Data subjects whose personal data are processed by AirConnect may exercise the following rights set out in Regulation:
a. The right to be informed about Personal Data processed.
b. The right to obtain confirmation that it processes the Personal Data of the data subject and, if so, access to that data and information such as the purposes of the processing,
the categories of personal data concerned, the recipients or the categories of recipients, where possible, the expected storage period.
If Personal Data is not collected directly from the data subject, the source of such data as well as, where appropriate, the existence of an automated decision making process including the creation of profiles.
c. The right to rectify inaccurate Personal Data or to fill them out.
d. The right to delete Personal Data, in accordance with the provisions of the Regulation.
e. The right to restrict processing when one of the following cases applies: the data subject disputes the accuracy of the data, the processing is illegal, the data subject opposes the deletion of the data when no longer needs Personal Data for processing but the data subject seeks for the establishment, exercise or defense of a right in court or where the data subject opposes processing for the period of time to verify whether the legitimate interests of prevail over those of the data subject.
f. The right to data portability, which consists in requesting AirConnect to transmit Personal Data provided by the data subject in a structured format that is currently used and readable automatically, and the data subject sends it to another operator (within the limits set by the Regulation and provided that the necessary technical means are available to secure this right).
g. The right to object to the processing of Personal Data at any time, free of charge and without justification for situations such as:
i. personal data processing activities, for situations where the consent of the data subject does not need to be obtained
ii. adopting an automated decision, including profile creation
iii. conducting processing activities necessary for the fulfillment of a legitimate interest of AirConnect.
In case of unjustified opposition, AirConnect is entitled to further process Personal Data.
If the data subject repeatedly and unjustifiably exercises his right to object, AirConnect reserves the right to cease responding to such requests.
The right of opposition shall not be exercised with respect to the processing of the Personal Data required for the execution of the air transport contract or the fulfillment of the legal obligations of AirConnect.
h. The ability of the person concerned to request AirConnect not to be the subject of a decision based solely on automatic processing, including profile creation and producing legal effects that affect the data subject or significantly affect it.
With regard to the adoption of a decision based solely on automatic processing, the data subject has the opportunity to express his/her point of view, to request the intervention of a human operator and the possibility of challenging such a decision in the manner described in this information.
We inform you that AirConnect does not apply decision-making procedures based solely on automatic processing.
i. If the data is processed based on your consent, you have the right to withdraw your consent at any time, without prejudice to the lawfulness of the processing performed up to that point.
j. The right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
In order to exercise the rights, set forth in subparagraphs a) – i) above, you may submit to AirConnect written, dated and signed request at the Headquarters:
Str. Aurel Vlaicu, nr. 9, Otopeni, Ilfov, Romania or you may submit such a request on the email to the Personal Data Protection Officer at the email address firstname.lastname@example.org.