Introduction

At CFHRZ, we take data protection and privacy seriously. This GDPR considerations page outlines our commitment to complying with the General Data Protection Regulation (GDPR) and informs you about how we collect, use, and protect your personal data. Please read this page carefully to understand your rights and how we process your data.

Lawful Basis for Data Processing

We only collect and process your personal data when we have a lawful basis for doing so. This includes obtaining your explicit consent for specific processing activities or when necessary to fulfill a contract, comply with a legal obligation, protect vital interests, perform a task in the public interest, or pursue our legitimate interests in a way that does not outweigh your rights and freedoms.

Transparency and Consent

We are transparent about how we collect and use your personal data. When we require your consent for specific processing activities, we will provide clear and unambiguous information about the purpose and method of data processing. You have the right to withdraw your consent at any time, and we will promptly respect your decision.

Data Subject Rights

You have certain rights regarding your personal data under the GDPR:

1. Right of Access: You can request information about the personal data we hold about you.
2. Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to have it corrected.
3. Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data under certain circumstances.
4. Right to Restriction of Processing: You can request that we limit the processing of your personal data in specific situations.
5. Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format.
6. Right to Object: You have the right to object to certain types of processing, such as direct marketing.

To exercise any of these rights, please contact us using the details provided below.

Data Protection Officer (DPO)

CFHRZ has appointed a Data Protection Officer (DPO) to oversee data protection strategies, policies, and compliance. You can contact our DPO .

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay.

Data Processing Agreements

When we share personal data with third-party vendors or partners, we ensure that appropriate data processing agreements are in place to guarantee GDPR compliance and protect your data.

International Data Transfers

If we transfer your personal data outside the EU/EEA, we will ensure adequate safeguards are implemented to protect your data as required by the GDPR.

Privacy by Design and Default

We follow privacy-by-design principles, integrating data protection considerations into all our data processing activities. We only process personal data when necessary for the specified purposes and ensure that appropriate security measures are in place.

Records of Processing Activities

We maintain records of our data processing activities, as required by the GDPR. These records include the purposes of processing, categories of data subjects, and recipients of the data.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us.

Changes to this GDPR Considerations Page

We may update this GDPR considerations page from time to time to reflect changes in our data processing practices or legal requirements. Any updates will be posted on this page, and we encourage you to review it periodically.

Date of last update: 16-07-2023