MaxiLeaf customers, as the data subjects, through the collection and processing of their data, have the following rights:
- the right of access: whenever they request, they can access their personal data, get information about the processing of their data and get a copy of their personal data that is handled;
- the right of rectification: whenever they consider that their personal data is incomplete or inaccurate, they can request that it is rectified or completed;
- right of erasure of the data: notwithstanding any legal obligations that may limit this right, the data subjects can request that their data is eliminated when: the data no longer needs to be processed for the purpose that justified its collection or processing; they withdraw their consent on which the data processing was grounded and there are no other legal grounds for it; they present opposition to the processing of the data and there are no prevailing legal interests, to be assessed on a case by case basis, that justify the processing; when the data has been processed illegally; the personal data has to be deleted to comply with a legal obligation that the data controller is subject to; the data has been collected in the context of the offer of services by the company mentioned in article 8(1) of the General Data Protection Regulation;
- right of limiting the processing: the data subject can request to limit the processing of their data in the following situations: if they contest the accuracy of the data, during a period that allows the controller to check the accuracy; if the processing is illegal and the data subject opposes to their personal data being deleted and requests that its use be limited; if the data processor no longer needs the data to be processed but the data is still necessary for the purposes of declaration, exercise or defence of a right in a legal process; if they opposed the processing, until it is seen that the legitimate interests of the data processor prevail over theirs.
- the right of objection: the data subject has the right to oppose the processing of their data when the processing is based on the legitimate interest of the controller or when the data is processed for other reasons than those for which it was collected, but that is compatible with it.
- If you oppose the data being processed, Maxigrau shall stop processing your data unless it has legitimate reasons to conduct this processing and these prevail over your interests. You can also oppose the processing of your data at any time for direct marketing purposes.
- right to portability: if your personal data is in a structured format that is in current use and automatic reading, the processing is based on the express consent or in drawing up a contract and if it is done by automatic means, you have the right to send them to another controller as long as that is technically possible.
- right to withdraw your consent: in situations where the processing in question is undertaken based on your consent, you have the right to withdraw the consent you gave at any time. In this case, the controller will stop processing the data in question, unless there are other grounds that justify the processing.
- the right to lodge a complaint with the supervisory authority: you have the right to lodge a complaint with the Portuguese 'Comissão Nacional de Proteção de Dados' (National Data Protection Commission) regarding the matters concerning the processing of your personal data.