Additional terms that apply to some residents of the European Economic Area (EEA).

In addition to the rights already recorded above, if you are based in the EEA, you may have the following additional rights in relation to the personal information we hold about you:

Right to erasure

You can ask us to delete or remove your personal information in some circumstances, such as where we no longer need it or, if we are relying on your consent to process the information, you withdraw your consent.  If you are entitled to erasure we will comply with your request.  If we have shared your personal information with others, we will let them know about your request where reasonably possible.  If you ask us, where it is reasonably possible and lawful for us to do so, we will also tell you who we have shared your personal information with so that you can contact them directly.

Right to restrict processing

You can ask us to ‘block’ the processing of your personal information in certain circumstances, such as where you contest the accuracy of that personal information or you do not want us to erase your information but require restriction of processing instead.  If you are entitled to restriction of processing of your personal information, and we have shared your personal information with others, we will let them know about the restriction where it is reasonably possible for us to do so.  If you ask us, where it is reasonably possible and lawful for us to do so, we will also tell you who we have shared your personal information with so that you can contact them directly.

Right to data portability

You have the right, in certain circumstances, to obtain personal information you have provided us and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.

Right to object

You can ask us to stop processing your personal information, and we will do so, if we are:

• relying on our own or someone else’s legitimate interests to process your personal information, except if we can demonstrate compelling legal grounds for the processing; or
• processing your personal information for direct marketing purposes.

Right to withdraw consent

If we rely on your consent as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.

Right to lodge a complaint with the supervisory authority

If you have a concern about any aspect of our privacy practices, including the way we have handled your personal information, you can report it to the relevant Supervisory Authority in the EEA.

Please be aware that some of these rights may be limited or unavailable where we have an overriding interest or legal obligation to continue to process the data, or where data may be exempt from disclosure due to reasons of legal professional privilege or professional secrecy obligations.

Your Personal Information may be transferred to, and processed in, countries other than New Zealand for the purposes contemplated in this Privacy Policy.

For individuals in the European Economic Area (EEA), this means that your personal information may be transferred outside of the EEA. Where your personal information is transferred outside the EEA, it will only be transferred to countries that have been identified as providing adequate protection for EEA data (like New Zealand), or to a third party where we have approved transfer mechanisms in place to protect your personal information (e.g. by entering into the European Commission’s Standard Contractual Clauses).

Please email us at privacy@duncancotterill.com if you would like to obtain a copy of the safeguards in place with our third-party providers