Your rights and how to exercise them

Right of access
At any time you have the right to be informed as to whether or not Epic Blue processes your personal data. If Epic Blue processes this data
you have the right to access this data and to obtain the following additional information:
• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients (in particular recipients in third countries);
• where possible, the period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• the existence of your privacy rights;
• the right to lodge a complaint with the supervisory authority;
• the information that Epic Blue possesses concerning the source of the data in case Epic Blue received the data from a third party;
• the existence of automated decision-making.

You also have the right to obtain a free copy of the processed data, in an understandable form. Epic Blue may charge a reasonable fee to cover its administrative costs for each additional copy that you may request.

Right of rectification of personal data

You have the right to have incomplete, incorrect, inappropriate or outdated personal data corrected or removed without delay. To keep your information up-to-date, Epic Blue requests you to notify us of any change, such as e.g. a move or change of e-mail address.

Right to erasure of personal data ("right to be forgotten")

You have the right to have your personal data deleted without unreasonable delay in the following cases:
• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you withdraw your previous consent on which the processing is based and there is no other legal ground that Epic Blue can invoke for (further) processing;
• you object to the processing of your personal data and there are no overriding legitimate grounds for the (further) processing by Epic Blue;
• your personal data are unlawfully being processed;
• your personal data must be deleted in order to comply with a legal obligation;
• your personal data were collected when you were still a minor.

It must be taken into account that Epic Blue cannot always delete all requested personal data, for example, when Epic Blue is legally obliged to keep this information (e.g. invoicing data) or when its processing is necessary for the establishment, exercise or defense of a legal claim. Epic Blue will inform you further about this in the answer to your request.

Right to restriction of processing

You have the right to obtain the restriction of the processing of your personal data if one of the following applies:
• you contest the accuracy of the personal data: the use of the personal data is limited for a period that enables Epic Blue to verify the accuracy of the data;
• the processing of your personal data is unlawful: instead of deleting your data, you request the restriction of its use;
• Epic Blue no longer requires your data for the original processing purposes, but you require them for the establishment, exercise or defense of a legal claim: instead of erasing your data, its use is limited for the establishment, exercise or defense of the legal claim;
• as long as no decision has been taken on the exercise of your right of objection to the processing, you request to limit the use of your data.

Right to data portability

You have the right to request the transfer of your personal date ('recuperation'), for example to be able to engage another service provider more easily. This is only possible for the personal data you have provided to Epic Blue yourself, based upon consent or upon an agreement.

In all other cases you cannot invoke this right (for example if the processing of your data takes place on the basis of a legal obligation).

Two aspects relate to this right:
• you may request Epic Blue to recover the personal data concerned in a structured, commonly used and machine-readable format; and
• you may request Epic Blue to transmit the relevant personal data directly to another controller. In this case you are responsible for the correctness and security of the (e-mail) address you provide for the transfer. Epic Blue may refuse this right if the transfer is technically not possible.

Right to object to the processing of your personal data

You have the right to object to the processing of your personal data on grounds relating to your particular situation in case the processing takes place on the legal ground of the legitimate interest of Epic Blue or in the general interest. Epic Blue will cease the processing of your personal data, unless Epic Blue can demonstrate compelling and legitimate grounds for the processing which override your interests, rights Page 4/5 and freedoms or when the processing of personal data is related to the establishment, exercise or defense of a legal claim (for example,
filing a court claim).

Right to withdraw consent
Insofar as the processing of personal data is based on consent, you have the right to withdraw your consent at any time.

Right to file a complaint
You have the right to lodge a complaint with the Data Protection Authority. You can reach them at the following address: Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels.

Titel Security