Privacy rights & concerns

 

Your Rights

If you reside in certain territories, including the EU and the UK, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. Your rights include:

  • Right to be informed about collection and use of your personal data.
  • Right to access personal data we hold about you.
  • Right to correct your personal data when incorrect or incomplete (if you have an account with us, you can also correct your data yourself in your Customer Account).
  • Right to withdraw your consent at any time.
  • Right, under certain circumstances, to object to processing of your personal data (for example when we are processing your data for the purpose of our legitimate interest). You will find more information about your right to object below.
  • Right, under certain circumstances, to restrict processing of your personal data (in this case we will not process your data for any other purpose than storage).
  • Right under certain circumstances, to have your personal data erased, where we no longer have any legal reason to retain them.
  • Right to request that we provide to you your personal data in a commonly used format, and if technically possible, that we transfer them to another data controller. This is applicable provided that your data is processed by automated means and that processing is based on your consent, on a contract which you are a part of or on pre-contractual obligations 

 

More about your right to object:

You may object to the processing of your personal data in the following circumstances:

  • When your data is processed for the purpose of direct marketing, you can object at any time without providing any justification.
  • When your data is processed for legitimate interests or statistical purposes, you must provide a specific reason and explain why you are objecting to the processing of your data. Your grounds for objection should be related to your particular situation.

 

How to exercise your rights or make a data protection complaint

You can contact us at privacy@kontri.co.uk if you want to:

  • exercise any of your data protection rights;
  • ask a question about how we use your personal data; or
  • make a data protection complaint, including when you are unhappy with the way we use your personal data or believe that we have not complied with data protection law.

To help us deal with your request or complaint, please include:

  • your name and contact details;
  • a description of your request, complaint or concern;
  • any relevant order number, account details or previous correspondence; and
  • what you would like us to do to.

We may ask you to provide additional information where reasonably required to verify your identity, understand your request, or investigate your complaint. We will only request information that is necessary for these purposes.

We will respond to requests to exercise data protection rights without undue delay and, in any event, within one calendar month of receiving the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. Where such extension is necessary, we will let you know.

If you make a data protection complaint, we will acknowledge receipt of your complaint within 30 days. We will take appropriate steps to investigate your complaint, keep you informed where appropriate, and tell you the outcome without undue delay.

We will not discriminate against you because you exercise your data protection rights or make a data protection complaint.

 

Complaints to a supervisory authority

We encourage you to get in touch if you have any concerns with how we collect or use your personal data. You also have the right to complain to a data protection supervisory authority.

If you are based in the UK, or if your complaint relates to UK data protection law, you can complain to the Information Commissioner’s Office (“ICO”): https://ico.org.uk/

If you are based in the EU, you may have the right to complain to the supervisory authority in the EU Member State where you live, work or where you believe a breach of data protection law has occurred. You can find details of EU supervisory authorities via the European Data Protection Board:
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

 

pixel