In accordance with Chapter III, Article 15-21 GDPR, the User has the following rights regarding their Personal Data processing by eConsulting:

• The right to access their Personal Data,
• The right to rectify the data being processed,
• The right to delete data (‘the right to be forgotten’),
• The right to limit data processing,
• The right to transfer data,
• The right to object to the further data processing,
• The right not to be subject to decisions based solely on automated processing, including profiling,
• Each of the above rights is exercised at the User’s request. eConsulting examines submitted application and responds within 1 month since the date of receipt of the application.

Under the right, the User may, at any time, withdraw their consent for further processing of Personal Data for purposes that require approval, provided the withdrawal of the consent does not affect the lawful use of personal data in actions based on approval before its withdrawal or for purposes of establishing, investigation or defence of legal claims. In any such case, the User is informed about the processing time.

Under the right of access, the User is entitled to obtain the following information in the form of a copy:

• Purposes of processing Personal Data;
• Categories of Personal data – what data is processed, e.g. name and surname, phone number;
• Information on recipients or categories of data recipients – to whom (a person, firm, institution) data may be disclosed;
• Information on the right to request eConsulting to rectify data, remove it or restrict its processing and to object to specific data processing;
• Information on the possibility of lodging a complaint with the Office for Personal Data Protection;
• Information on the data source if the data was not obtained directly from the User – indicating a person or company or institution that provided the Personal Data;
• On the use of profiling: what principles is it used on, what can be the consequences of profiling for the User.

eConsulting informs that each subsequent copy of Personal Data relates to a fee resulting from costs incurred in connection with the creation of another copy of Personal Data.

eConsulting stipulates that it has the possibility not to respond to a request, but also to provide a response later than the above (up to two months) due to the number of inquiries or the complexity of the query sent. By complicated nature, we understand the necessity of compiling Data from many IT systems or the need to consult more than one person from a department or departments in order to obtain the information being the subject of the application.

In both scenarios described above, eConsulting undertakes to inform the User about this fact, providing a justification each time.