What is a “Contact”?
A “Contact” is anyone on a Member’s Distribution List or about whom a Member has given me information. For example, if you have subscribed to one of my Members’ email marketing campaigns, you would be considered a Contact.
What are my privacy rights?
- The right of access – this is a right to ask me for a copy of the information that I, as controller, hold about you, along with certain other information. You can exercise this right using the form below.
- The right to data portability – this is a right to ask me to provide you with a copy of your information you have provided in a structured, commonly used, and machine readable form in certain circumstances. You can exercise this right using the form below.
- The right to rectification – this is a right to rectify (put another way, change or correct) any personal information that you believe I am holding about you that is inaccurate or incomplete. You can exercise this right by writing to me at [email protected].
- The right to erasure – this is the right to have your personal information deleted if it is no longer required for the purposes for which it was collected or if other certain conditions apply (commonly called “the right to be forgotten”). You can exercise this right using the form below.
- The right to restrict processing – this is a right to request the restriction or suppression of your personal information in limited circumstances. I do not believe that this right will ordinarily apply to my processing of your personal information, however if you believe you can exercise this right, please write to me at [email protected].
- The right to object – this is a right to object to the processing of your personal information in certain limited circumstances, such as when I am relying on ‘legitimate interests’ to process your personal information. If you would like to exercise this right in relation to my data analytics program, please use the form below. If you would like to exercise this right in any other circumstances, you can write to me at [email protected] setting out the grounds for your objection.
- The right to make a complaint to your Data Protection Authority – this is a right to complain to a data protection authority about my use of your Personal Information. For more information, please contact your local data protection authority. Contact details for data protection authorities in the EEA are available here.
When can I exercise my privacy rights?
Certain data protection laws (like those in Europe) make the distinction between those who act as ‘controllers’ and those who act as ‘processors’ of personal information. Put simply, a controller is the organization who determines how and why your personal information are to be used for certain purposes. A processor is an organization who acts as a service provider and only processes personal information on behalf of the controller under their instruction.
The reason I point this out is because for many of my services, my Members are the controller and I am simply acting as their processor. For instance, if you signed up to receive a newsletter from one of my Members, that Member may ask me to help them send out their newsletters by using my services. In that case, the Member is the controller of your personal information and Boldermail is merely a processor.
Under the law, it is up to the controller to make sure you can exercise your rights over your personal information. If you have questions about how your personal information is handled by my Members (the business or organization contacting you through the Service), you will need to review their privacy notices and, if necessary, contact them directly.
Submit your request:
Please select the right(s) you wish to exercise:
- Access/Portability Request – Please provide me with a copy of my Personal Information. If you select this option, I will provide you with a copy of the personal information I hold about you as a controller, to the extent required by law.
- Global Erasure Request – Please forward my Deletion Request to the Boldermail customer who is the Data Controller. If you choose this option, I will notify the relevant Boldermail customers that you would like your personal information deleted from their Boldermail account. The notice will include instructions the Member can follow for permanently deleting your personal information from their Boldermail account. I suggest that you separately follow up with the relevant Boldermail customers directly to request deletion of the personal information they process about you through their Boldermail account. I will also provide you with a copy of the contact information for each of the Boldermail customers where your personal information is found.
- Boldermail Erasure Request – Please delete my Personal Information. If you select this option I will delete any Personal Information Boldermail processes about you as a controller at the time of your request and to the extent required by law.