Why We Are Able to Collect and Use Your Personal Information
We rely on our legitimate interests and the legitimate interests of our users as the legal basis for processing data concerning users of the Site who are residents of the European Economic Area (or “EEA”). Specifically, it is necessary for us to process personal data in order to pursue our legitimate interests in ensuring the proper operation and furthering our understanding of the Site and services accessed through the Site. Also, for people who use the Site or access services on behalf of one of our users, we collect and process information as a necessary part of the services that we provide to our users.
In some cases, where we ask for your consent to use information about you, your consent acts as the legal basis for our use of that data. In those cases, you have the right to withdraw your consent at any time. If you would like to withdraw your consent, please contact us as provided in this Policy under “Contact Us.”
Transfer of Your Personal Information Outside of the European Economic Area
For the purposes described in this Policy, we may transfer personal information out of the EEA to the United States or other non-EEA countries. These countries may not have enacted laws that provide the same level of protection of personal information as the laws of the EEA, and the European Commission has not issued any formal decision that these countries provide an adequate level of protection of personal information.
In order to ensure that adequate protections are provided for personal information concerning you, we will perform these transfers of personal information outside of the EEA under standard contractual clauses approved by the European Commission, as permitted pursuant to Article 46(2)(d) and (5) of the General Data Protection Regulation (Regulation 2016/679). If you would like more information about our transfer of data outside of the EEA or copies of relevant documents, please contact us as provided in this Policy under “Contact Us.”
Rights of Residents of the European Economic Area
If you are a resident of a country within the EEA, you have certain individual rights under the General Data Protection Regulation (Regulation 2016/679) or related local legislation. You have the right to obtain confirmation from us as to whether or not we process personal information about you. And if we do process your personal information, your other rights include the right to: (a) access your personal information and receive certain information about our privacy practices; (b) have us correct incorrect information that we hold concerning you, or to complete incomplete information; (c) request that we erase information concerning you and to have that information erased under certain conditions; (d) restrict our processing of information concerning you under certain conditions; (e) object to our processing of information concerning you under certain conditions; (f) object to our use of information concerning you for direct marketing, or for profiling relating to direct marketing; (g) receive personal information that you provided to us in a structured and commonly used, electronic format and (h) transmit that information to another entity, in certain situations.
If you would like to exercise any of these rights, please contact us as provided in this Policy under “Contact Us.” Please understand that, before responding to your request, we may ask you for additional information in order to verify your identity.
We may not be obligated to fulfill your request to exercise your rights if applicable local laws restrict us, or if fulfilling your request would negatively impact the rights and freedoms of other individuals. We may decline to fulfill requests or charge a reasonable fee based on our administrative costs if requests are clearly excessive or unfounded, and particularly in cases where requests are repetitive.