Data Subject Rights
Subject to applicable law, individuals may exercise rights concerning their personal data and may request clarification about how their data is handled. Requests are assessed in light of legal obligations, the rights of others, and the operational need to maintain secure and accurate records.
The scope of each right depends on the legal basis and the processing context.
Submitting Rights Requests
To exercise a privacy right, a request should identify the relevant data and the right being asserted. The controller may need to verify identity before responding and may decline or limit a request where permitted by law.
Requests are handled through the contact channels identified in this policy.
Retention of Data
Contact and inquiry records are retained for as long as needed to handle the request, maintain records of the interaction, and meet applicable legal, accounting, or security obligations. Technical data is retained for a limited period consistent with operational and security needs, after which it is deleted or anonymised where feasible.
Data is kept only for the period needed for the stated purpose or legal obligation.
Policy Updates
If this policy is updated, the revised version will apply from the stated effective date. Material changes may be indicated on the website or through another appropriate notice method, depending on the nature of the change.
The policy may be revised to reflect operational or legal changes.