Data Protection Regulations
(GDPR)

We are a Data Controller of your information.

BCR legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Information we collect and the specific context in which we collect the information:

• BCR needs to perform a contract with you

• You have given BCR permission to do so

• Processing your personal information is in BCRs legitimate interests

• BCR needs to comply with the law

BCR will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

• The right to access, update or to delete the information we have on you.

• The right of rectification.

• The right to object.

• The right of restriction.

• The right to data portability

• The right to withdraw consent