Skip to content
ReleaseVendor 2.0 is here. Explore the New Tiers now.
vendor
Art. 17 — Right to erasure

Request deletion of your personal data.

Ask us to delete personal data we hold about you when it is no longer needed, or when you withdraw consent.

Under Article 17 of the GDPR — the "right to be forgotten" — you can ask us to delete your personal data where one of the conditions in Article 17(1) applies, for example when the data is no longer needed or you withdraw consent. This right is not absolute: some legal obligations, such as tax and accounting rules, may require us to keep certain records.

What this right covers

  • Personal data no longer necessary for the purpose it was collected.
  • Data processed on consent, where you withdraw that consent.
  • Data processed unlawfully, or that must be erased by EU/Member State law.
  • Note: we may retain data where required by law (e.g. tax, anti-money-laundering) or for the establishment, exercise or defense of legal claims.
Identity

We need to verify your identity before we can act on this request. Identity proof for erasure may be stricter than for access, given the irreversibility.

Scope of erasure
What would you like erased?
Reason
Which Article 17(1) ground applies?
Acknowledgments

What happens next

  1. 01

    Acknowledgment

    We confirm receipt within 5 business days.

  2. 02

    Identity verification

    Because erasure is irreversible, we may ask for additional identity proof — never more than strictly necessary.

  3. 03

    Legal basis review

    We review whether any Article 17(3) exceptions apply (legal obligation, freedom of expression, public interest, legal claims). If they do, we tell you which records we must retain and why.

  4. 04

    Erasure & notification

    We erase the data and confirm completion within 30 calendar days. Where reasonable we notify recipients of the original data so they can erase their copies.

Legal basis & retention

We process the personal data in this request only to meet our obligations under Articles 12 and 17 of the GDPR. Because erasure is irreversible, we keep a record of the request for 60 months in our compliance log so we can demonstrate compliance to the supervisory authority; identity-verification material is deleted within 30 days of closing the request.

Questions about this request?

Reach our Data Protection Officer — typically replies within 2 business days.

Contact DPO