Individuals in the European Economic Area have the following data protection rights:
The right to withdraw consent. You have the right to withdraw your consent to the processing of personal data collected on the basis of your consent at any time. Your withdrawal of consent will not affect the lawfulness of Clarivate’s processing based on consent before your withdrawal.
The right of access to and rectification of your personal data. You have a right to request that we provide you a copy of your personal data held by us. You may also request us to rectify or update any of your personal data held by Clarivate that is inaccurate. Note that your rights to personal data are not absolute. Access may be denied when:
- Denial of access is required or authorized by law;
- Granting access would have a negative impact on other’s privacy;
- To protect our rights and properties; and
- Where the request is frivolous or vexatious.
Right to erasure. You have the right to request erasure of your personal data that: (a) is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (b) was collected in relation to processing that you previously consented, but later withdrew such consent; or (c) was collected in relation to processing activities to which you object, and there are no overriding legitimate grounds for our processing.
Right to restriction of processing. You have the right to restrict or object to us processing your personal data where one of the following applies:
- You contest the accuracy of your personal data that we processed. In such instances, we will restrict processing during the period necessary for us to verify the accuracy of your personal data.
- The processing is unlawful and you oppose the erasure of your personal data and request the restriction of its use instead.
- We no longer need your personal data for the purposes of the processing, but it is required by you to establish, exercise or defend legal claims.
- You have objected to processing, pending the verification whether the legitimate grounds of Clarivate’s processing override your rights.
Right to data portability. If we process your personal data based on a contract with you or based on your consent, or the processing is carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine-readable format, and to have us transfer your personal data directly to another organization, where technically feasible, unless exercise of this right adversely affects the rights and freedoms of others.
Right to object. Where the processing of your personal data is based on consent, contract or legitimate interests you may restrict or object, at any time, to the processing of your personal data as permitted by applicable law. We can continue to process your personal data if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.
Automated individual decision-making, including profiling. You have the right not to be subject to a decision based solely on automated processing of your personal data, including profiling, which produces legal or similarly significant effects on you, save for the exceptions applicable under relevant data protection laws. Clarivate will inform you should automated individual decision-making, including profiling, take place.
Right to lodge a complaint. If you believe that we have infringed your rights, we encourage you to contact us first at data.privacy@clarivate.com so that we can try to resolve the issue. However, you have the right to lodge a complaint with a supervisory authority in a member state of your habitual residence, place of work, or place of alleged infringement.
Notification of erasure, rectification and restriction. We will communicate any rectification or erasure of your personal data or restriction of processing to each recipient to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort.