Data Subject Rights – Your Control Over Personal Data

Exercising Your Rights Under Data Protection Laws

Effective Date: June 9, 2025
Last Updated: June 9, 2025

BatchSorter.com is committed to respecting and protecting your privacy rights under applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other regional privacy regulations. This page explains your rights as a data subject and how to exercise them.

1. Overview of Data Subject Rights

1.1 Your Fundamental Rights

As a data subject, you have fundamental rights regarding how your personal data is collected, processed, and used. These rights are designed to give you control over your personal information and ensure transparency in how organizations handle your data.

1.2 Applicable Laws

Your rights may vary depending on your location and the applicable data protection laws:
– GDPR: For individuals in the European Economic Area (EEA), United Kingdom, and Switzerland
– CCPA: For California residents
– Other Regional Laws: Various other regional and national privacy laws may apply

1.3 Our Commitment

We are committed to facilitating the exercise of your data subject rights in a timely, transparent, and user-friendly manner. We have implemented processes and procedures to ensure that your requests are handled efficiently and in compliance with applicable laws.

2. Right to Information and Transparency

2.1 Right to Be Informed

You have the right to be informed about how we collect, use, and process your personal data. This includes:
– Purpose of Processing: Why we collect and use your personal data
– Legal Basis: The legal justification for processing your data
– Data Categories: What types of personal data we collect
– Recipients: Who we share your data with, if anyone
– Retention Periods: How long we keep your personal data
– Your Rights: What rights you have regarding your personal data

2.2 Transparency Measures

We provide transparency through:
– Privacy Policy: Comprehensive information about our data practices
– Privacy Notices: Specific notices at the point of data collection
– Regular Updates: Notifications about changes to our privacy practices
– Clear Communication: Plain language explanations of our data processing activities

3. Right of Access (Subject Access Request)

3.1 What You Can Request

You have the right to obtain confirmation of whether we process your personal data and, if so, to access that data along with specific information about our processing activities.

3.2 Information We Provide

When you exercise your right of access, we will provide:
– Confirmation: Whether we process your personal data
– Categories of Data: The categories of personal data we process
– Processing Purposes: The purposes for which we process your data
– Recipients: Information about third parties who receive your data
– Retention Period: How long we plan to store your data
– Data Source: Where we obtained your personal data (if not directly from you)
– Automated Decision-Making: Information about any automated decision-making or profiling
– Copy of Data: A copy of your personal data in a commonly used format

3.3 How to Request Access

To request access to your personal data:
1. Submit a Request: Email us at support@batchsorter.com with “Data Access Request” in the subject line
2. Verify Your Identity: Provide information to verify your identity (we may request additional verification)
3. Specify Your Request: Clearly describe what information you’re seeking
4. Receive Response: We will respond within 30 days (or as required by applicable law)

4. Right to Rectification (Correction)

4.1 Correcting Inaccurate Data

You have the right to have inaccurate personal data corrected and incomplete personal data completed. This includes:
– Factual Corrections: Correcting factual errors in your personal data
– Completing Information: Adding missing information to make your data complete
– Updating Information: Updating outdated information

4.2 How to Request Rectification

To request correction of your personal data:
1. Contact Us: Email support@batchsorter.com with “Data Correction Request” in the subject line
2. Identify Errors: Clearly identify the inaccurate or incomplete information
3. Provide Corrections: Supply the correct or missing information
4. Verification: We may verify the accuracy of the new information
5. Implementation: We will make the corrections and notify relevant third parties if necessary

5. Right to Erasure (Right to Be Forgotten)

5.1 When Erasure Applies

You have the right to have your personal data erased in certain circumstances:
– No Longer Necessary: The data is no longer necessary for the original purpose
– Withdrawal of Consent: You withdraw consent and there’s no other legal basis for processing
– Unlawful Processing: The data has been processed unlawfully
– Legal Obligation: Erasure is required for compliance with a legal obligation
– Child’s Data: The data was collected from a child without proper consent

5.2 Limitations to Erasure

We may not be able to erase your data if we need it for:
– Legal Obligations: Compliance with legal requirements
– Legal Claims: Establishment, exercise, or defense of legal claims
– Public Interest: Tasks carried out in the public interest
– Freedom of Expression: Exercise of the right to freedom of expression and information

5.3 How to Request Erasure

To request erasure of your personal data:
1. Submit Request: Email support@batchsorter.com with “Data Erasure Request” in the subject line
2. Specify Data: Identify the specific data you want erased
3. Provide Justification: Explain why you believe erasure is appropriate
4. Account Closure: Note that erasure may require closing your account
5. Confirmation: We will confirm completion of erasure or explain any limitations

6. Right to Restrict Processing

6.1 When Restriction Applies

You have the right to restrict the processing of your personal data in certain situations:
– Accuracy Disputes: While we verify the accuracy of disputed data
– Unlawful Processing: When processing is unlawful but you prefer restriction over erasure
– Data No Longer Needed: When we no longer need the data but you need it for legal claims
– Objection Pending: While we verify whether our legitimate interests override your objection

6.2 Effect of Restriction

When processing is restricted, we will:
– Store Only: Only store the data, not process it further
– Limited Processing: Process only with your consent or for specific legal purposes
– Notification: Inform you before lifting the restriction

6.3 How to Request Restriction

To request restriction of processing:
1. Contact Us: Email support@batchsorter.com with “Processing Restriction Request” in the subject line
2. Specify Grounds: Clearly state the legal grounds for restriction
3. Identify Data: Specify which data processing should be restricted
4. Temporary Measure: Understand that restriction is typically temporary

7. Right to Data Portability

7.1 Portability Requirements

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller when:
– Automated Processing: The processing is based on automated means
– Consent or Contract: The processing is based on consent or contract performance
– Technical Feasibility: It’s technically feasible to transfer the data

7.2 What We Provide

For data portability requests, we will provide:
– Structured Format: Data in a commonly used, machine-readable format (such as CSV or JSON)
– Complete Data: All personal data you provided to us
– Direct Transfer: Where technically feasible, we can transfer data directly to another service provider

7.3 How to Request Portability

To request data portability:
1. Submit Request: Email support@batchsorter.com with “Data Portability Request” in the subject line
2. Specify Format: Indicate your preferred data format if you have one
3. Destination: If you want direct transfer, provide details of the receiving organization
4. Verification: We will verify your identity and the feasibility of the request

8. Right to Object

8.1 Grounds for Objection

You have the right to object to processing of your personal data in certain circumstances:
– Legitimate Interests: Processing based on legitimate interests or public task
– Direct Marketing: Any processing for direct marketing purposes
– Profiling: Automated decision-making and profiling
– Research: Processing for scientific, historical research, or statistical purposes

8.2 Effect of Objection

When you object to processing:
– Immediate Stop: We will stop processing for direct marketing immediately
– Assessment: For other objections, we will assess whether we have compelling legitimate grounds
– Cessation: We will stop processing unless we can demonstrate compelling legitimate grounds

8.3 How to Object

To object to processing:
1. Contact Us: Email support@batchsorter.com with “Processing Objection” in the subject line
2. Specify Processing: Identify the specific processing activities you object to
3. State Grounds: Explain your grounds for objection
4. Marketing Opt-Out: Use unsubscribe links in marketing emails for direct marketing objections

9. Rights Related to Automated Decision-Making

9.1 Automated Decision-Making Rights

You have rights regarding automated decision-making, including profiling, that produces legal effects or significantly affects you:
– Right to Human Review: Request human intervention in automated decisions
– Right to Explanation: Receive an explanation of the automated decision-making process
– Right to Challenge: Challenge automated decisions and request reconsideration

9.2 Our Use of Automated Processing

We may use automated processing for:
– Fraud Prevention: Automated systems to detect and prevent fraudulent activities
– System Security: Automated security measures to protect our systems
– Service Optimization: Automated analysis to improve our services

9.3 Safeguards

When we use automated decision-making, we implement safeguards including:
– Human Oversight: Regular human review of automated decisions
– Bias Prevention: Measures to prevent discriminatory outcomes
– Transparency: Clear information about automated decision-making processes

10. How to Exercise Your Rights

10.1 Contact Methods

You can exercise your data subject rights by contacting us through:
– Email: support@batchsorter.com (preferred method)

10.2 Information Required

When submitting a request, please provide:
– Clear Identification: Your full name and email address associated with your account
– Specific Request: Clearly state which right you want to exercise
– Verification Information: Information to verify your identity
– Detailed Description: Specific details about your request to help us process it efficiently

10.3 Identity Verification

To protect your privacy, we may request additional information to verify your identity before processing your request. This may include:
– Account Information: Details about your BatchSorter account
– Purchase History: Information about your software purchases
– Additional Documentation: Government-issued ID or other verification documents

11. Response Timeframes and Procedures

11.1 Response Times

We will respond to your requests within the following timeframes:
– GDPR Requests: Within 30 days (may be extended by 60 days for complex requests)
– CCPA Requests: Within 45 days (may be extended by 45 days for complex requests)
– Urgent Requests: We prioritize requests involving potential harm or legal deadlines

11.2 Request Processing

Our request processing includes:
– Acknowledgment: We will acknowledge receipt of your request within 72 hours
– Verification: We will verify your identity and the validity of your request
– Processing: We will process your request according to applicable legal requirements
– Response: We will provide a complete response or explanation of any limitations

11.3 Complex Requests

For complex requests that require additional time:
– Notification: We will notify you of the extension and the reasons for it
– Regular Updates: We will provide updates on the progress of your request
– Partial Responses: We may provide partial responses while completing complex requests

12. Fees and Charges

12.1 Generally Free

We do not charge fees for most data subject rights requests. However, we may charge a reasonable fee for:
– Excessive Requests: Requests that are manifestly unfounded or excessive
– Repetitive Requests: Multiple copies of the same information
– Administrative Costs: Requests that require significant administrative effort

12.2 Fee Notification

If a fee applies to your request:
– Advance Notice: We will notify you of the fee before processing your request
– Fee Justification: We will explain the basis for the fee
– Payment Options: We will provide information about payment methods
– Request Confirmation: You can choose to proceed with or withdraw your request

13. Appeals and Complaints

13.1 Internal Appeals

If you are not satisfied with our response to your data subject rights request:
– Appeal Process: Contact our Privacy Officer to request an internal review
– Additional Information: Provide any additional information that supports your position
– Review Timeline: We will review your appeal within 30 days
– Final Response: We will provide a final response explaining our decision

13.2 Regulatory Complaints

You have the right to lodge a complaint with supervisory authorities:
– Data Protection Authorities: Contact your local data protection authority
– GDPR Complaints: EU residents can contact their national data protection authority
– CCPA Complaints: California residents can contact the California Attorney General
– Other Jurisdictions: Contact the relevant privacy regulator in your jurisdiction

13.3 Supervisory Authority Contacts

Key supervisory authorities include:
– European Data Protection Board: edpb.europa.eu
– UK Information Commissioner’s Office: ico.org.uk
– California Attorney General: oag.ca.gov
– Your Local Authority: Contact information available through official government websites

14. Special Considerations

14.1 Deceased Individuals

Rights of deceased individuals may be exercised by:
– Legal Representatives: Appointed legal representatives or executors
– Family Members: Close family members in certain jurisdictions
– Documentation Required: Proof of authority to act on behalf of the deceased

14.2 Children’s Data

For personal data of children:
– Parental Rights: Parents or guardians can exercise rights on behalf of children
– Age Verification: We may require verification of the child’s age and parental authority
– Special Protection: Enhanced protections apply to children’s personal data

14.3 Business Contacts

For business contact information:
– Limited Rights: Some rights may be limited for business contact data
– Legitimate Interests: Business purposes may override certain individual rights
– Professional Context: Rights are balanced against legitimate business needs

15. Updates and Changes

15.1 Policy Updates

We may update this Data Subject Rights page to reflect:
– Legal Changes: Changes in applicable data protection laws
– Process Improvements: Enhancements to our rights fulfillment processes
– New Rights: Recognition of additional data subject rights

15.2 Notification of Changes

We will notify you of significant changes through:
– Website Updates: Updated information posted on our website
– Email Notifications: Direct notifications to registered users
– Privacy Policy Updates: References in our main Privacy Policy

16. Contact Information

16.1 Privacy Officer

For all data subject rights requests and privacy inquiries:
Email: support@batchsorter.com

16.2 Data Protection Representative (EU)

For EU residents, our Data Protection Representative:
Email: support@batchsorter.com

16.3 Response Commitment

We are committed to:
– Timely Responses: Responding to all requests within legal timeframes
– Clear Communication: Providing clear, understandable responses
– Respectful Service: Treating all requests with respect and professionalism
– Continuous Improvement: Regularly improving our rights fulfillment processes

17. Conclusion

Your privacy rights are fundamental, and we are committed to helping you exercise them effectively. This page provides comprehensive information about your rights and how to exercise them, but if you have any questions or need assistance, please don’t hesitate to contact our Privacy Officer.

We believe that transparency and user control are essential elements of privacy protection, and we will continue to enhance our processes to ensure that your rights are respected and protected.

For the most current version of this page and additional privacy resources, visit: batchsorter.com/privacy