Skip to content

Documentation on the Exercise of Rights Requests (GDPR)

This document aims to inform the public about the different types of GDPR rights requests and the process for validating these requests.

1. What are Exercise of Rights Requests?

GDPR rights requests allow individuals to take control of their personal data held by organizations. These rights are a fundamental element of the GDPR, which came into effect in May 2018, aiming to strengthen and unify data protection for all individuals within the European Union.

2. Types of Exercise of Rights Requests

Access

The right of access allows individuals to receive a copy of the personal data that is being processed by an organization, along with other relevant information about how the data is processed. Importantly, this right is primarily to inform you of the purposes of the processing activities conducted on your data, such as processing to determine:

  • Customized Pricing: Companies might analyze your past purchases and browsing behavior to offer personalized pricing on products and services.
  • Marketing Strategies: Data such as your location, age, and online activities may be used to tailor marketing campaigns specifically targeted to your interests.
  • Risk Assessment: Personal information can be processed to assess creditworthiness or insurance risk, impacting the terms offered to you.

Rectification

This right enables individuals to have inaccurate or incomplete personal data corrected.

Objection

Individuals have the right to object to the processing of their personal data for reasons related to their particular situation, including direct marketing or profiling.

Erasure

Also known as the "right to be forgotten," this right allows individuals to request the deletion of their personal data when its retention is no longer necessary or if the processing is unlawful.

Restriction of Processing

This right allows individuals to request a halt to the processing of their personal data under certain circumstances, for example, when the accuracy of the data is contested.

Data Portability

The right to data portability allows individuals to receive the personal data they have provided to an organization in a structured, commonly used, and machine-readable format. They can also request that this data be transferred directly to another organization.

Human Intervention

Individuals have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

3. Validation of Requests

Upon submission of a rights exercise request, we send an email to the address specified in the "email" field to confirm that you are indeed the owner of this address. This validation step is crucial to ensure that requests are processed securely and to protect your data from unauthorized access.