Privacy Notice: 10. EEA Residents & Data Subject Rights
10.6 Right of Restriction of Processing
EEA residents have the right to restrict Tripwire’s processing of personal data if one of the following circumstances applies:
- the accuracy of the personal data is contested by EEA resident, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the EEA resident opposes the erasure of the personal data and requests the restriction of their use instead;
- Tripwire no longer needs the personal data for the purposes of the processing, but the EEA resident needs the personal data for the establishment, exercise or defense of legal claims;
- the EEA resident has objected to processing pursuant to Article 21(1) of the GDR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Where processing has been restricted because the accuracy of the personal data is contested by the EEA resident, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
Tripwire Interactive will inform any EEA resident who has obtained restriction of processing because the accuracy of the personal data is contested by the EEA resident before the restriction of processing is lifted.
The right to restriction of processing is described under Article 18 of the GDPR.