9. Your Rights
Our responsibility for your rights 9.1 BLANCHE Media is in its capacity of data controller responsible for ensuring that you can exercise your rights and that your personal data is processed in accordance with applicable law. You may at any time contact us to exercise your rights. Your will find our contact details in the bottom of the Privacy Notice. 9.2 BLANCHE Media is responsible for responding to your request to exercise your rights within one month from our receipt of your request. We are entitled to extend this period by two months when necessary, taking into account the complexity of your request or if we have received a large number of requests. We will inform you of any such extension within one month or receipt of your request, together with the reasons for the delay and information about your right to lodge a complain with a supervisory authority. 9.3 All information and communication, and all actions we carry out, is at no cost for you. If the action you request is manifestly unfounded or excessive, we are entitled to charge you an administrative fee to provide you with the requested information or carry out the requested action or refuse to meet your request. Your right to access, rectification, erasure and restriction of processing 9.4 You have right to request: a) Access to your personal data. This means that you have the right to request information on our use of your personal data. You also have the right to request a copy of the personal data being processed by us, at no cost. However, we may provide you with the information in a commonly used electronic format. b) Rectification of your personal data. We will at your request, or at our own initiative, rectify, anonymise, erase or complement personal data that you or we discover is inaccurate, incomplete or misleading. You also have the right to complete the personal data with additional data if relevant information is missing. c) Erasure of your personal data. You have the right to request that we erase your personal data if we no longer have an acceptable reason for processing the data. Given this, erasure shall be made by us if: (i) the personal data is no longer necessary for the purposes for which it was collected, (ii) we use your personal data with your consent, and you withdraw your consent, (iii) you object to the processing of your personal data based on our legitimate interest and there is no overriding legitimate ground for the processing, (iv) the personal data has not been lawfully processed or (v) we are required to erase the personal data due to a legal obligation However, there might be requirements under applicable law, or other compelling reasons, that prevents us from immediately erase your personal data. In such case, we will stop using your personal data for any other reasons than to comply with the applicable law, or the relevant compelling reason. d) Right to restrict processing. This means that we temporarily restrict the processing of your personal data. You have the right to request restriction of the processing when: (vi) you have requested rectification of your personal data in accordance with section 8.2.1 b) above, during the period of time we are verifying the accuracy of the data, (vii) the processing is unlawful and you do not want the personal data to be erased, (viii) BLANCHE Media, in its capacity as data controller, does no longer need the personal data for the purposes for which it was collected, but you require us to retain the information for the establishment, exercise or defense of a legal claim, or (ix) you have objected to our legitimate interest for the processing in accordance with section 9.6 below, during the time we determine whether our legitimate interest overrides your privacy rights. 9.5 At BLANCHE Media, we will take all reasonable and possible actions to notify any recipients of your personal data as set out in this section 9 above regarding any rectification, erasure or restrictions carried out by us. At your request, we will also inform you of which third parties we have shared your personal data with. Your right to object to the processing 9.6 You have the right to object to the processing of your personal data when such processing is made with a legitimate interest as the legal basis (please see section 3 above). If you object to such processing, we will only continue with the processing if we have a compelling legitimate reason for the processing that outweighs your interests, rights or freedoms, or if continued processing is necessary for the establishment, exercise or defense of a legal claim. Your right to withdraw your consent 9.7 If we need your consent in order to process your personal data, you always have the right to withdraw such consent at any time by contacting us. You will find our contact details at the end of this Privacy Notice. Your right to data portability 9.8 According to the GDPR, you have right to data portability which entails that you have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used, and machine-readable format and you have the right to transmit those data to another controller. Your right to data portability is applicable when we process your personal data on the basis of consent or performance of contract. The right to data portability entails in practice that you for example have the right to receive and transfer the personal data you have given to us when you created a user account on our website. Your right to lodge a complaint with the supervisory authority 9.9 You have the right to lodge a complaint regarding our processing of your personal data with the supervisory authority. The competent supervisory authority in Sweden is Integritetsskyddsmyndigheten, IMY.