EU Data Subjects Privacy Addendum

This section applies if you are a citizen of the European Union (“EU,” “EU Data Subject”). For these purposes, the reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway and, where applicable, Switzerland.

Botanical Society of America is the data controller for the processing of your Personal Data.

Subject to applicable law, you have the following rights in relation to your Personal Data:

Right of access: If you ask, BSA will confirm whether it is processing your Personal Data and if so, provide you with a copy of that Personal Data (along with certain other details).Right to rectification: If your Personal Data is inaccurate or incomplete, you are entitled to have it rectified or completed. If BSA has shared your Personal Data with others, BSA will tell them about the rectification where possible. If you ask, where possible and lawful to do so, BSA will also tell you with whom we shared your Personal Data so that you can contact them directly.Right to erasure: You may ask BSA to delete or remove your Personal Data and BSA will do so. If BSA has shared your data with others, BSA will tell them about the erasure where possible. If you ask, BSA will also tell you with whom your Personal Data was shared so that you can contact them directly.Right to restrict processing: You may ask BSA to restrict or ‘block’ the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of that Personal Data or object to us processing it. BSA will tell you before it lifts any restriction on processing. If BSA has shared your Personal Data with others, BSA will tell them about the restriction where possible. If you ask, BSA will also tell you with whom your Personal Data was shared so that you can contact them directly.Right to data portability: Effective 25 May 2018, you have the right to obtain your Personal Data that you consented to give or that is necessary to perform a contract with you. BSA will give you your Personal Data in a structured, commonly used and machine-readable format. You may reuse it elsewhere.Right to object: You may ask BSA at any time to stop processing your Personal Data, and it will do so, as BSA relies on a legitimate interest to process your Personal Data — unless we demonstrate compelling legitimate grounds for the processing, or if BSA is processing your Personal Data for direct marketing.Rights in relation to automated decision-making and profiling: You have the right to be free from decisions based solely on automated processing of your Personal Data, including profiling, that affect you, unless such processing is necessary for entering into, or the performance of, a contract between you and BSA or you provide your explicit consent to such processing.Right to withdraw consent: If BSA relies on your consent to process your Personal Data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on your prior consent.Right to lodge a complaint with the data protection authority: If you have a concern about BSA’s privacy practices, including the way BSA has handled your Personal Data, you can report it to the data protection authority that is authorized to hear those concerns.

 You may exercise your rights by contacting us at bsa-manager@botany.org.

Legitimate Interest: BSA’s processing of your data is necessary in order to deliver products and services to you. Membership, event registration or attendance and product purchase constitute a contract between the Data Subject and BSA. BSA uses data in ways individuals would reasonably expect and have minimal privacy impact. Nonmembers opting into receiving content provide their consent to BSA to process their Personal Data. Nonmembers who are citizens of the EU have the same rights to their Personal Data as members.