Common use of Your Legal Rights Clause in Contracts

Your Legal Rights. Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to: Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. If you wish to exercise any of the rights set out above, please contact us. People who make a complaint to us When we receive a complaint from a person we make up a file, manual or electronic, containing the details of the complaint and associated investigation. This normally contains the identity of the complainant and any other individuals involved in the complaint. We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We may compile and publish statistics highlighting information such as the number of complaints we receive and time taken to resolve, but not in a form which identifies anyone. We usually have to disclose the complainant’s identity to the department/service/programme/project which the complaint is about, including third parties such as contractors, in order to fully understand and resolve an issue. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis. We will keep personal information contained in complaint files in line with our retention policy. Local Government Ombudsmen complaints are retained for ten years from closure. Complaint files are retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle. Similarly, where enquiries are submitted to us we will only use the information supplied to us to deal with the enquiry and any subsequent issues and to check on the level of service we provide.

Your Legal Rights. Under certain circumstances, you You have a number of rights under data protection laws in relation to the data we hold about you. These include: - the right of access to your personal data. You have the right to: Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that obtain information about how we are lawfully processing process it. Request - the right to request correction of the personal data that we hold about you. This enables you to have any if it is incomplete or inaccurate data we hold about you correctedinaccurate. - in some circumstances, though we may need the right to verify the accuracy of the new data you provide to us. Request request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have We may continue to retain your personal data if we are entitled or required to maintain it. - the right to ask us object to, or to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, request that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to yourestrict, if applicable, at the time of your request. Object to our processing of your personal data in some circumstances, such as where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedomsground. You also have the right to object where we are processing your personal data for direct marketing purposes. In - in some casescircumstances, we may demonstrate that we have compelling legitimate grounds the right to process your information which override your rights and freedoms. Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. Request request the transfer of your personal data to you or to a third another party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. Withdraw consent at any time where we are relying on consent to process your personal data. However, this Edgbaston will not affect the lawfulness discriminate against an individual as a result of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able them exercising their legitimate individual privacy rights pursuant to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consentapplicable legislation. If you wish to exercise any of the rights set out above, please contact usXxxxxxx Xxxxxxxx (xxxxxxxxx@xxxxxxxxxxx.xxx or +00 (0)00 0000-0000). People Please note that dependent on circumstances, Xxxxxxxxx may not be permitted to comply with such a request. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. You have the right to make a complaint at any time to us When we receive a complaint from a person we make up a filethe Information Commissioner's Office, manual or electronic, containing the details of the complaint and associated investigation. This normally contains the identity of the complainant and any other individuals involved in the complaintUK supervisory authority for data protection issues (xxx.xxx.xxx.xx). We will only use would, however, appreciate the personal information we collect to process the complaint and to check on the level of service we provide. We may compile and publish statistics highlighting information such as the number of complaints we receive and time taken to resolve, but not in a form which identifies anyone. We usually have to disclose the complainant’s identity to the department/service/programme/project which the complaint is about, including third parties such as contractors, in order to fully understand and resolve an issue. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis. We will keep personal information contained in complaint files in line with our retention policy. Local Government Ombudsmen complaints are retained for ten years from closure. Complaint files are retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle. Similarly, where enquiries are submitted to us we will only use the information supplied to us chance to deal with your concerns before you approach the enquiry and any subsequent issues and to check on the level of service we provideregulator.

Your Legal Rights. Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to: • Request access to your personal data (commonly known as a “"data subject access request”"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) • if you want us to establish the data’s 's accuracy; (b) • where our use of the data is unlawful but you do not want us to erase it; (c) • where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) • you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. • Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. • Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. If Description of categories of personal data • Identity Data: first name, last name, maiden name, username or similar identifier, marital status, title, date of birth, gender. • Contact Data: billing address, delivery address, email address and telephone numbers. • Financial Data: bank account and payment card details. • Transaction Data: includes details about payments to and from you. • Device Data: includes the type of mobile device you wish to exercise use, mobile network information, your mobile operating system, the type of mobile browser you use and time zone setting. • Content Data: includes information stored on your Device, including login information. • Profile Data: includes your username and password, your interests, preferences, feedback and survey responses (where applicable). • Usage Data: includes details of your use of any of our whether this is required for our own billing purposes or otherwise and the rights set out above, please contact us. People who make a complaint to us When we receive a complaint from a person we make up a file, manual or electronic, containing the details of the complaint and associated investigation. This normally contains the identity of the complainant and any other individuals involved in the complaint. We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We may compile and publish statistics highlighting information such as the number of complaints we receive and time taken to resolve, but not in a form which identifies anyone. We usually have to disclose the complainant’s identity to the department/service/programme/project which the complaint is about, including third parties such as contractors, in order to fully understand and resolve an issue. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis. We will keep personal information contained in complaint files in line with our retention policy. Local Government Ombudsmen complaints are retained for ten years from closure. Complaint files are retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle. Similarly, where enquiries are submitted to us we will only use the information supplied to us to deal with the enquiry and any subsequent issues and to check on the level of service we provideresources that you access.

Your Legal Rights. Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to: Request access to your personal data (commonly known as a “"data subject access request”"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. This would be a pointless request for you because we do not collect any personal data from you. Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. This would be a pointless request for you because we do not collect any personal data from you. Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. This would be a pointless request for you because we do not collect any personal data from you. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. This would be a pointless request for you because we do not collect any personal data from you. Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (ai) if you want us to establish the data’s 's accuracy; (bii) where our use of the data is unlawful but you do not want us to erase it; (ciii) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (div) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. This would be a pointless request for you because we do not collect any personal data from you. Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which This would be a pointless request for you initially provided consent for us to use or where because we used the information to perform a contract with do not collect any personal data from you. Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services our Service to you. We will advise you if this is the case at the time you withdraw your consent. No fee usually required so that you will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. Time limit to respond to your legitimate requests will be one (1) month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. If you wish to exercise any of the rights set out above, please contact us. People who make a complaint to us When we receive a complaint from a person we make up a file, manual or electronic, containing the details of the complaint and associated investigation. This normally contains the identity of the complainant and any other individuals involved in the complaint. We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We may compile and publish statistics highlighting information such as the number of complaints we receive and time taken to resolve, but not in a form which identifies anyone. We usually have to disclose the complainant’s identity to the department/service/programme/project which the complaint is about, including third parties such as contractors, in order to fully understand and resolve an issue. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis. We will keep personal information contained in complaint files in line with our retention policy. Local Government Ombudsmen complaints are retained for ten years from closure. Complaint files are retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle. Similarly, where enquiries are submitted to us we will only use the information supplied to us to deal with the enquiry and any subsequent issues and to check on the level of service we provideDPM (see above).

Your Legal Rights. Under certain circumstances, you have the following rights under data protection laws in relation to your personal data. You have the right to: • Request access to your personal data (data. This is commonly known as a “"data subject access request”)". This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing itprocessing. • Request correction of the your personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. us • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. request • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. freedoms • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if o If you want us to establish the data’s accuracy; (b) where 's accuracy o Where our use of the data is unlawful but you do not want us to erase it; (c) where it o Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you claims o You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. it • Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. Withdraw • Right to withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. If you wish to exercise any of the rights set out above, please contact us. People who make a complaint to us When we receive a complaint from a person we make up a file, manual or electronic, containing the details of the complaint and associated investigation. This normally contains the identity of the complainant and any other individuals involved our data privacy manager in the complaint. We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We may compile and publish statistics highlighting information such as the number of complaints we receive and time taken to resolve, but not in a form which identifies anyone. We usually have to disclose the complainant’s identity to the department/service/programme/project which the complaint is about, including third parties such as contractors, in order to fully understand and resolve an issue. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis. We will keep personal information contained in complaint files in line with our retention policy. Local Government Ombudsmen complaints are retained for ten years from closure. Complaint files are retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle. Similarly, where enquiries are submitted to us we will only use the information supplied to us to deal with the enquiry and any subsequent issues and to check on the level of service we providewriting.

Your Legal Rights. Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to: Request access to your personal data (commonly known as a “"data subject access request”"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s 's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it. Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. If you wish to exercise any of the rights set out above, please contact us. People who make a complaint to us When we receive a complaint from a person we make up a file, manual or electronic, containing the details of the complaint and associated investigation. This normally contains the identity of the complainant and any other individuals involved in the complaint. We will only use the personal information we collect to process the complaint and to check on the level of service we provide. We may compile and publish statistics highlighting information such as the number of complaints we receive and time taken to resolve, but not in a form which identifies anyone. We usually have to disclose the complainant’s identity to the department/service/programme/project which the complaint is about, including third parties such as contractors, in order to fully understand and resolve an issue. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis. We will keep personal information contained in complaint files in line with our retention policy. Local Government Ombudsmen complaints are retained for ten years from closure. Complaint files are retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle. Similarly, where enquiries are submitted to us we will only use the information supplied to us to deal with the enquiry and any subsequent issues and to check on the level of service we provide.;