Data Subject Rights Overview

Erika B-Cure Laser Ltd.  (“Company” or “we” or “us”) value the privacy rights of our user (“you” or “yours”). Thus, we have designed this Data Subject Rights Overview (“Overview”) as a summary of individuals’ rights under the EU General Data Protection Regulation (“GDPR”), which shall apply to you in the event that you are a resident of the European Economic Area (“EEA”). If you wish to submit a request to exercise any of your rights, please fill in the data subject request form available at: http://bcurelaser.com/data-subject-request-form/, and send it to: [email protected]a

Your Right to be Informed

You have the right to be informed why and how we process personal data. This right includes, among others, the reasons and lawful basis for processing personal data, and additional information necessary to ensure the fair and transparent processing of personal data. Please see our Privacy Policy for such information.

Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of it, along with details on how and why we use it. Once we receive your request, we will verify its validity and provide you with confirmation, a copy, or a description of the data, including its categories, purpose, and source if not provided by you.Our response detailed above will be provided within the applicable period required by law.

Rectification

If personal data held by us is not accurate, you may require us to update such data so it is accurate. Furthermore, in the event that we have passed on incorrect information about you to a third party, you also have a right to oblige us to inform those third parties that the applicable information should be updated.

Erasure (“right to be forgotten”)

You have the right to require us to erase certain personal data, subject to the fulfillment of specific conditions. We must comply with a request to exercise the right to be forgotten and delete personal data if: (i) the data is no longer needed for its original purpose and no new lawful basis exists; (ii) you withdraw your consent; (iii) you object to the processing and we have no overriding grounds to continue; (iv) the data was processed unlawfully; or (v) erasure is necessary to comply with applicable laws.

In addition, in the event we have transferred your personal data to a third party, you have the right to request of us to ask those third parties to erase such information. Please note that, this right to erasure is not absolute. Even if you fall under the aforesaid conditions, we are entitled to reject your request to erase the data in the event that we find it (subject to applicable laws): (i) necessary to comply with legal obligations; (ii) necessary to establish, exercise or defend legal claims; or (iii) necessary for scientific purposes, etc.

Object

You may object to our processing of your personal data based on our legitimate interests. However, we can continue processing if (i) our legitimate interests override your rights, interests, and freedoms, or (ii) the processing is necessary to establish, exercise, or defend a legal claim or right, in accordance with applicable laws and regulations.

Restriction

You can ask us to limit how we use your personal data if: (i) the data’s accuracy is disputed; (ii) you prefer restriction over deletion when processing is unlawful; (iii) we don’t need the data for its original purpose, but you need it to establish, exercise, or defend legal rights; or (iv) there are important reasons to keep the data when you request deletion.

Data Portability

You may request us to send or “port” your personal data held by us to a third-party entity, however solely when: (i) you have provided us with the personal data; (ii) it is processed automatically; (iii) it is processed on the legal bases of either consent or fulfillment of a contract.