You have the right to obtain confirmation from TAP SERIES as to how our personal data are being processed, including the following information:
You may also request to receive an electronic copy of your personal data that are processed by TAP SERIES. TAP SERIES is required to provide any requested information within one (1) month of receiving an access request. However, if TAP SERIES receives a large numbers of requests, or especially complex requests, this time limit may be extended by a maximum of two (2) further months as long as TAP SERIES provides you with an explanation for the delay within the original one (1) month timeframe. If TAP SERIES fails to meet these deadlines, you may complain to the relevant Data Protection Authority (explained below) and may be able to seek a judicial remedy in the relevant EU Member State's court system.
TAP SERIES is required to ensure that inaccurate or incomplete data are erased or corrected. You have the right to request TAP SERIES correct or erase personal data that you believe to be inaccurate or incomplete.
Your consent can provide a lawful basis for TAP SERIES to process your personal data and/or transfer your data internationally. However, you have the right to withdraw such consent. However, please note that other lawful bases may apply to the processing or transfer of your data.
Under the GDPR, in certain circumstances, you may have the right to have TAP SERIES erase your personal data, cease further dissemination of the data, and potentially have third parties halt processing your data upon your request. This right is commonly referred to as the "right of data erasure" or "the right to be forgotten." You have the right to erasure of your personal data if:
Where TAP SERIES is processing your personal data on the basis of having a "public interest" or "legitimate interests", those bases are not absolute and you may have a right to object to such processing. If you object, WON must cease such processing unless it either: 1) demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms; or 2) requires the data in order to establish, exercise, or defend legal rights.
You have the right to object to the processing of your personal data for the purposes of receiving direct marketing from TAP SERIES (including "profiling" activities as detailed further below).
Where your personal data are processed for scientific and historical research purposes or statistical purposes, you have the right to object, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Subject to certain exceptions detailed below, you generally have the right to not have any decisions made about you that are based solely on "automated decision-making" processes. An automated decision-making process involves using automated processing activities (activities that do not use human intervention) to make a decision about you that will materially affect you (i.e., a decision that would produce "legal effects" or otherwise have a similar "significant effect"). A legal effect is something that will affect your legal rights, such as your freedom to associate with others, vote in an election, or take legal action. A legal effect could also be something that affects your legal status or rights under a contract, e.g., something that could lead to cancellation of a contract. For data processing to have a significant effect, the effects of the processing must be sufficiently great or important to be worthy of attention. In other words, the decision must have the potential to: significantly affect your circumstances, behavior, or choices; have a prolonged or permanent impact; or at its most extreme, lead to exclusion or discrimination. Automated decision-making can include "profiling" activities whereby automated processing is used to evaluate certain personal characteristics in order to analyze or predict your preferences, behavior, performance, reliability, location, or movements. Please note that if a human being reviews and takes other factors into account in making a final decision, that decision is not considered to be "based solely" on automated processing.
In general, the use of automated decision-making processes are permitted where:
If a data controller is making decisions based on any automated decision-making processes, you are entitled to a description of what portions of the decision-making will be automated, reasons why automation is logical, and the significance and consequences behind the decision to automate the processing. TAP SERIES's automated decision-making processes include:
If an automated decision-making process is conducted as a result of contractual necessity or you have explicitly consented to such processing, you are allowed to request human intervention, express your point of view, and contest decisions that are arrived at as a result of the processing. To the extent automated decision-making processes also involve high risks to the privacy of your information, TAP SERIES will conduct a data privacy impact assessment ("DPIA") prior to conducting the processing in order to ensure that appropriate safeguards are in place. A DPIA is a tool designed to enable organizations to identify and analyze the risks that are inherent in data processing activities and enables us to address and mitigate those risks.
While TAP SERIES does use automated processing methods to conduct certain profiling activities, including the use of profiling to better segment markets and tailor our Services to align with individual needs, it is unlikely that such activities will have a legal or other significant effect on you. Targeted advertisements (e.g., ads that are delivered online) are not typically considered to have a legal or significant effect unless the profiling methods used are unnecessarily intrusive, advertisements are delivered in an intrusive fashion, or certain vulnerabilities are known and targeted (e.g., vulnerable age or financial condition). TAP SERIES has no reason to believe that any of its activities related to profiling will have any legal or any similar significant effect on you. Additionally, TAP SERIES does not utilize any automated decision-making processes that evaluate your Sensitive Information.
In some circumstances, you may be entitled to limit the purposes for which TAP SERIES can process your personal data. Specifically, you have the right to restrict the processing of your personal data if:
TAP SERIES is required to give effect to your rights of access, rectification, erasure, and the right to object free of charge. However, TAP SERIES may charge a reasonable fee for repetitive requests, unfounded or excessive requests, or further copies beyond the initial copy provided.
Data Protection Authorities ("DPAs") are the regulatory authorities responsible for monitoring and enforcing data protection laws at a national level and providing guidance on the interpretation of those laws. DPAs are empowered to oversee enforcement of the GDPR, investigate breaches of the GDPR, and bring legal proceedings where necessary. If you believe that your rights have been infringed by TAP SERIES, you have the right to ask TAP SERIES to remedy the situation. If you believe you have not received an adequate response from TAP SERIES, you may file a complaint with the relevant DPA (either the DPA for the EU Member State in which you live or work or the Member State in which the alleged infringement occurred). A list of DPAs may be found at: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080 (current as of April 2018).
Under the GDPR, in order to process your personal data, TAP SERIES is required to identify a legal basis (or bases) for its processing activities. TAP SERIES's legal bases for processing your personal data are as described below.
TAP SERIES is permitted to process your personal data to the extent you have given consent for TAP SERIES to perform processing activities. Please note that your consent to processing can be revoked at any time (though there may be other applicable legal bases that may justify ongoing processing of your personal data). Your consent may be revoked by sending an email to: firstname.lastname@example.org
TAP SERIES is permitted to process your personal data to the extent the Processing is necessary:
TAP SERIES is permitted to process your personal data to the extent the processing is necessary for the purposes of legitimate interests pursued by TAP SERIES or a third party ("legitimate interests"), except where those legitimate interests are overridden by your interests, fundamental rights, or freedoms. In order to establish that TAP SERIES has a legitimate interest in processing your information, it will complete a Legitimate Interest Assessment Form ("LIA Form") to ensure that there is adequate consideration and accountability for the decision to conduct the processing. The LIA Form is intended to: 1) assess whether a legitimate interest exists; 2) establish the necessity of the processing; and 3) perform a balancing test to ensure that a particular processing operation does not cause undue interference with your interests, rights, or freedoms. You have the right to object to TAP SERIES's processing of your personal data on the basis of legitimate interests; if you wish to raise such an objection, please send an email detailing your objection to email@example.com. TAP SERIES's identified legitimate interests for processing your personal data include:
TAP SERIES is permitted to process your personal data where it has a binding legal or regulatory obligation to perform the processing to stay in compliance with applicable laws or regulations (e.g., tax reporting purposes). Other examples could include where TAP SERIES or one of its affiliates is required to respond to a court order, subpoena, or law enforcement agency request, to prevent fraud or abuse, or to protect the safety of individuals. Were TAP SERIES not able to process your personal data for such purposes, WON could be subject to fines, penalties, and/or civil or criminal liability.
The Services are for a general audience and are not targeted to data subjects under the age of sixteen (16). TAP SERIES and its affiliates do not knowingly process personal data from EU residents under the age of sixteen (16) without parental consent. If such a situation is discovered, we will delete that information immediately. If you believe TAP SERIES has any information from an EU resident under the age of sixteen, please contact us at firstname.lastname@example.org.