legitimate interests pursued by the Owner within the relevant sections of this document or by
contacting the Owner.
The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent
to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to
retain Personal Data for a longer period whenever required to fulfill a legal obligation or upon order of an
authority.
Once the retention period expires (1 month), Personal Data shall be deleted. Therefore, the right of access,
the right to erasure, the right to rectification and the right to data portability cannot be enforced after
expiration of the retention period.
Users may exercise certain rights regarding their Data processed by the Owner.
In particular, Users have the right to do the following, to the extent permitted by law:
• Users have the right to withdraw consent where they
have previously given their consent to the processing of their Personal Data.
• Users have the right to object to the processing of their
Data if the processing is carried out on a legal basis other than consent.
• Users have the right to learn if Data is being processed by the Owner,
obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data
undergoing processing.
• Users have the right to verify the accuracy of their Data and ask
for it to be updated or corrected.
• Users have the right to restrict the processing of their
Data. In this case, the Owner will not process their Data for any purpose other than storing it.
• Users have the right to obtain the
erasure of their Data from the Owner.
• Users have the right to
receive their Data in a structured, commonly used and machine readable format and, if
technically feasible, to have it transmitted to another controller without any hindrance.
• Users have the right to bring a claim before their competent data
protection authority.
Users are also entitled to learn about the legal basis for Data transfers abroad, including to any international
organization governed by public international law or set up by two or more countries, such as the UN, and
about the security measures taken by the Owner to safeguard their Data.
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the
Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such
processing by providing a ground related to their particular situation to justify the objection.
Users must know that, however, should their Personal Data be processed for direct marketing purposes, they
can object to that processing at any time, free of charge and without providing any justification. Where the
User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for
such purposes. To learn whether the Owner is processing Personal Data for direct marketing purposes,
Users may refer to the relevant sections of this document.
Any requests to exercise User rights can be directed to the Owner through the contact details provided in this
document. Such requests are free of charge and will be answered by the Owner as early as possible and
always within one month, providing Users with the information required by law. Any rectification or erasure of
Personal Data or restriction of processing will be communicated by the Owner to each recipient, if any, to