Individual rights under the GDPR

The GDPR sets out a set of rights that individuals have over their data and their privacy. We’ve put together a brief overview of these rights below.  In order to keep this manageable, we’ve focused on these rights as they apply to your use of the mySupermarket website.  However you can find more in-depth information on the ICO website.   (They went wild.)

One word of explanation….  In the case of mySupermarket, a lot of what we set out below applies to registered users only.  If you are a non-registered user, we will have noted your IP address or mobile identifier. In the case of the former, this may be associated with the mySupermarket service cookie we placed on your browser (learn more about that in our Cookie Policy). However we don’t have additional information relating to you.

So here are the rights you have!

The right to be informed means that you have the right to know just what is going on with information relating to you (that is, personal data)!  That means that we have to tell you:

  • what personal data we are collecting about you;
  • why and how we are collecting it;
  • how and for what we are using it;
  • how long we will keep it; and
  • other similar information.

If we want to share your personal data with others, we also need to provide you with information about that.  So that means giving you information such as  with whom we are sharing it, what data is being shared, why we are doing it, what the other person is intending to do with your data and so on.

We’ve provided the information above in our Privacy Policy.

The right of access means that you have the right to access your personal data—that is, to see what personal data we have about you.  Most of your personal data is available for you to review on your My Account page. If you prefer, you may also send a request to our Customer Support team at support@mysupermarket.com and we will arrange to have this information sent to you. Please bear in mind that we may need to verify who you are before we send this information; and we may ask you to send some proof of identity.

The right to rectification means that where personal data that we have for you is incorrect or incomplete, you have the right to request that it be corrected or fixed. As with the right of access, you can view and correct most of the personal data that we have on file for you on your My Account page. However, here as well, you may also send a request to our Customer Support team at support@mysupermarket.com and we can take care of fixing it for you. And again, please bear in mind that we may need to verify who you are before we do so.

The right to erasure (known popularly as “the right to be forgotten”) means that you can request that we erase all your personal data.  In this case, this will involve closing your account.  You may send a request to our Customer Support team at support@mysupermarket.com and we will delete your account. We will need to verify your identity before we do so.

The right to restrict processing means that, in certain cases, you may ask that we stop processing (using) your data.  This will generally apply if you believe that there is a problem with the data we have for you or with how we are processing it.  However this right is not absolute and is subject to our review of your request, as well as assessing if it is feasible for us to comply. Where you wish to request that we restrict processing, you may contact our Customer Support team at support@mysupermarket.com and we will review your request.

The right to data portability means that you may ask that we provide you with a report of the personal data that we have for you so that you may use it for your own purposes, including for use on different websites you may also send a request to our Customer Support team at support@mysupermarket.com and we will arrange to have this information sent to you.  Once again, please bear in mind that we may need to verify who you are before we do so.

The right to object means that, in certain circumstances, you may ask that we stop processing (using) your data for certain purposes.  In the case of mySupermarket, this right will apply to:

  • direct email marketing
  • activities that we engage in based on our legitimate interests or based on consent.
  • activities that we engage in based on consent.

You can find a list of activities which are based on legitimate interests and consent in the Privacy Policy.

You can manage your preferences as described below.

  • If you prefer not to receive marketing emails, you may opt out via the My Account page or by clicking “unsubscribe” which appears on the bottom of each email.
  • If you subscribed to a brand store and wish to unsubscribe, you may cancel your subscription via the My Account page.
  • You may opt out of targeted advertising campaigns or promotional activities managed by mySupermarket via the My Account page.
  • Where we have asked you for permission to share your data with a third party and you have given consent, you may withdraw that consent at any time via the My Account page.

Rights in relation to automated decision making and profiling are additional safeguards applicable to companies that use your data to create profiles which are then used for decision-making. Where the profiling might have legal or other significant effects on you, we have to get permission first.