Privacy, Personal Data Handling, and other Legal Policies
This page provides access to all of the Resist Hate legal policies, information on your rights to privacy, and the ability to request access to your personal data. If you have any questions related to privacy or any of our legal policies, you can contact us at: Privacy@resisth8.com or use our online Support Request form.
Privacy in Your Browser
Read about deleting cookies in your browser to enhance privacy. The article includes instructions and graphics for how to adjust your cookie and privacy settings in all major browsers. READ MORE
Submit a Data Access Request
Click the button below to use the DSAR* (Data Subject Access Request) Form to submit a request to access, edit, or remove the personal data we have collected about you via any of the methods described in our Privacy Statement. To learn more, Read the information provided below the button.
*What is the DSAR form?
When the General Data Protection Regulation (GDPR) was enforced back in 2018, it was set out to give users control over their data by granting eight data subject rights.
The Right of access empowers individuals to obtain information about the data organizations hold about them, providing them with an understanding of the purposes and methods behind the use of their data.
Even though the Right of access is not a novelty, the GDPR expands it with new mandatory categories of information that the organization is obligated to provide and makes it easier for individuals to submit their requests, access their data, and get information.
What is a Data Subject Access Request?
A Data Subject Access Request (DSAR) is directed to us because we grant users the right to access information about personal data we are processing.
Every user has the right to know and obtain information about the purposes of personal data processing as explained in our Privacy Policy.
The 8 Data Subject Rights
The right to know 🪧 The right of access 🪧 The right to rectification 🪧 The right to be forgotten 🪧 The right to restrict data processing 🪧 The right to data portability 🪧 The right to object to data processing 🪧 Rights in relation to automated data processing, including profiling
1. The right to know
The right to information allows users (data subjects) to know what personal data is collected about them, why, who is collecting data, for how long, how they can file a complaint, and if there is data sharing involved.
2. The right of access
Individuals have a right to submit access requests and attain information from the organization about whether their personal information is being processed.
3. The right to rectification
The right to rectification allows individuals to ask the organization to update any inaccurate or incomplete data they have on them.
4. The right to be forgotten
The right to be forgotten is also known as the right to erasure. This right allows individuals to ask for their personal data to be deleted if:
- Personal data is no longer necessary
- Individual withdraws consent
- Personal data is unlawfully processed
- Individual objects to the processing, and the data controller has no reason to continue processing
- Data erasure is necessary for compliance with a legal obligation (EU law or national law)
5. The right to restrict processing
Individuals can request that an organization limit how it uses its personal data, although the organization is not automatically required to delete it.
However, they have to refrain from processing in certain situations:
- Data is inaccurate (during the verification process)
- Processing is unlawful, but the individual does not want the data to be erased and requests restriction (which is different from the right to be erased)
- The organization no longer needs data, but the individual wants the data to be preserved so the legal claim can be exercised
- The organization is taking measures to verify the data erasure request
6. The right to data portability
Data portability is one of the novelties among data subject rights. It allows individuals to obtain personal data they have previously provided to the organization in a structured, commonly used, and machine-readable format.
Individuals can also request that their data be transferred directly to another organization.
However, it can only be applied to the data that an individual has provided to the organization by consent or contract and if the processing is automated.
7. The right to object to processing
The right to object allows individuals to object to processing personal data at any time, in certain situations, and it will depend on the purpose of processing and the lawful base for processing.
Individuals can also object to data processing based on legitimate interests or tasks in the public interest.
8. Rights in relation to automated decision-making and profiling
The GDPR introduced strict rules when it comes to the processing of personal data that is done without human involvement.
This encompasses different types of profiling, such as assessing individual performance at work, economic status, health, personal preferences, interests, reliability, behavior, or location, if it produces a legal effect that significantly affects them.
However, it will not apply if the processing is necessary for the performance of a contract, if it is authorized by the law, or if the processing is based on explicit consent.
