Data Subject Rights

Under Chapter 3 of the General Data Protection Regulation (GDPR), citizens of the EU (Data Subjects) have eight rights.

These are:

  1. The Right to be Informed — When we process your personal data, we must make clear what we are processing, why, and who else the data may be passed to.
  2. The Right of Access — You have the right to see what data has been collected about you by HTAi.
  3. The Right to Rectification — You have the right to have your data corrected or amended if what is held by HTAi is incorrect in some way.
  4. The Right to Erasure — This is also called ‘the Right to be Forgotten’. You can ask for your personal data to be deleted. This would apply if the personal data is no longer required for the purposes it was collected for, or your consent for the processing of that data has been withdrawn, or the personal data has been unlawfully processed.
  5. The Right to Restrict Processing — You have the right to ask for a temporary halt to processing of personal data, such as in the case where a dispute or legal case has to be concluded, or the data is being corrected.
  6. The Right to Data Portability — You have the right to ask for any data you have supplied directly to HTAi, to be provided in a structured, commonly used, and machine-readable format. 
  7. The Right to Object — You have the right to object to further processing of your data which is inconsistent with the primary purpose for which it was collected, including profiling, automation, and direct marketing.
  8. Rights in Relation to Automated Decision Making and Profiling — You have the right to not be subject to a decision based solely on automated processing.