GDPR Privacy Policy Supplement

This Notice is for people who are located in the European Economic Area (“EEA”), Switzerland or the United Kingdom (“UK”) and supplements the RAEK Data, LLC (“Our”, “Us”, “We”, “RAEK”) general Privacy Policy (“Privacy Policy”). Capitalized terms used in this Notice without definition are defined in our Privacy Policy. Our processing of personal data of people who reside in the EEA is governed by the European Union's General Data Protection Regulation (the “GDPR”) and the UK GDPR, referred to collectively as the “GDPR”. This supplement also applies to users in Switzerland.

We are a data controller and processor for this website. For our contact information, please see our Contact Information in our Privacy Policy.

We process personal and sensitive information provided by you by using our website or other interactions with us in accordance with our Privacy Policy and as permitted by GDPR and applicable laws.

Recipients of your information include other RAEK Users and other service providers we use to manage our website or provide content to you. If you would like specific information about who has received your information, please contact us using the Contact Information in our Privacy Policy.

Our data is generally processed in the USA. When you provide personal information to us, you are giving us your consent to transfer personal information to the USA.

In case of breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed, we have the mechanisms and policies in place in order to identify it and assess it promptly. Depending on the outcome of our assessment, we will make the requisite notifications to the supervisory authorities and communications to the affected data subjects, which might include you.

You have the following rights regarding personal data collected and processed by us.

• Information regarding your data processing: You have the right to obtain from us all the requisite information regarding our data processing activities that concern you.
• Access to personal data: You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and certain related information.
• Rectification or erasure of personal data: You have the right to obtain from us the rectification of inaccurate personal data concerning you without undue delay, and to complete any incomplete personal data (Article 16 GDPR). You may also have the right to obtain from us the erasure of personal data concerning you without undue delay, when certain legal conditions apply.
• Restriction on processing of personal data: You may have the right to obtain from us the restriction of processing of personal data, when certain legal conditions apply.
• Object to processing of personal data: You may have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, when certain legal conditions apply.
• Data portability of personal data: You may have the right to receive your personal data in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller without our hindrance, when certain conditions apply.
• Not to be subject to automated decision-making: You may have the right not to be subject to automated decision-making (including profiling) based on the processing of your personal data, insofar as this produces legal or similar effects on you, when certain conditions apply.

If you intend to exercise such rights, please refer to the Contact Information section in our Privacy Policy.

You have the right to file a complaint concerning our processing of your personal data with your national (or in some countries, regional) data protection authority. The EU Commission has a list here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm. The data protection authority for the United Kingdom is the Information Commissioner's Office (www.ico.org.uk). The federal data protection authority for Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/task.html.