Information for members in the EEA, UK and Switzerland

If you are located in a country that is a Member State of EEA, UK and Switzerland (“EEA Countries”), we will only process your Personal Information as set out in this Privacy Policy. In order to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), we have implemented appropriate technical and organisational measures.

Hotslot is the data controller for processing of information defined as personal data under applicable data protection laws (“Personal Data”).

LEGAL BASIS

Hotslot processes Personal Data for the purposes set out in our Privacy Policy. We process Personal Data that you submit to us in connection with your use of our website, and also when you use social media platforms such as Facebook and other platforms. A description of how we collect information when users interact with our site or apps is set out below:

EU DATA SUBJECT RIGHTS

According to the applicable laws, you have various rights regarding your personal data. If you wish to assert these rights, please send your request by e-mail or by post to the address specified in the section on the bottom of this Policy, clearly identifying yourself.

Right to acknowledgement and access

You have the right to receive confirmation from Us at any time as to whether personal data relating to you will be processed. If this is the case, you have the right to request from us free of charge information about the personal data stored about you together with a copy of this data.

If personal data are transferred to a third country or an international organization, you have the right to be informed of the appropriate guarantees in accordance with GDPR in connection with the transfer.

Right to correction

You have the right to request Us to correct any inaccurate personal data concerning you without delay. You may also request erasure of your personal data if We can no longer keep data for a legitimate business purpose.

If you have used this service for personal reasons, you are entitled to demand deletion (i.e., removal) of personal data concerning you by us. We are obliged to delete such personal data without delay if one of the following reasons applies:

• personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• you file an objection to the processing pursuant to GDPR, and there are no overriding legitimate grounds for the processing, or you file an objection to the processing pursuant under conditions of GDPR.
• you withdraw your consent, on which the processing was based pursuant according to GDPR, and there is no other legal basis for the processing.
• the deletion of personal data is necessary to fulfil a legal obligation under EU law or the law of the Member States to which we are subject.

Right to limitation of processing

You have the right to request Us to restrict processing if one of the following conditions is met:

• you have a right to dispute the accuracy of your personal data for a period of time that enables us to verify the accuracy of your personal data. If we are unable to verify the accuracy of incomplete or inaccurate personal data, we will stop processing it.
• you also have the right to request the restriction of processing of personal data concerning you, where one of the following applies:
• we no longer need the personal data for the purposes of processing. However, you do need to have access to the personal data in order to assert, exercise or defend claims against us.
• if you have filed an objection against the processing according to GDPR, as long as it is not yet clear whether the justified reasons of our company outweigh yours, we will cease the processing until this fact is finally decided.

Right to Transferability of Data

You have the right to receive the personal data concerning you that you have provided to us in a structured, current and machine-readable format, and you have the right to transmit this data to another person in charge without our interference, provided that

• processing is based on consent or on a contract pursuant according to conditions of GDPR and
• your right to data transferability enables you to obtain and reuse your personal data, which you have provided to us (e.g., on the basis of a contract or in order to take advantage of our services). This right shall be exercised if possible by means of automated technologies or if requested in writing, by e-mail, fax or letter.

Right of objection

We protect your privacy in accordance with the General Data Protection Regulation (GDPR). This includes personal data processing, the right to object to processing and the right to information about processed data.

If We process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.

You have the right to object to the processing of personal data concerning you, for scientific or historical research purposes or for statistical purposes in accordance with GDPR, for reasons arising from your particular situation, unless the processing is necessary to fulfil a task in the public interest.

Automated decisions including profiling

We collect and process your personal data solely on the basis of your consent. In particular, you will be informed about the purposes for data processing at the time of collection and about any changes thereof prior to such change. You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against you or significantly impairs you in a similar manner.

Right to revoke consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time.

Right of appeal to a supervisory authority

You have the right of appeal to a supervisory authority.

If you have EU/EEA residentship and have a concern about our practices concerning the processing of Personal Data that we are not able to resolve, you have the right to lodge a complaint with the data protection authority where you reside or in which you work, or in which the alleged infringement occurred https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

CONTACT US

For all EU Data Subject Rights requests please click here.