DuoEscape.com —Privacy Policy

10. The rights of the person concerned with the processing of personal data 

In the context of processing the personal data of users / potential users, the person concerned has the following rights:

Right to information – art. 13 and 14 GDPR. Allows the data subjects to know, from the time they are collected, how the data will be used, to whom they will be disclosed or transferred, what rights the data subjects have on the processed data, etc .;

Right of access to processed personal data – art. 15 GDPR. Allows the person to obtain from DuoEscape. com a confirmation that personal data are processed or not, and, if so, access to that data and other useful information;

Right to rectification or deletion of data – art. 17 GDPR. Allows the person to obtain from DuoEscape.com the deletion / correction of their personal data without undue delay. There are, however, exceptions to this rule, such as: some data are processed to give the public the right to information; data is processed for statistical purposes or archiving purposes; data are processed to meet a legal obligation or are processed to establish or defend a right in court;

The right to request restriction of processing – 18 GDPR: You have the right to obtain restriction of processing in cases where: (i) you consider that processed personal data are inaccurate for a period of time allowing the operator to verify the accuracy of the personal data; (ii) processing is illegal, but you do not wish to delete your personal data, but restrict the use of such data; (iii) if the data controller no longer needs your personal data for the purposes mentioned above, but you need data to establish, exercise or defend a right in court; or (iv) you have opposed your processing for the length of time to verify that the legitimate grounds for the data controller override the rights of the data subject;

The right to data portability – 20 GDPR. Represents the right to receive the personal data you have provided DuoEscape.com in a structured, commonly used and readable form, as well as the right to transfer that data to another operator, in where the processing is based on your consent or the execution of a contract and is done by automatic means;

The right to withdraw your consent for processing, when the processing is based on the consent, without affecting the legality of the processing carried out until that time;

The right to object to the processing of personal data – art. 21 GDPR – for reasons related to your particular situation, when processing is based on legitimate interest, as well as to oppose at any time the processing data for direct marketing purposes, including profile creation;

The right not to be the subject of a decision exclusively based on automated processing, including the creation of profiles, which produces legal effects that concern the data subject or similarly affects it to a significant extent;

The right to lodge a complaint with the National Authority for the Supervision of Personal Data Processing (ANSPDCP) and the right to appeal to the competent courts.

The data protection policy is based on the following data protection principles:

The processing of personal data will be done in a legal, correct and transparent manner;

Collection of personal data will only be done for specified, explicit and legitimate purposes, and the data will not be further processed in a manner incompatible with those purposes;

Collection of personal data will be appropriate, relevant and limited to the information required for the purpose of the processing;

Personal data will be accurate, and where necessary updated;

All necessary steps shall be taken to ensure that incorrect data is erased or corrected without delay;

Personal data will be kept in a form that allows identification of the person concerned and for a period no longer than the one in which personal data is processed;

All personal data will be kept confidential and stored in a manner that provides the necessary security;

Personal data will not be shared with third parties unless it is required for the purpose of providing services under agreements;

Persons concerned have the right to request access to, and rectification and erasure of personal data, impediment or restriction of data processing as well as data portability.