Your Rights Under GDPR
As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:
Right to Information
You have the right to receive clear information about how we collect, use, and process your personal data.
Right of Access
You can request access to your personal data and receive information about how it's being processed.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten)
You can request deletion of your personal data under certain circumstances:
- Data is no longer necessary for original purpose
- You withdraw consent and no other legal basis exists
- Data has been unlawfully processed
- Erasure is required for compliance with legal obligations
Right to Restrict Processing
You can request restriction of processing when:
- You contest the accuracy of personal data
- Processing is unlawful but you prefer restriction over erasure
- We no longer need the data but you need it for legal claims
- You've objected to processing pending verification of grounds
Right to Data Portability
You can receive your personal data in a structured, commonly used format and transmit it to another controller.
Right to Object
You can object to processing of your personal data for direct marketing or based on legitimate interests.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling.
Legal Basis for Processing
We process personal data based on:
- Consent for marketing communications
- Contract performance for service delivery
- Legitimate interests for service improvement
- Legal obligations for compliance requirements
Data Retention
We retain personal data only as long as necessary for the purposes collected or as required by law.
Exercising Your Rights
To exercise any of these rights, contact our Data Protection Officer:
Email: [email protected]
Phone: +1 (415) 555-0142
Address: 2847 Market Street, Suite 301, San Francisco, CA 94114
Response Timeline
We will respond to your requests within one month. Complex requests may require up to three months with notification.
Supervisory Authority
You have the right to lodge a complaint with your local data protection supervisory authority if you believe we've violated GDPR.
