GDPR Data Subject Rights

The Telldar Holdings Company and its affiliated entities (collectively, "Telldar," "we," "us," or "our") are committed to ensuring that individuals whose personal data we process can effectively exercise their rights under the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK General Data Protection Regulation ("UK GDPR"), and applicable supplementary national legislation including the Data Protection Act 2018.

This document provides detailed information about the rights available to data subjects under data protection law, explains how these rights apply to our processing activities, and sets out the procedures for exercising these rights in connection with personal data processed by Telldar.

The rights described herein apply to the processing of personal data where Telldar acts as a data controller. Where we process personal data as a data processor on behalf of third-party controllers, data subjects should direct their requests to the relevant controller entity in accordance with that controller's published procedures.

This document should be read in conjunction with our Privacy Policy, which provides comprehensive information about our data processing activities, the categories of personal data we process, the purposes of processing, and the legal bases upon which we rely.

For the purposes of applicable data protection law, the data controller responsible for your personal data is:

The Telldar Holdings Company
Registered Office: Available upon request
Company Registration Number: Available upon request

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our compliance with data protection law. You can contact our DPO using the contact details provided at the end of this document.

Data protection law provides you with a number of rights in relation to your personal data. These rights are not absolute and may be subject to exemptions, limitations, or conditions as provided by applicable law. The rights available to you include:

The following sections provide detailed information about each of these rights.

4.1 Transparency Obligations

You have the right to be provided with clear, transparent, and easily understandable information about how we collect and use your personal data, and about your data protection rights. We fulfill this obligation primarily through our Privacy Policy and other privacy notices we provide at or before the time of data collection.

4.2 Information We Provide

The information we provide includes:

5.1 Scope of the Right

You have the right to obtain confirmation as to whether personal data concerning you is being processed by Telldar, and where that is the case, to access such personal data together with supplementary information about our processing activities.

5.2 Information Provided Upon Request

In response to a valid access request, we will provide you with:

5.3 Format of Response

Where you make a request by electronic means, and unless you request otherwise, we will provide the information in a commonly used electronic format. We will provide one copy of the personal data free of charge. For any further copies you request, we may charge a reasonable fee based on administrative costs.

6.1 Scope of the Right

You have the right to obtain from Telldar, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

6.2 Our Obligations

Upon receiving a valid rectification request, we will:

We maintain appropriate procedures to ensure that personal data we hold remains accurate and up to date, and we encourage you to notify us of any changes to your personal data.

7.1 When the Right Applies

You have the right to obtain from Telldar the erasure of personal data concerning you without undue delay where one of the following grounds applies:

7.2 Exceptions and Limitations

The right to erasure does not apply where processing is necessary for:

7.3 Notification to Recipients

Where we have made personal data public and are required to erase it, we will take reasonable steps, taking into account available technology and the cost of implementation, to inform controllers processing the personal data that you have requested erasure of any links to, copies of, or replication of the personal data.

8.1 When the Right Applies

You have the right to obtain from Telldar restriction of processing where one of the following applies:

8.2 Effect of Restriction

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defence of legal claims, for the protection of the rights of another person, or for reasons of important public interest.

We will inform you before the restriction of processing is lifted.

9.1 Scope of the Right

You have the right to receive the personal data concerning you, which you have provided to Telldar, in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller without hindrance from us, where:

9.2 Direct Transmission

You also have the right to have personal data transmitted directly from Telldar to another controller, where technically feasible. We will endeavor to comply with such requests where we have the technical capability to do so.

9.3 Limitations

The right to data portability applies only to personal data you have provided to us. It does not apply to personal data we have derived or inferred from other data. The exercise of this right shall not adversely affect the rights and freedoms of others.

10.1 Objection to Processing Based on Legitimate Interests

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interests or public interest, including profiling based on those provisions.

Upon receiving an objection, Telldar shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.

10.2 Objection to Direct Marketing

Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, including profiling to the extent that it is related to direct marketing.

Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. This right is absolute and does not require you to demonstrate grounds relating to your particular situation.

10.3 Notification of Right to Object

We will inform you of the right to object at the latest at the time of first communication with you, and this information will be presented clearly and separately from any other information.

11.1 Scope of the Right

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

11.2 Exceptions

This right does not apply where the decision:

11.3 Safeguards

In cases where automated decision-making is permitted, we shall implement suitable measures to safeguard your rights, including at least the right to:

11.4 Our Automated Processing

We will inform you of any automated decision-making processes we use that produce legal effects or similarly significant effects, and provide meaningful information about the logic involved and the significance and envisaged consequences of such processing.

Where we are relying on consent as the legal basis for processing your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

We will inform you of the right to withdraw consent before consent is given, and we will make it as easy to withdraw consent as it was to give it. You can withdraw consent by contacting us using the details provided in this document, or through specific mechanisms we provide (such as unsubscribe links in marketing communications).

13.1 Submitting a Request

To exercise any of the rights described in this document, please submit a request through one of the following channels:

13.2 Information Required

When submitting a request, please provide:

13.3 Identity Verification

We will verify your identity before processing any request. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may request additional information from you to help us confirm your identity and ensure your right to access personal data or exercise other rights.

14.1 Standard Response Period

We will respond to your request within one month of receipt. This period begins when we receive your request and have all the information necessary to process it, including verification of your identity.

14.2 Extension of Response Period

The response period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of your request, together with the reasons for the delay.

14.3 Notification of Outcome

If we are not going to take action on your request, we will inform you without delay and at the latest within one month of receipt of the request, of the reasons for not taking action and of your right to lodge a complaint with a supervisory authority and to seek a judicial remedy.

The information provided in response to requests to exercise your rights is provided free of charge. However, we may charge a reasonable fee based on administrative costs where:

Alternatively, where requests are manifestly unfounded or excessive, we may refuse to act on the request. In either case, we will inform you of our decision and the reasons for it.

16.1 Supervisory Authorities

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

16.2 UK Information Commissioner's Office

For data subjects in the United Kingdom, complaints may be lodged with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113

We would appreciate the opportunity to address any concerns you may have before you lodge a complaint with a supervisory authority. Please contact us first so we can try to resolve any issues directly.

16.3 Other Supervisory Authorities

If you are located in another jurisdiction, you may have the right to lodge a complaint with the data protection authority in that jurisdiction. A list of EU data protection authorities is available at edpb.europa.eu.

Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority, you have the right to an effective judicial remedy if you consider that your rights under data protection law have been infringed as a result of the processing of your personal data.

Proceedings against us may be brought in the courts of the Member State where we have an establishment, or in the courts of the Member State where you have your habitual residence.

If you suffer material or non-material damage as a result of an infringement of data protection law, you have the right to receive compensation from the controller or processor for the damage suffered. A controller or processor shall be exempt from liability if it proves that it is not in any way responsible for the event giving rise to the damage.

If you have questions about your data protection rights, wish to exercise any of your rights, or have concerns about how we process your personal data, please contact our Data Protection Officer:

Data Protection Officer
The Telldar Holdings Company
Email: Available upon request
Address: Available upon request

We take all requests seriously and will endeavor to address your concerns promptly and comprehensively.

We may update this document from time to time to reflect changes in data protection law, our processing activities, or our procedures for handling data subject requests. Material updates will be posted on this page with an updated revision date.

We encourage you to review this document periodically to stay informed about your data protection rights and how to exercise them.