Your Personal Data
The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation of EU law on data protection and privacy for all individuals within the European Union. This applies to the data you have given to Crystal EU and what we then do with your data.
Under no circumstances do we sell or pass on information to third parties. We would only share in exceptional circumstances, or if we are legally required to do so.
Under GDPR you have a number of important rights. Key rights include the following:
Right to access
You have the right to request access to the data we hold and also to know what we do with this information. Crystal EU is obliged to provide you with this information within 28 days of your request at the latest.
Right to erasure
We will only collect the minimum amount of personal data necessary and hold it for the minimum time required. You have the right to withdraw your permission for Crystal EU to use your data and ask for it to be erased, by contacting Crystal EU verbally or in writing.
Crystal EU will only request you for information that is relevant and necessary. We will only store your information thereafter to facilitate any future contact. At any time you have rights under GDPR in relation to your data including the right to access and the right to erasure.