GDPR · Data subject rights
Request your personal data rights, with a response within one month.
A data rights request is how you exercise your GDPR rights over the personal data we process on your behalf.
Your request goes directly to the Data Protection Officer. We respond within one month, as required by the General Data Protection Regulation.
Submit a request
Your rights
Article 15
Access
Find out which data we process about you, why, and who we share it with.
Article 16
Rectification
Correct inaccurate details or complete what is missing.
Article 17
Erasure
Ask us to delete data when there is no longer a reason to keep it.
Article 18
Restriction
Freeze the processing while a dispute about its accuracy or lawfulness is examined.
Article 20
Portability
Receive the data you gave us in a structured file, or have us send it to another provider.
Article 21
Objection
Object to processing based on legitimate interest, and to any direct marketing.
Article 22
Automated decisions
Ask for human review of a decision taken solely by automated processing.
Article 7
Withdraw consent
Withdraw your consent whenever you want, without affecting what was lawful before.
How we handle the request
Worth knowing
When we cannot delete
Some data we keep because the law requires it, tax records for example. In those cases we restrict its use and explain which provision binds us.
Identity checks without excess
We do not ask for a copy of your ID as a first step. Usually it is enough that you reply from the email address we already know, or give us one detail that confirms your relationship with us.
When we process data for a client
On many projects we act as a processor on behalf of one of our clients. In that case we forward the request to the controller and tell you who will answer.
Right to complain
If our answer does not satisfy you, you can complain to the Hellenic Data Protection Authority.
Frequently asked questions
What to expect from the moment you press send.