The lawful basis for processing your Personal Information will depend on the Personal Information concerned and the specific context in which we collect it as detailed above. Under the GDPR you have a number of rights. For example, you can request to see a copy of the data we process about you, to delete or rectify your data, or to transfer your data elsewhere. You also have the right to make a complaint to your local supervisory authority and in the first instance to our Data Privacy department.</p> <p>If you wish to exert any of your rights, please contact us at via email at privacy@sans.org.</p> <p>You should be aware that your Personal Information may be transferred to, stored, and processed within the United States and other jurisdictions outside of the USA and EU.