[Placeholder] Under the EU General Data Protection Regulation (GDPR), individuals have seven rights with respect to their personal data. Pick the right you want to exercise, complete the form, and we'll verify your identity and respond within 30 calendar days. For complex requests we may extend by two further months, in which case we'll tell you why within the original 30 days.
Privacy
Data subject requests.
Exercise your seven GDPR rights — access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Submit a request and we respond within 30 days.
Your rights
Choose the right you'd like to exercise.
Each link below opens a dedicated form.
Art. 15
Right of access
Get a copy of the personal data we hold about you, why we process it, who we share it with, and how long we keep it.
Art. 16
Right to rectification
Correct inaccurate personal data or complete data that is incomplete.
Art. 17
Right to erasure ("right to be forgotten")
Ask us to delete personal data we hold about you when it is no longer needed or you withdraw consent.
Art. 18
Right to restriction of processing
Limit how we process your data — useful while you contest its accuracy or our lawful basis.
Art. 20
Right to data portability
Receive your personal data in a structured, machine-readable format and transmit it to another controller.
Art. 21
Right to object
Object to processing based on legitimate interests or for direct marketing.
Art. 7(3)
Right to withdraw consent
Withdraw consent at any time when processing relies on it. Past processing remains lawful.
Response timeline
[Placeholder] We acknowledge every request within 5 business days and respond substantively within 30 calendar days. For requests that are particularly complex or numerous we may extend by up to two additional months and will explain why within the original 30 days.
Identity verification
[Placeholder] We must verify your identity before acting on a request — to protect your data from anyone else trying to access it. We'll ask for information that lets us match the request to a person in our systems. We do not use this information for any other purpose.
When we may refuse or delay
[Placeholder] In limited circumstances we may decline a request — for example, where compliance would adversely affect the rights of others, or where retention is required by law. If we refuse, we explain why and tell you how to complain to your supervisory authority.
Complaints
[Placeholder] You can also lodge a complaint with your local data-protection supervisory authority. In North Macedonia: the Personal Data Protection Agency (AZLP). In the EU: your home Member State's DPA.