GDPR — Personal Data Protection

Contact details

We will facilitate your request in a concise, transparent and easily accessible way. We reply within one month and may extend by up to two months where necessary. Requests are free of charge unless manifestly unfounded or excessive. ( Art. 12(1)-(5) / Rec. 59 )

What you can request

Access to your data and information about our processing. First copy is free. ( Art. 15 / Rec. 63 )
Rectification of inaccurate or incomplete data. ( Art. 16 )
Erasure (“right to be forgotten”) when grounds apply. ( Art. 17 )
Restriction of processing in specific cases. ( Art. 18 )
Data portability in a structured, commonly used, machine-readable format and/or direct transmission. ( Art. 20 )
Object to processing, including an absolute right to object to direct marketing. ( Art. 21(2)-(3) )
No solely automated decisions with legal or similarly significant effects; right to human review. ( Art. 22 )
Notification to recipients of rectification/erasure/restriction. ( Art. 19 )

How to submit

Preferred channels: this form, e-mail or postal address. If you submit electronically, we will respond electronically unless you request otherwise. ( Art. 12(3) )
Identity verification: we may request <em>only the minimum additional information necessary</em> if we have reasonable doubts. ( Art. 12(6) )
Representatives: include proof of authority (e.g., power of attorney).

Response times, fees and limitations

We respond within one month of receipt; extension by up to two months with reasons. ( Art. 12(3) )
If we cannot act, we will inform you within one month with reasons and your right to complain. ( Art. 12(4) )
Fees: none, unless a request is <em>manifestly unfounded or excessive</em> (e.g., repetitive). ( Art. 12(5) )
We balance access with rights and freedoms of others (e.g., trade secrets/IP); we will redact where appropriate. ( Rec. 63 )
Some obligations may be restricted by EU/Member State law where necessary and proportionate. ( Art. 23 )

Secure delivery

We select a secure channel (secure portal or password-protected files). For portability we provide data in a structured, commonly used, machine-readable format and can transmit to another controller where technically feasible. ( Art. 20 / Art. 32 )

Information notice

We may request minimal additional information to verify your identity. ( Art. 12(6) )
Response time: up to one month; may be extended by up to two months with reasons. ( Art. 12(3) )
Free of charge unless manifestly unfounded or excessive. ( Art. 12(5) )
Controller / DPO contact: add your details. Right to complain to your supervisory authority. ( Art. 12(4) )