Your Rights

The following rights under the GDPR are available to you if you are located in the European Economic Area (“EEA”). If you wish to exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days of receiving it. Before accepting your request, we may need to ask for some identity documentation from you, to make sure we don’t inadvertently provide your personal information to someone else.

a. Editing and updating personal information

If you are a registered user with an account and find that your personal information needs to be edited or updated, you can change your personal information directly on the site. If one of our online tools does not give you the option to edit personal information yourself, or you wish to update the personal information we otherwise hold about you, you can ask us to update it by contacting us using the Contact Us form on our website. Please make sure to provide us with all the information we need to be able to properly address your request, including both the old and new information.

b. Accessing personal information

You can request details of your personal information that we hold at IVP. We will then confirm whether we hold your personal information, and provide additional details about that data to you. If you ask us, we will provide you with a single copy of your personal information free of charge.

c. Deletion of personal information

At your request, we will delete your personal information if:

• it’s no longer necessary for us to retain your personal information;
• you object to the holding of your personal information (see below);
• your personal information was processed unlawfully; or
• we are required to delete your personal information to comply with our legal obligations.

We will review requests on a case by case basis and we might not be able to comply with your request if we need to hold your personal information:

• to comply with our legal obligations;
• to establish, exercise or defend a legal claim; or
• to perform a task in the public interest.

If for any reason we cannot delete your personal information, we will notify you of the reasons why your request needed to be rejected.

d. Restriction of processing of personal information

You have the right to request us to limit the processing of your personal information if:

• you dispute the accuracy of your personal information;
• your personal information was collected unlawfully and you request a limitation on processing, rather than a deletion of your personal information;
• we no longer need to hold your personal information, but you need your personal information in connection with a legal claim; or
• you object to the use of your personal information based on our legitimate interests pending verification as to whether we have an overriding legitimate ground for such processing.

To the extent needed, we may still keep some of your data to ensure we comply with your request to limit processing, or for other legal purposes.

e. Objecting to certain types of data use, including automated decision making

Where we process your personal information based upon our legitimate interests, you have the right to object to this processing on grounds relating to your particular situation if you feel it impacts on your fundamental rights and freedoms.

Where we process your personal information based upon our legitimate interests and where decisions are made by automated processing which has a legal or other significant effect on you, you may also object to such automated decision making.

f. Portability of personal information

You can request us to send you your personal information in a structured, commonly used, machine-readable format so that it can easily be transferred and used by a third party if:

• you provide us with the personal information;
• the processing of your personal information is based on your consent or required for the performance of a contract; or
• the processing is carried out by automated means.