Annex


Right to information and right to access your personal data	You may at any time request more information on our processing activities and the personal data that we are keeping from you.
Right to rectification of inaccurate or incomplete personal data of	You have the right to require us to, without undue delay, rectify or complete any of your personal data that is inaccurate or incomplete.
Right to deletion of your personal data (‘right to be forgotten’)	You may request us to delete (part of) your personal data in the following situations: when the processing is no longer necessary for achieving the purposes for which they we collected or otherwise processed these; or when the processing was based on your consent and you have decided to withdraw that consent; when you have other reasonable grounds to object to the processing of your personal data; when we would unlawfully process your personal data; when your personal data have to be erased in compliance with a legal obligation directed to us. We note that in some cases, we may refuse to delete your personal data: (i) for exercising the right of freedom of expression and information; (ii) for compliance with a legal obligation; or (iii) for the establishment, exercise or defence of legal claims.
Right to restriction of processing	You may request us to (temporarily) restrict the processing of your personal data in the following situations: when you have contested the accuracy of your personal data, for a period enabling us to verify this accuracy; or when the processing appears to be unlawful and you request us to restrict the use of your data instead of the deletion of this data; or when we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims; or pending verification whether our legitimate grounds override yours in the framework of an objection.
Right to object to the processing of your personal data (free of charge)	You may under certain circumstances object to the processing of your personal data, when such processing is based on our “legitimate interests”. If we agree, we will no longer process your personal data, unless we have compelling legitimate grounds to do so, or because such a processing is necessary. Where we process your personal data for direct marketing purposes, you may at any time object to the processing thereof or withdraw your consent thereto. You also have the right not to be subject to profiling for direct marketing purposes.
Right to data portability	In some cases, you have the right to receive all your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. This right applies: in case the processing is based on consent or on the necessity for the performance of a contract; and in case the processing is carried out by automated means.