QA Automation

The organisation must inform about:

• The purposes of the treatment, categories of personal data that are processed and the possible data communications and their recipients.
• If possible, the period of conservation of your data. If not, the criteria to determine this term.
• The right to request the rectification or suppression of the data, the limitation to the treatment, or to oppose it.
• The right to file a claim with the Control Authority.
• If an international data transfer occurs, receive information on the appropriate guarantees.
• The existence of automated decisions (including profiles), the applied logic and consequences of this treatment.

Interested parties can request:

• The rectification of inaccurate data and complete incomplete personal data, even with an additional declaration.

Interested parties can request:

• The suppression of personal data without due delay when any of the cases contemplated concur. For example, illicit treatment of data, or when the purpose that motivated the treatment or collection.
• However, a series of exceptions are regulated in which this right will not apply. For example, when the right to freedom of expression and information should prevail.

Interested parties can request the person in charge to suspend the processing of data when:

• The accuracy of the data is contested, while the accuracy is verified by the person responsible.
• The interested party has exercised his right of opposition to the processing of data, while verifying if the legitimate reasons of the responsible party prevail over the interested party.
• Ask the person responsible to keep your personal data when:
• The data processing is illegal, and the interested party opposes the deletion of their data and requests instead the limitation of its use.
• The person in charge no longer needs the data for the purposes of the treatment, but the interested party does need them for the formulation, exercise or defence of claims.

Interested parties can:

• Receive the personal data provided in a structured format, of common use and mechanical reading, and be able to transmit them to another responsible, whenever technically possible.

Interested parties can oppose to the personal data treatment:

• When for reasons related to your personal situation, the processing of your data must cease unless a legitimate interest is proven or is necessary for the exercise or defence of claims.
• When the treatment is focused on direct marketing.

Interested parties have the right not to be the subject of a decision based solely on automated processing, including profiling, which produces legal effects or affects them.

Exceptions:

• When it is necessary for the conclusion or execution of a contract.
• When it is allowed by the Law of the EU or the Member States, with adequate measures to safeguard the rights and freedoms of the owner of the data.
• When there is explicit consent of the owner of the data.