GDPR and your rights

Your rights

If you are in the European Economic Area or the United Kingdom, and in many other places, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct data that is inaccurate or incomplete.
• Delete your data where we no longer need it or you withdraw consent, subject to legal retention duties.
• Restrict processing while a dispute about accuracy or lawfulness is resolved.
• Object to processing based on our legitimate interests, and to any direct marketing at any time.
• Port data you gave us to another provider in a machine-readable format.
• Withdraw consent at any time, without affecting processing that took place before.
• Complain to a supervisory authority.

How to make a request

Email office@cognivio.net with “Privacy” in the subject line. Tell us which right you are exercising and, for access requests, what data you are looking for, so that we can find it quickly. We may ask you to confirm your identity, usually by replying from the email address we hold for you.

How we respond

• We confirm receipt within 3 business days.
• We answer within one month. For complex requests we may extend this by up to two further months and will tell you why.
• Requests are free. Where a request is manifestly unfounded or excessive we may charge a reasonable fee or decline, and we will explain the reason.
• We keep a record of each request and its outcome.

Where our processing is on your behalf

If you are an employee or contact of a customer and the data concerned was given to us by that customer, we may pass your request to the customer, who is the controller of it, and help them respond. The data processing agreement describes how we assist customers with such requests.

Data breaches

If a breach of security affects personal data we hold, we assess it immediately, notify the competent supervisory authority within 72 hours where required, and inform the people concerned without undue delay when the breach is likely to put their rights at high risk. Customers for whom we process data are notified without undue delay so that they can meet their own obligations.

Supervisory authority

You may lodge a complaint with the data protection authority of your country of residence or work. We would appreciate the chance to resolve any concern first, but you are not required to contact us before complaining.

Contact

Data protection contact: office@cognivio.net, subject “Privacy”. We have not appointed a data protection officer because our processing does not meet the thresholds that require one; we will update this page if that changes.