Last Updated: March 2026
This GDPR Rights Policy outlines the rights of individuals regarding their personal data as stipulated under the General Data Protection Regulation (GDPR). At glastonvale.org, we are committed to ensuring that your privacy is protected and that you are fully informed of your rights in relation to your personal data.
This policy applies to all personal data processed by glastonvale.org in the context of our operations related to glastonvale.org. It is relevant to all users of our website and services who provide personal data to us.
Under the GDPR, you have the following rights regarding your personal data:
You have the right to request access to the personal data we hold about you. This includes the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data.
You have the right to request the correction of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
You have the right to request the erasure of your personal data when it is no longer necessary for the purposes for which it was collected or processed, or if you withdraw your consent on which the processing is based.
You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller without hindrance from us.
You have the right to object to the processing of your personal data on grounds relating to your particular situation, including profiling based on those grounds.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise your rights, you must submit a request to us using the contact information provided below. We may require you to verify your identity before responding to such requests. We will respond to your request within one month of receipt. If your request is complex or if you have made multiple requests, we may extend this period by a further two months, informing you of the extension and the reasons for the delay.
While we strive to uphold your rights under the GDPR, certain limitations may apply. For instance, we may not be able to comply with your request if it adversely affects the rights and freedoms of others or if we are legally obligated to retain your personal data. Additionally, we reserve the right to charge a reasonable fee for repetitive or excessive requests.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing your personal data. This includes measures to protect against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
We may update this GDPR Rights Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date at the top of this page.
If you have any questions about this policy or wish to exercise your rights, please contact us at:
This policy shall be governed by and construed in accordance with the laws of Portugal. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Portugal.