
c) Erasure of your personal data: You have the right to request that we erase your personal data if there is no compelling reason for us to continue processing the data. Compelling reasons for use to continue processing may be:
i. Processing is necessary for the right of freedom of expression and information,
ii. Processing is necessary to comply with a legal obligation,
iii. Processing is necessary for reasons of public interests in the area of public health,
iv. Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes or
v. Processing is necessary for the establishment, exercise or defense of legal claims.
Your personal data will be erased if none of the circumstances above are applicable and if:
vi. The personal data is no longer needed for the purpose for which we collected them,
vii. We process your personal data based on your consent and you withdraw your consent,
viii. You object to us processing your personal data which is based on a legitimate interest assessment, and we have no compelling interests that overrides your interests or rights and freedoms,
ix. We have processed the personal data unlawfully, or
x. We have a legal obligation to erase the personal data.
d) Right to restrict processing. This means that we temporarily restrict the processing of your data. You have the right to request restriction when:
i. You consider your data to be inaccurate and you have requested rectification as defined in b), while we establish the accuracy of the personal data,
ii. The processing is unlawful, and you do not want the data to be erased,
iii. As data controller, we no longer need to process the personal data for our processing purposes, but you need them to be able to establish, exercise or defend a legal claim, or
iv. You have objected to processing as defined in 12.3, while waiting for our assessment of whether our legitimate interests override yours.
12.2.2 We will take all reasonable measures possible to notify everyone who has received personal data as stated in section 9 above if we have rectified, erased or restricted access to your personal data after you have requested us to do so. At your request, we will provide you with more information about the recipients of your personal data.