How does MaxMind handle data subject requests to exercise their rights under the GDPR?

Where MaxMind operates as a Data Processor, MaxMind will notify its customer if MaxMind receives a request from a data subject to exercise the data subject’s right of access, right to rectification, restriction of processing, erasure (“right to be forgotten”), data portability, objection to processing, or right not to be subject to automated individual decision making (“Data Subject Request”). MaxMind will also assist its customer in responding to a Data Subject Request, where legally required and permissible. MaxMind’s customer is responsible for any costs arising from MaxMind’s assistance with Data Subject Requests.

Where MaxMind operates as a Controller, the data subject may contact MaxMind directly to exercise their Data Subject Request. Further information is set forth in MaxMind’s privacy policy.