This section applies if the processing of your Personal Information is subject to the data protection laws of the European Economic Area, the United Kingdom, or Switzerland (collectively, “European Data Protection Laws”). For purposes of this section, “Personal Information” refers to the same information described elsewhere in this Privacy Policy and constitutes “personal data” as defined under the GDPR.
1. Our Legal Bases for Processing Personal Information
We process Personal Information only when we have a lawful basis to do so under applicable law. Depending on the context and purpose of processing, our lawful bases may include:
- Contractual necessity, such as processing necessary to provide the Services, fulfill orders, manage accounts, and perform transactions requested by you;
- Compliance with legal obligations, including recordkeeping and regulatory requirements;
- Legitimate interests, such as operating and improving the Services, preventing fraud, securing our systems, responding to inquiries, and conducting analytics and marketing activities where permitted by law; and
- Consent, where required by European Data Protection Laws, including for certain cookie-based technologies and targeted advertising activities.
Where processing is based on consent, you may withdraw your consent at any time as described below.
2. Your Rights in Relation to Your Personal Information
In addition to any rights described elsewhere in this Privacy Policy, you may have the following rights under European Data Protection Laws:
- Access. The right to request access to your Personal Information;
- Rectification. The right to request correction of inaccurate or incomplete Personal Information;
- Erasure. The right to request deletion of your Personal Information, subject to legal exceptions;
- Data portability. The right to receive your Personal Information in a structured, commonly used, and machine-readable format and, where feasible, to have it transmitted to another controller;
- Objection. The right to object to certain processing of your Personal Information, including processing based on our legitimate interests;
- Restriction of processing. The right to request restriction of processing in certain circumstances; and
- Withdrawal of consent. Where processing is based on consent, the right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.
3. Complaints and Supervisory Authorities
You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement of European Data Protection Laws has occurred.
4. International Transfers
Personal Information may be transferred to and processed in countries outside of Europe. Where required, we rely on appropriate safeguards recognized under European Data Protection Laws, such as standard contractual clauses or other lawful transfer mechanisms.
To exercise your rights or obtain additional information, please contact us at hello@cordsclub.com. We may request additional information as necessary to verify your identity and respond to your request in accordance with applicable law.
