Privacy Notice 6.3

WorldECR Site Privacy Notice

6.3 FOR RESIDENTS OF THE EUROPEAN ECONOMIC AREA AND THE UNITED KINGDOM

This section of the Privacy Notice applies if you are in the United Kingdom or in a country that is a member of the EU/EEA and supplements the Site Privacy Notice.

Dow Jones & Company, Inc., is the entity ultimately responsible for the processing your personal data, as defined under the UK Data Protection Act of 2018 and the EU GDPR, collected by us from visitors to the Site. In the UK and EU/EEA, Factiva Limited is the controller.

UK/EU/EEA Data Subject Rights

In addition to the rights of access, correction or rectification and deletion or erasure, as described in the Privacy Notice, UK and EU/EEA data subjects have other rights over how their personal data is processed and can exercise these rights at any point in time. Below is an overview of these rights, many of which are subject to exceptions under applicable law. You can exercise your rights at any point in time by submitting a request through the following link: Privacy Rights Portal.

The right to object to or restrict processing. Under certain circumstances, you have the right to object to or restrict our processing of your personal data. For example, where we process personal data based on our legitimate interests, you may object to this. We will need to carefully consider your request, as there may be circumstances which require us, or allow us, to continue processing your personal data. However, you have an absolute right to object to our processing of your personal data for direct marketing purposes, and no exception applies to such a request.

The right to data portability. You have, subject to certain exceptions, the right to obtain a copy of your personal data in a structured, machine-readable format, and to ask us to share this data to another controller.

The right to withdraw consent. If you have given your consent to process your personal data, you have the right to withdraw that consent at any time by taking the actions explained in the “Your Choices and Rights” section of the Privacy Notice. This will not affect the lawfulness of the processing based on your consent before its withdrawal.

The right to lodge a complaint with a Supervisory Authority. If you have unresolved concerns and you live in the EU/EEA, you have the right to lodge a complaint directly with the relevant Supervisory Authority about how we process your personal data. In the UK, you also have this right and you may contact the UK Commissioner’s Office. In the first instance, please contact us so we can help resolve any issue.

Retention of Personal Data

We will keep your personal data for as long as we need it to fulfill the purposes set out in our Privacy Notice, or while there is a legitimate reason for doing so, and as otherwise required or permitted by applicable law, such as in relation to our record retention obligations.

International Data Transfers

We may transfer personal data of our UK/EU/EEA users to countries outside the UK/EU/EEA in order to provide our services. These countries may not have data protection rules that require the same level of protection as in the UK/EU/EEA, however, we will put in place appropriate mechanisms and controls to protect your data. This may include data transfer agreements, a copy of which you may obtain by submitting a request through the following link: Privacy Rights Portal. We may use these data transfer mechanisms – and not consent – as the legal basis for our own transfers of personal data from within the UK and EEA (even when other aspects of our handling of personal data take place based on consent).