HOW to exercise “Data Subjects’” rights
Depending on where they reside, the Data Subject have the following set of established rights under respective applicable Personal Data Protection laws.
Most Personal Data Protection laws around the Globe contain the same rights, we are herein using the California Privacy Law (CCPA/CPRA) merely as an example of the Rights under U.S. Privacy Laws:
[GDPR] Right of access. The right to obtain from the Controller confirmation as to whether his/ her personal data is being processed, and, where that is the case, access to such personal data as well as related information.
[CCPA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California resident natural persons have the
right to:
- Know the categories of personal information we collect and the categories of sources from which we got the information;
- Know the business or commercial purposes for which we collect and share personal information;
- Know the categories of third parties and other entities with whom we share personal information; and
- Access the specific pieces of personal information we have collected about you.
[GDPR] Right to rectification. The right to obtain the rectification of inaccurate Personal Data pertaining to that Data Subject.
[GDPR] Right to erasure. The right to have Personal Data pertaining to him/ her that is under Processing by GPI erased and therefore Processing stopped, unless a legal duty or have a legitimate ground to retain certain data prevents GPI from observing such right, in which case the Data Subject shall be duly informed.
[CCPA] Right to deletion – again in a similar manner to what the GDPR rules, natural persons who reside in the state of California may, in some circumstances, ask us to delete their personal data/ information.
[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and have in place processing restrictions (in scope and purpose) towards Personal Data that pertains to him/ her. When exercising this right, the Data Subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy has occurred under the Legal Basis of Legitimate Interest by the side of GPI. The exercise of this right may also occur where the Data Subject wishes to opt-out from an existing Service (and not necessarily canceling the Service). When exercising this right, the Data Subject must be specific about which processing activities are being requested to stop and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[CCPA] Right to opt out of sales – We do not “sell “ your data under any circumstances.
[GDPR] Right to data portability. The right to receive the Personal Data pertaining to that Data Subject, in a structured, commonly used and machine-readable format as well as the right to transmit such Personal Data to another controller without hindrance. GPI will share the Personal Data over a secure channel, and that (depending on the type of Data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.
[GDPR] Right to be informed about a Personal Data Breach. The Data Subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her Personal Data to unauthorized 3rd parties within 72 hours of its occurrence.
[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding GPI’s Processing activities over his/ her Personal Data towards any of the EU Member States data protection Supervisory Authorities. GPI is however also available to provide any clarification towards those Data Subjects who may feel that it’s Processing of the Personal Data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such Personal Data processed in a secure manner and Confidentiality assurance. Data Subject may submit a complaint via the request process as per herein defined ahead.
[LGPD Brazil] Right to Anonymization , Blocking, or Deletion: The LGPD explicitly grants the right to request the anonymization, blocking, or deletion of unnecessary or excessive data, or data not processed in compliance with the law.
[LGPD Brazil] Information on Shared Usage: The LGPD explicitly requires controllers to inform data subjects about which public and private entities their data has been shared with.
[CCPA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. We are, however, permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data.
For any of the above-mentioned CCPA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may take additional time to fulfill your request.
We will use the information you provide to make your CCPA rights requests to verify your identity, identify the personal information we may hold about you, and act upon your request.
Any “Data Subject” may exercise his/ her rights under “GDPR” by reaching out to GPI’ “DPO” through the e-mail address dataprivacy@globalproductinsights.com.
If you have any questions, complaints or wish to exercise your rights under “GDPR”, please do make clear on your message:
- Purpose: Question; Complaint; Exercise of the “Data Subject’s” rights under “GDPR”
- WHAT triggered your need to contact us?
- WHEN did the root cause which triggered the need to contact us took place?
- If a Member, your Member ID, or if not a mobile phone number or alternative personal e-mail address so we may proceed with a two-factor authentication process.
Why the need to provide alternative personal contact?
Under “GDPR” only the “Data Subject” may exercise his/ her rights, hence companies must ensure and document that the “Data Subject” or his/ her legal representatives are the ones interacting with the company while acting over his/ her “Personal Data”. The way to ensure such “authentication” with regards to “Data Subjects” who do not have digital credentials on any GPI web-based platforms is to forward code to that “Data Subject” via an alternative communication channel to the standard e-mail address which served the purpose of the initial contact and has a code generated by GPI included on all messages that pertain the exercise of “Data Subjects’” rights or actions over such “Data Subject’” “Personal Data”.
Depending on where they reside, the Data Subject have the following set of established rights under respective applicable Personal Data Protection laws.
Most Personal Data Protection laws around the Globe contain the same rights, we are herein using the California Privacy Law (CCPA/CPRA) merely as an example of the Rights under U.S. Privacy Laws:
[GDPR] Right of access. The right to obtain from the Controller confirmation as to whether his/ her personal data is being processed, and, where that is the case, access to such personal data as well as related information.
[CCPA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California resident natural persons have the
right to:
- Know the categories of personal information we collect and the categories of sources from which we got the information;
- Know the business or commercial purposes for which we collect and share personal information;
- Know the categories of third parties and other entities with whom we share personal information; and
- Access the specific pieces of personal information we have collected about you.
[GDPR] Right to rectification. The right to obtain the rectification of inaccurate Personal Data pertaining to that Data Subject.
[GDPR] Right to erasure. The right to have Personal Data pertaining to him/ her that is under Processing by GPI erased and therefore Processing stopped, unless a legal duty or have a legitimate ground to retain certain data prevents GPI from observing such right, in which case the Data Subject shall be duly informed.
[CCPA] Right to deletion – again in a similar manner to what the GDPR rules, natural persons who reside in the state of California may, in some circumstances, ask us to delete their personal data/ information.
[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and have in place processing restrictions (in scope and purpose) towards Personal Data that pertains to him/ her. When exercising this right, the Data Subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy has occurred under the Legal Basis of Legitimate Interest by the side of GPI. The exercise of this right may also occur where the Data Subject wishes to opt-out from an existing Service (and not necessarily canceling the Service). When exercising this right, the Data Subject must be specific about which processing activities are being requested to stop and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[CCPA] Right to opt out of sales – We do not “sell “ your data under any circumstances.
[GDPR] Right to data portability. The right to receive the Personal Data pertaining to that Data Subject, in a structured, commonly used and machine-readable format as well as the right to transmit such Personal Data to another controller without hindrance. GPI will share the Personal Data over a secure channel, and that (depending on the type of Data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.
[GDPR] Right to be informed about a Personal Data Breach. The Data Subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her Personal Data to unauthorized 3rd parties within 72 hours of its occurrence.
[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding GPI’s Processing activities over his/ her Personal Data towards any of the EU Member States data protection Supervisory Authorities. GPI is however also available to provide any clarification towards those Data Subjects who may feel that it’s Processing of the Personal Data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such Personal Data processed in a secure manner and Confidentiality assurance. Data Subject may submit a complaint via the request process as per herein defined ahead.
[LGPD Brazil] Right to Anonymization , Blocking, or Deletion: The LGPD explicitly grants the right to request the anonymization, blocking, or deletion of unnecessary or excessive data, or data not processed in compliance with the law.
[LGPD Brazil] Information on Shared Usage: The LGPD explicitly requires controllers to inform data subjects about which public and private entities their data has been shared with.
[CCPA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. We are, however, permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data.
For any of the above-mentioned CCPA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may take additional time to fulfill your request.
We will use the information you provide to make your CCPA rights requests to verify your identity, identify the personal information we may hold about you, and act upon your request.
Any “Data Subject” may exercise his/ her rights under “GDPR” by reaching out to GPI’ “DPO” through the e-mail address dataprivacy@globalproductinsights.com.
If you have any questions, complaints or wish to exercise your rights under “GDPR”, please do make clear on your message:
- Purpose: Question; Complaint; Exercise of the “Data Subject’s” rights under “GDPR”
- WHAT triggered your need to contact us?
- WHEN did the root cause which triggered the need to contact us took place?
- If a Member, your Member ID, or if not a mobile phone number or alternative personal e-mail address so we may proceed with a two-factor authentication process.
Why the need to provide alternative personal contact?
Under “GDPR” only the “Data Subject” may exercise his/ her rights, hence companies must ensure and document that the “Data Subject” or his/ her legal representatives are the ones interacting with the company while acting over his/ her “Personal Data”. The way to ensure such “authentication” with regards to “Data Subjects” who do not have digital credentials on any GPI web-based platforms is to forward code to that “Data Subject” via an alternative communication channel to the standard e-mail address which served the purpose of the initial contact and has a code generated by GPI included on all messages that pertain the exercise of “Data Subjects’” rights or actions over such “Data Subject’” “Personal Data”.
Depending on where they reside, the Data Subject have the following set of established rights under respective applicable Personal Data Protection laws.
Most Personal Data Protection laws around the Globe contain the same rights, we are herein using the California Privacy Law (CCPA/CPRA) merely as an example of the Rights under U.S. Privacy Laws:
[GDPR] Right of access. The right to obtain from the Controller confirmation as to whether his/ her personal data is being processed, and, where that is the case, access to such personal data as well as related information.
[CCPA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California resident natural persons have the
right to:
- Know the categories of personal information we collect and the categories of sources from which we got the information;
- Know the business or commercial purposes for which we collect and share personal information;
- Know the categories of third parties and other entities with whom we share personal information; and
- Access the specific pieces of personal information we have collected about you.
[GDPR] Right to rectification. The right to obtain the rectification of inaccurate Personal Data pertaining to that Data Subject.
[GDPR] Right to erasure. The right to have Personal Data pertaining to him/ her that is under Processing by GPI erased and therefore Processing stopped, unless a legal duty or have a legitimate ground to retain certain data prevents GPI from observing such right, in which case the Data Subject shall be duly informed.
[CCPA] Right to deletion – again in a similar manner to what the GDPR rules, natural persons who reside in the state of California may, in some circumstances, ask us to delete their personal data/ information.
[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and have in place processing restrictions (in scope and purpose) towards Personal Data that pertains to him/ her. When exercising this right, the Data Subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy has occurred under the Legal Basis of Legitimate Interest by the side of GPI. The exercise of this right may also occur where the Data Subject wishes to opt-out from an existing Service (and not necessarily canceling the Service). When exercising this right, the Data Subject must be specific about which processing activities are being requested to stop and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[CCPA] Right to opt out of sales – We do not “sell “ your data under any circumstances.
[GDPR] Right to data portability. The right to receive the Personal Data pertaining to that Data Subject, in a structured, commonly used and machine-readable format as well as the right to transmit such Personal Data to another controller without hindrance. GPI will share the Personal Data over a secure channel, and that (depending on the type of Data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.
[GDPR] Right to be informed about a Personal Data Breach. The Data Subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her Personal Data to unauthorized 3rd parties within 72 hours of its occurrence.
[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding GPI’s Processing activities over his/ her Personal Data towards any of the EU Member States data protection Supervisory Authorities. GPI is however also available to provide any clarification towards those Data Subjects who may feel that it’s Processing of the Personal Data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such Personal Data processed in a secure manner and Confidentiality assurance. Data Subject may submit a complaint via the request process as per herein defined ahead.
[LGPD Brazil] Right to Anonymization , Blocking, or Deletion: The LGPD explicitly grants the right to request the anonymization, blocking, or deletion of unnecessary or excessive data, or data not processed in compliance with the law.
[LGPD Brazil] Information on Shared Usage: The LGPD explicitly requires controllers to inform data subjects about which public and private entities their data has been shared with.
[CCPA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. We are, however, permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data.
For any of the above-mentioned CCPA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may take additional time to fulfill your request.
We will use the information you provide to make your CCPA rights requests to verify your identity, identify the personal information we may hold about you, and act upon your request.
Any “Data Subject” may exercise his/ her rights under “GDPR” by reaching out to GPI’ “DPO” through the e-mail address dataprivacy@globalproductinsights.com.
If you have any questions, complaints or wish to exercise your rights under “GDPR”, please do make clear on your message:
- Purpose: Question; Complaint; Exercise of the “Data Subject’s” rights under “GDPR”
- WHAT triggered your need to contact us?
- WHEN did the root cause which triggered the need to contact us took place?
- If a Member, your Member ID, or if not a mobile phone number or alternative personal e-mail address so we may proceed with a two-factor authentication process.
Why the need to provide alternative personal contact?
Under “GDPR” only the “Data Subject” may exercise his/ her rights, hence companies must ensure and document that the “Data Subject” or his/ her legal representatives are the ones interacting with the company while acting over his/ her “Personal Data”. The way to ensure such “authentication” with regards to “Data Subjects” who do not have digital credentials on any GPI web-based platforms is to forward code to that “Data Subject” via an alternative communication channel to the standard e-mail address which served the purpose of the initial contact and has a code generated by GPI included on all messages that pertain the exercise of “Data Subjects’” rights or actions over such “Data Subject’” “Personal Data”.
Depending on where they reside, the Data Subject have the following set of established rights under respective applicable Personal Data Protection laws.
Most Personal Data Protection laws around the Globe contain the same rights, we are herein using the California Privacy Law (CCPA/CPRA) merely as an example of the Rights under U.S. Privacy Laws:
[GDPR] Right of access. The right to obtain from the Controller confirmation as to whether his/ her personal data is being processed, and, where that is the case, access to such personal data as well as related information.
[CCPA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California resident natural persons have the
right to:
- Know the categories of personal information we collect and the categories of sources from which we got the information;
- Know the business or commercial purposes for which we collect and share personal information;
- Know the categories of third parties and other entities with whom we share personal information; and
- Access the specific pieces of personal information we have collected about you.
[GDPR] Right to rectification. The right to obtain the rectification of inaccurate Personal Data pertaining to that Data Subject.
[GDPR] Right to erasure. The right to have Personal Data pertaining to him/ her that is under Processing by GPI erased and therefore Processing stopped, unless a legal duty or have a legitimate ground to retain certain data prevents GPI from observing such right, in which case the Data Subject shall be duly informed.
[CCPA] Right to deletion – again in a similar manner to what the GDPR rules, natural persons who reside in the state of California may, in some circumstances, ask us to delete their personal data/ information.
[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and have in place processing restrictions (in scope and purpose) towards Personal Data that pertains to him/ her. When exercising this right, the Data Subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy has occurred under the Legal Basis of Legitimate Interest by the side of GPI. The exercise of this right may also occur where the Data Subject wishes to opt-out from an existing Service (and not necessarily canceling the Service). When exercising this right, the Data Subject must be specific about which processing activities are being requested to stop and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[CCPA] Right to opt out of sales – We do not “sell “ your data under any circumstances.
[GDPR] Right to data portability. The right to receive the Personal Data pertaining to that Data Subject, in a structured, commonly used and machine-readable format as well as the right to transmit such Personal Data to another controller without hindrance. GPI will share the Personal Data over a secure channel, and that (depending on the type of Data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.
[GDPR] Right to be informed about a Personal Data Breach. The Data Subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her Personal Data to unauthorized 3rd parties within 72 hours of its occurrence.
[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding GPI’s Processing activities over his/ her Personal Data towards any of the EU Member States data protection Supervisory Authorities. GPI is however also available to provide any clarification towards those Data Subjects who may feel that it’s Processing of the Personal Data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such Personal Data processed in a secure manner and Confidentiality assurance. Data Subject may submit a complaint via the request process as per herein defined ahead.
[LGPD Brazil] Right to Anonymization , Blocking, or Deletion: The LGPD explicitly grants the right to request the anonymization, blocking, or deletion of unnecessary or excessive data, or data not processed in compliance with the law.
[LGPD Brazil] Information on Shared Usage: The LGPD explicitly requires controllers to inform data subjects about which public and private entities their data has been shared with.
[CCPA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. We are, however, permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data.
For any of the above-mentioned CCPA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may take additional time to fulfill your request.
We will use the information you provide to make your CCPA rights requests to verify your identity, identify the personal information we may hold about you, and act upon your request.
Any “Data Subject” may exercise his/ her rights under “GDPR” by reaching out to GPI’ “DPO” through the e-mail address dataprivacy@globalproductinsights.com.
If you have any questions, complaints or wish to exercise your rights under “GDPR”, please do make clear on your message:
- Purpose: Question; Complaint; Exercise of the “Data Subject’s” rights under “GDPR”
- WHAT triggered your need to contact us?
- WHEN did the root cause which triggered the need to contact us took place?
- If a Member, your Member ID, or if not a mobile phone number or alternative personal e-mail address so we may proceed with a two-factor authentication process.
Why the need to provide alternative personal contact?
Under “GDPR” only the “Data Subject” may exercise his/ her rights, hence companies must ensure and document that the “Data Subject” or his/ her legal representatives are the ones interacting with the company while acting over his/ her “Personal Data”. The way to ensure such “authentication” with regards to “Data Subjects” who do not have digital credentials on any GPI web-based platforms is to forward code to that “Data Subject” via an alternative communication channel to the standard e-mail address which served the purpose of the initial contact and has a code generated by GPI included on all messages that pertain the exercise of “Data Subjects’” rights or actions over such “Data Subject’” “Personal Data”.
Depending on where they reside, the Data Subject have the following set of established rights under respective applicable Personal Data Protection laws.
Most Personal Data Protection laws around the Globe contain the same rights, we are herein using the California Privacy Law (CCPA/CPRA) merely as an example of the Rights under U.S. Privacy Laws:
[GDPR] Right of access. The right to obtain from the Controller confirmation as to whether his/ her personal data is being processed, and, where that is the case, access to such personal data as well as related information.
[CCPA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California resident natural persons have the
right to:
- Know the categories of personal information we collect and the categories of sources from which we got the information;
- Know the business or commercial purposes for which we collect and share personal information;
- Know the categories of third parties and other entities with whom we share personal information; and
- Access the specific pieces of personal information we have collected about you.
[GDPR] Right to rectification. The right to obtain the rectification of inaccurate Personal Data pertaining to that Data Subject.
[GDPR] Right to erasure. The right to have Personal Data pertaining to him/ her that is under Processing by GPI erased and therefore Processing stopped, unless a legal duty or have a legitimate ground to retain certain data prevents GPI from observing such right, in which case the Data Subject shall be duly informed.
[CCPA] Right to deletion – again in a similar manner to what the GDPR rules, natural persons who reside in the state of California may, in some circumstances, ask us to delete their personal data/ information.
[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and have in place processing restrictions (in scope and purpose) towards Personal Data that pertains to him/ her. When exercising this right, the Data Subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy has occurred under the Legal Basis of Legitimate Interest by the side of GPI. The exercise of this right may also occur where the Data Subject wishes to opt-out from an existing Service (and not necessarily canceling the Service). When exercising this right, the Data Subject must be specific about which processing activities are being requested to stop and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[CCPA] Right to opt out of sales – We do not “sell “ your data under any circumstances.
[GDPR] Right to data portability. The right to receive the Personal Data pertaining to that Data Subject, in a structured, commonly used and machine-readable format as well as the right to transmit such Personal Data to another controller without hindrance. GPI will share the Personal Data over a secure channel, and that (depending on the type of Data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.
[GDPR] Right to be informed about a Personal Data Breach. The Data Subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her Personal Data to unauthorized 3rd parties within 72 hours of its occurrence.
[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding GPI’s Processing activities over his/ her Personal Data towards any of the EU Member States data protection Supervisory Authorities. GPI is however also available to provide any clarification towards those Data Subjects who may feel that it’s Processing of the Personal Data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such Personal Data processed in a secure manner and Confidentiality assurance. Data Subject may submit a complaint via the request process as per herein defined ahead.
[LGPD Brazil] Right to Anonymization , Blocking, or Deletion: The LGPD explicitly grants the right to request the anonymization, blocking, or deletion of unnecessary or excessive data, or data not processed in compliance with the law.
[LGPD Brazil] Information on Shared Usage: The LGPD explicitly requires controllers to inform data subjects about which public and private entities their data has been shared with.
[CCPA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. We are, however, permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data.
For any of the above-mentioned CCPA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may take additional time to fulfill your request.
We will use the information you provide to make your CCPA rights requests to verify your identity, identify the personal information we may hold about you, and act upon your request.
Any “Data Subject” may exercise his/ her rights under “GDPR” by reaching out to GPI’ “DPO” through the e-mail address dataprivacy@globalproductinsights.com.
If you have any questions, complaints or wish to exercise your rights under “GDPR”, please do make clear on your message:
- Purpose: Question; Complaint; Exercise of the “Data Subject’s” rights under “GDPR”
- WHAT triggered your need to contact us?
- WHEN did the root cause which triggered the need to contact us took place?
- If a Member, your Member ID, or if not a mobile phone number or alternative personal e-mail address so we may proceed with a two-factor authentication process.
Why the need to provide alternative personal contact?
Under “GDPR” only the “Data Subject” may exercise his/ her rights, hence companies must ensure and document that the “Data Subject” or his/ her legal representatives are the ones interacting with the company while acting over his/ her “Personal Data”. The way to ensure such “authentication” with regards to “Data Subjects” who do not have digital credentials on any GPI web-based platforms is to forward code to that “Data Subject” via an alternative communication channel to the standard e-mail address which served the purpose of the initial contact and has a code generated by GPI included on all messages that pertain the exercise of “Data Subjects’” rights or actions over such “Data Subject’” “Personal Data”.
Depending on where they reside, the Data Subject have the following set of established rights under respective applicable Personal Data Protection laws.
Most Personal Data Protection laws around the Globe contain the same rights, we are herein using the California Privacy Law (CCPA/CPRA) merely as an example of the Rights under U.S. Privacy Laws:
[GDPR] Right of access. The right to obtain from the Controller confirmation as to whether his/ her personal data is being processed, and, where that is the case, access to such personal data as well as related information.
[CCPA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California resident natural persons have the
right to:
- Know the categories of personal information we collect and the categories of sources from which we got the information;
- Know the business or commercial purposes for which we collect and share personal information;
- Know the categories of third parties and other entities with whom we share personal information; and
- Access the specific pieces of personal information we have collected about you.
[GDPR] Right to rectification. The right to obtain the rectification of inaccurate Personal Data pertaining to that Data Subject.
[GDPR] Right to erasure. The right to have Personal Data pertaining to him/ her that is under Processing by GPI erased and therefore Processing stopped, unless a legal duty or have a legitimate ground to retain certain data prevents GPI from observing such right, in which case the Data Subject shall be duly informed.
[CCPA] Right to deletion – again in a similar manner to what the GDPR rules, natural persons who reside in the state of California may, in some circumstances, ask us to delete their personal data/ information.
[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and have in place processing restrictions (in scope and purpose) towards Personal Data that pertains to him/ her. When exercising this right, the Data Subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy has occurred under the Legal Basis of Legitimate Interest by the side of GPI. The exercise of this right may also occur where the Data Subject wishes to opt-out from an existing Service (and not necessarily canceling the Service). When exercising this right, the Data Subject must be specific about which processing activities are being requested to stop and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[CCPA] Right to opt out of sales – We do not “sell “ your data under any circumstances.
[GDPR] Right to data portability. The right to receive the Personal Data pertaining to that Data Subject, in a structured, commonly used and machine-readable format as well as the right to transmit such Personal Data to another controller without hindrance. GPI will share the Personal Data over a secure channel, and that (depending on the type of Data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.
[GDPR] Right to be informed about a Personal Data Breach. The Data Subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her Personal Data to unauthorized 3rd parties within 72 hours of its occurrence.
[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding GPI’s Processing activities over his/ her Personal Data towards any of the EU Member States data protection Supervisory Authorities. GPI is however also available to provide any clarification towards those Data Subjects who may feel that it’s Processing of the Personal Data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such Personal Data processed in a secure manner and Confidentiality assurance. Data Subject may submit a complaint via the request process as per herein defined ahead.
[LGPD Brazil] Right to Anonymization , Blocking, or Deletion: The LGPD explicitly grants the right to request the anonymization, blocking, or deletion of unnecessary or excessive data, or data not processed in compliance with the law.
[LGPD Brazil] Information on Shared Usage: The LGPD explicitly requires controllers to inform data subjects about which public and private entities their data has been shared with.
[CCPA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. We are, however, permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data.
For any of the above-mentioned CCPA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may take additional time to fulfill your request.
We will use the information you provide to make your CCPA rights requests to verify your identity, identify the personal information we may hold about you, and act upon your request.
Any “Data Subject” may exercise his/ her rights under “GDPR” by reaching out to GPI’ “DPO” through the e-mail address dataprivacy@globalproductinsights.com.
If you have any questions, complaints or wish to exercise your rights under “GDPR”, please do make clear on your message:
- Purpose: Question; Complaint; Exercise of the “Data Subject’s” rights under “GDPR”
- WHAT triggered your need to contact us?
- WHEN did the root cause which triggered the need to contact us took place?
- If a Member, your Member ID, or if not a mobile phone number or alternative personal e-mail address so we may proceed with a two-factor authentication process.
Why the need to provide alternative personal contact?
Under “GDPR” only the “Data Subject” may exercise his/ her rights, hence companies must ensure and document that the “Data Subject” or his/ her legal representatives are the ones interacting with the company while acting over his/ her “Personal Data”. The way to ensure such “authentication” with regards to “Data Subjects” who do not have digital credentials on any GPI web-based platforms is to forward code to that “Data Subject” via an alternative communication channel to the standard e-mail address which served the purpose of the initial contact and has a code generated by GPI included on all messages that pertain the exercise of “Data Subjects’” rights or actions over such “Data Subject’” “Personal Data”.
Depending on where they reside, the Data Subject have the following set of established rights under respective applicable Personal Data Protection laws.
Most Personal Data Protection laws around the Globe contain the same rights, we are herein using the California Privacy Law (CCPA/CPRA) merely as an example of the Rights under U.S. Privacy Laws:
[GDPR] Right of access. The right to obtain from the Controller confirmation as to whether his/ her personal data is being processed, and, where that is the case, access to such personal data as well as related information.
[CCPA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California resident natural persons have the
right to:
- Know the categories of personal information we collect and the categories of sources from which we got the information;
- Know the business or commercial purposes for which we collect and share personal information;
- Know the categories of third parties and other entities with whom we share personal information; and
- Access the specific pieces of personal information we have collected about you.
[GDPR] Right to rectification. The right to obtain the rectification of inaccurate Personal Data pertaining to that Data Subject.
[GDPR] Right to erasure. The right to have Personal Data pertaining to him/ her that is under Processing by GPI erased and therefore Processing stopped, unless a legal duty or have a legitimate ground to retain certain data prevents GPI from observing such right, in which case the Data Subject shall be duly informed.
[CCPA] Right to deletion – again in a similar manner to what the GDPR rules, natural persons who reside in the state of California may, in some circumstances, ask us to delete their personal data/ information.
[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and have in place processing restrictions (in scope and purpose) towards Personal Data that pertains to him/ her. When exercising this right, the Data Subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy has occurred under the Legal Basis of Legitimate Interest by the side of GPI. The exercise of this right may also occur where the Data Subject wishes to opt-out from an existing Service (and not necessarily canceling the Service). When exercising this right, the Data Subject must be specific about which processing activities are being requested to stop and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[CCPA] Right to opt out of sales – We do not “sell “ your data under any circumstances.
[GDPR] Right to data portability. The right to receive the Personal Data pertaining to that Data Subject, in a structured, commonly used and machine-readable format as well as the right to transmit such Personal Data to another controller without hindrance. GPI will share the Personal Data over a secure channel, and that (depending on the type of Data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.
[GDPR] Right to be informed about a Personal Data Breach. The Data Subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her Personal Data to unauthorized 3rd parties within 72 hours of its occurrence.
[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding GPI’s Processing activities over his/ her Personal Data towards any of the EU Member States data protection Supervisory Authorities. GPI is however also available to provide any clarification towards those Data Subjects who may feel that it’s Processing of the Personal Data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such Personal Data processed in a secure manner and Confidentiality assurance. Data Subject may submit a complaint via the request process as per herein defined ahead.
[LGPD Brazil] Right to Anonymization , Blocking, or Deletion: The LGPD explicitly grants the right to request the anonymization, blocking, or deletion of unnecessary or excessive data, or data not processed in compliance with the law.
[LGPD Brazil] Information on Shared Usage: The LGPD explicitly requires controllers to inform data subjects about which public and private entities their data has been shared with.
[CCPA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. We are, however, permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data.
For any of the above-mentioned CCPA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may take additional time to fulfill your request.
We will use the information you provide to make your CCPA rights requests to verify your identity, identify the personal information we may hold about you, and act upon your request.
Any “Data Subject” may exercise his/ her rights under “GDPR” by reaching out to GPI’ “DPO” through the e-mail address dataprivacy@globalproductinsights.com.
If you have any questions, complaints or wish to exercise your rights under “GDPR”, please do make clear on your message:
- Purpose: Question; Complaint; Exercise of the “Data Subject’s” rights under “GDPR”
- WHAT triggered your need to contact us?
- WHEN did the root cause which triggered the need to contact us took place?
- If a Member, your Member ID, or if not a mobile phone number or alternative personal e-mail address so we may proceed with a two-factor authentication process.
Why the need to provide alternative personal contact?
Under “GDPR” only the “Data Subject” may exercise his/ her rights, hence companies must ensure and document that the “Data Subject” or his/ her legal representatives are the ones interacting with the company while acting over his/ her “Personal Data”. The way to ensure such “authentication” with regards to “Data Subjects” who do not have digital credentials on any GPI web-based platforms is to forward code to that “Data Subject” via an alternative communication channel to the standard e-mail address which served the purpose of the initial contact and has a code generated by GPI included on all messages that pertain the exercise of “Data Subjects’” rights or actions over such “Data Subject’” “Personal Data”.
Depending on where they reside, the Data Subject have the following set of established rights under respective applicable Personal Data Protection laws.
Most Personal Data Protection laws around the Globe contain the same rights, we are herein using the California Privacy Law (CCPA/CPRA) merely as an example of the Rights under U.S. Privacy Laws:
[GDPR] Right of access. The right to obtain from the Controller confirmation as to whether his/ her personal data is being processed, and, where that is the case, access to such personal data as well as related information.
[CCPA] Right to know and access your personal information – similar to the Right of Access under the GDPR, California resident natural persons have the
right to:
- Know the categories of personal information we collect and the categories of sources from which we got the information;
- Know the business or commercial purposes for which we collect and share personal information;
- Know the categories of third parties and other entities with whom we share personal information; and
- Access the specific pieces of personal information we have collected about you.
[GDPR] Right to rectification. The right to obtain the rectification of inaccurate Personal Data pertaining to that Data Subject.
[GDPR] Right to erasure. The right to have Personal Data pertaining to him/ her that is under Processing by GPI erased and therefore Processing stopped, unless a legal duty or have a legitimate ground to retain certain data prevents GPI from observing such right, in which case the Data Subject shall be duly informed.
[CCPA] Right to deletion – again in a similar manner to what the GDPR rules, natural persons who reside in the state of California may, in some circumstances, ask us to delete their personal data/ information.
[GDPR] The right to restrict processing. Under relevant conditions set out by the law, the right to request and have in place processing restrictions (in scope and purpose) towards Personal Data that pertains to him/ her. When exercising this right, the Data Subject must be specific about which processing activities are being requested to be restricted and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[GDPR] The right to object to processing. The right to object to processing activities that have been qualified under this Privacy Policy has occurred under the Legal Basis of Legitimate Interest by the side of GPI. The exercise of this right may also occur where the Data Subject wishes to opt-out from an existing Service (and not necessarily canceling the Service). When exercising this right, the Data Subject must be specific about which processing activities are being requested to stop and the Controller shall provide feedback to the Data Subject on either the completion of the request or any potential collateral impact that may derive from implementing the requested objection to Processing, asking for additional confirmation prior to implementing the request.
[CCPA] Right to opt out of sales – We do not “sell “ your data under any circumstances.
[GDPR] Right to data portability. The right to receive the Personal Data pertaining to that Data Subject, in a structured, commonly used and machine-readable format as well as the right to transmit such Personal Data to another controller without hindrance. GPI will share the Personal Data over a secure channel, and that (depending on the type of Data as well as volume) may imply the need to convey a “password” via an alternative communication channel to the Data Subject to ensure authorized secure access.
[GDPR] Right to be informed about a Personal Data Breach. The Data Subject has the right (and it is the Controller’s obligation by law to ensure it) to be informed of any unauthorized disclosure or potential disclosure of his/ her Personal Data to unauthorized 3rd parties within 72 hours of its occurrence.
[GDPR] Right to lodge a complaint with a supervisory authority. The right to lodge a complaint regarding GPI’s Processing activities over his/ her Personal Data towards any of the EU Member States data protection Supervisory Authorities. GPI is however also available to provide any clarification towards those Data Subjects who may feel that it’s Processing of the Personal Data that pertains to them has negatively impacted them or somehow breached their rights under GDPR and/ or the right to Privacy, having such Personal Data processed in a secure manner and Confidentiality assurance. Data Subject may submit a complaint via the request process as per herein defined ahead.
[LGPD Brazil] Right to Anonymization , Blocking, or Deletion: The LGPD explicitly grants the right to request the anonymization, blocking, or deletion of unnecessary or excessive data, or data not processed in compliance with the law.
[LGPD Brazil] Information on Shared Usage: The LGPD explicitly requires controllers to inform data subjects about which public and private entities their data has been shared with.
[CCPA] Right to be free from discrimination – You may exercise any of the above rights without fear of being discriminated against. We are, however, permitted to provide a different price or rate to you if the difference is directly related to the value provided to you by your data.
For any of the above-mentioned CCPA related rights, you may designate an authorized agent to make a request on your behalf. In the request, you or your authorized agent must provide including information sufficient for us to confirm the identity of an authorized agent. We are required to verify that your agent has been properly authorized to request information on your behalf and this may take additional time to fulfill your request.
We will use the information you provide to make your CCPA rights requests to verify your identity, identify the personal information we may hold about you, and act upon your request.
Any “Data Subject” may exercise his/ her rights under “GDPR” by reaching out to GPI’ “DPO” through the e-mail address dataprivacy@globalproductinsights.com.
If you have any questions, complaints or wish to exercise your rights under “GDPR”, please do make clear on your message:
- Purpose: Question; Complaint; Exercise of the “Data Subject’s” rights under “GDPR”
- WHAT triggered your need to contact us?
- WHEN did the root cause which triggered the need to contact us took place?
- If a Member, your Member ID, or if not a mobile phone number or alternative personal e-mail address so we may proceed with a two-factor authentication process.
Why the need to provide alternative personal contact?
Under “GDPR” only the “Data Subject” may exercise his/ her rights, hence companies must ensure and document that the “Data Subject” or his/ her legal representatives are the ones interacting with the company while acting over his/ her “Personal Data”. The way to ensure such “authentication” with regards to “Data Subjects” who do not have digital credentials on any GPI web-based platforms is to forward code to that “Data Subject” via an alternative communication channel to the standard e-mail address which served the purpose of the initial contact and has a code generated by GPI included on all messages that pertain the exercise of “Data Subjects’” rights or actions over such “Data Subject’” “Personal Data”.
