PrimeConduct - GDPR & DPO Services

(F) Data Accuracy

Your Personal Data that we Process will be kept accurate and, where necessary, kept up to date. We take every reasonable step to ensure that:

• your Personal Data that we Process are accurate and, where necessary, kept up to date; and

• any of your Personal Data that we Process that are inaccurate (having regard to the purposes for which they are Processed) are erased or rectified without delay.

From time to time we may ask you to confirm the accuracy of your Personal Data.

(G) Data Minimisation

We take every reasonable step to ensure that your Personal Data that we Process are limited to the Personal Data reasonably required in connection with the purposes set out in this Policy.

(H) Data Retention

We will keep copies of your Personal Data in a form that permits identification only for as long as is necessary in connection with the purposes set out in this Policy, unless applicable law permits or requires a longer retention period.

The criteria for determining the duration for which we will keep your Personal data are as follows: we will retain your Personal Data for as long as we have your permission to contact you. Should you wish to withdraw that permission, you may do so using the contact details provided in Section (M) below.

(I) Your legal rights

Subject to applicable law, you may have a number of rights regarding the Processing of your Personal Data, including:

• the right to request access to, or copies of, your Personal Data that we Process or control;

• the right to request rectification of any inaccuracies in your Personal Data; • the right to request, on legitimate grounds:

• erasure of your Personal Data that we Process or control; or

• restriction of Processing of your Personal Data that we Process or control;

• the right to object, on legitimate grounds, to the Processing of your Personal Data;

• the right to have your Personal Data transferred to another Controller, to the extent applicable;

• where we Process your Personal Data on the basis of your consent, the right to withdraw that consent; and

• the right to lodge complaints regarding the Processing of your Personal Data with a Data Protection Authority.

This does not affect your statutory rights.

To exercise one or more of these rights, or to ask a question about these rights or any other provision of this Policy, or about our Processing of your Personal Data, please use the contact details provided in Section (M) below.