What are your rights

You have the right to exercise the following individual rights in respect to the personal data we process of you:

• Right to withdraw your consent – you have the right to withdraw your consent in the event we asked for your (explicit) consent for a certain processing activity of your personal data. The withdrawal of your consent does not impact the legitimacy of the processing of your personal data prior to the withdrawal of your consent. The consequence of exercising this right is that we no longer will process your personal data for the purpose that you have provided consent for. It may be however possible that we process your personal data for another purpose, such as in order to comply with a minimum retention period, whereby you will be informed accordingly.

• Right of access – you have the right to obtain insight on whether or not we process personal data of you, and where that is the case, access to the personal data that is processed by us and information related to how we process your personal data, including insight in the appropriate safeguards taken in the event of transfer of your personal data outside the European Economic Area.

• The right to rectification – you have the right to rectify i.e. change or supplement your personal data processed by us in the event your personal data: is factually incorrect; or is incomplete or not related to the purpose it was collected; or is in any other way used in a manner that is in conflict with the applicable law.

• Right of erasure – under certain conditions, you have the right to obtain the erasure of your personal data we process of you. These conditions are: we no longer need your personal data relation to the purpose for which they were processed; or we processed your personal data based on your (explicit) consent, however you withdrew the consent; or you successfully objected the processing of your personal data by us; we processed your personal data unlawful; or we are obligated to erase your personal data in order to comply with a legal obligation; or personal data of an individual younger than sixteen (16) years old is collected through an app or website.

• Right to restriction of processing – you have the right to restrict processing of your personal data by us, whereby this right may be invoked in the following situations: you contest the accuracy of your personal data processed by us, whereby during the period in which we assess your contest we will not process your personal data; or we process your personal data unlawfully and you request the restriction of use instead of erasure; or we may no longer process your personal data, however you do not want us to erase your personal data due to establishment, exercise or defence of legal claims; or you objected against the processing of personal data by us, whereby during the period in which we assess your objection we will not process your personal data.

• Right to data portability – you have the right to receive your personal data in a structured, commonly used and machine-readable format, whereby you have the choice to receive this directly from us or send it to a third party.

• Right to object – you have the right to object the processing of your personal data by us subject to certain conditions. Any objections related to the personal data processed by us of you for direct marketing purposes, will always comply to an objection condition.

How to exercise your rights? All individual rights can be exercised by means of sending an email to info@teamgullit.com or a letter to Team Gullit, attn. Legal Department, Keesomstraat 10E, 1821BS Alkmaar, the Netherlands. We request you to include the following information when exercising your individual right: full first and last name and a description of your request.

Upon the submission of a request wherein you exercise your individual right, you will first receive an acknowledgement of receipt from us. Subsequently, we might request additional information in order to identify you and/or respond properly to any individual right exercised. We will handle all individual right exercised without undue delay and in any event within one (1) month of receipt of the request. However, it might be possible that we need more time given the complexity of the individual right exercised. In that event we will inform you, as soon as possible and at least within one (1) month after receipt of your request, that we need up to a maximum of two (2) months of additional time, which results in a response from us within a maximum period of three (3) months after receipt of your request.

Complaint Lastly, you also have the right to lodge a complaint with the relevant supervisory authority in your country of residence, place of employment or any other jurisdiction in which an alleged infringement of data protection law(s) has occurred within the European Union. The Autoriteit Persoonsgegevens is the supervisory authority in the Netherlands. For further information, please refer to the website of Autoriteit Persoonsgegevens.