The General Data Protection Regulation provides the following rights to individuals.
Right of access to your personal data
You have the right to know what personal data we process about you, to receive information about how we process it and to receive a copy of this data.
Right to ask us to correct wrong information about you
We strive to keep personal data about you up-to-date but if you notice that we process outdated or otherwise incorrect data about you, you always have the right to ask us to correct it.
Right to erasure (right to be forgotten)
In certain situations, you have the right to ask for your personal data to be deleted. For example, you can exercise this right if you think that we no longer need your personal data for the purposes listed in this privacy notice. Once we have validated your request, we will delete your data unless we need to retain it to comply with our legal obligations, such as book-keeping obligations. In any case, your personal data will be removed automatically from Neste’s systems after our defined retention times
Right to restrict processing
In certain circumstances, you have the right to ask us to restrict processing your personal data. This means that we will not do anything else with your personal data but continue storing it in our IT systems. Once we have validated your request, we will stop processing such data.
Right to object
You always have the right to opt-out of direct marketing communication by clicking the unsubscribe link we provide you with in all our marketing communications with you.
You also have the right to object to the processing of your personal data that we carry out for our legitimate business interests described in this privacy notice. Upon receiving your request, we will carefully assess it and stop processing your personal data if our processing has indeed been unreasonable.
Right to data portability
You have the right to ask us to send you – or someone else – a copy of the data you have provided to us in a commonly used machine-readable format. This right only applies to the personal data that you have provided to us when we have collected data based on your consent or on a contract that we have with you. Once we have validated your request, we will transfer your data to your designated destination.
Right to lodge a complaint with a data protection supervisory authority
We hope that you would always contact us if you have questions about how we process personal data. However, if you think that we do not comply with data protection law when processing your personal data, you have the right to lodge a complaint with a data protection supervisory authority. You may in particular contact the supervisory authority of the country you live or work in.