GDPR Rights &Compliance

Your Data Protection Rights Under EU Law

Your Rights at a Glance

Under the General Data Protection Regulation (GDPR), you have comprehensive rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights.

1. Right to Access (Article 15)

You have the right to obtain confirmation whether we process your personal data and access to:

  • A copy of your personal data
  • The purposes of processing
  • Categories of data processed
  • Recipients of your data
  • Data retention periods
  • Your rights regarding the data

How to exercise: Email us at privacy@emerlya.com with "Data Access Request" in the subject line.

2. Right to Rectification (Article 16)

You can request correction of inaccurate personal data or completion of incomplete data.

How to exercise: Update your profile in the dashboard or contact us for assistance.

3. Right to Erasure - "Right to be Forgotten" (Article 17)

You can request deletion of your personal data when:

  • Data is no longer necessary for original purposes
  • You withdraw consent (where consent is the legal basis)
  • You object to processing and no overriding legitimate grounds exist
  • Data was unlawfully processed
  • Legal obligation requires erasure

How to exercise: Submit a deletion request at privacy@emerlya.com. We'll process it within 30 days.

4. Right to Data Portability (Article 20)

You can receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another controller.

How to exercise: Request data export via privacy@emerlya.com. We'll provide JSON or CSV format.

5. Right to Object (Article 21)

You can object to processing based on legitimate interests or for direct marketing purposes.

How to exercise: Use the unsubscribe link in emails or contact privacy@emerlya.com.

6. Right to Restriction (Article 18)

You can request restriction of processing when:

  • You contest data accuracy
  • Processing is unlawful but you oppose erasure
  • We no longer need the data but you need it for legal claims
  • You've objected pending verification of legitimate grounds

7. Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects. Our AI generates content but doesn't make automated decisions about you personally.

How We Handle Your Requests

⏱️ Response Time

We respond to all requests within 30 days. Complex requests may take up to 90 days with notice.

🆓 Free of Charge

First request is always free. Excessive or repetitive requests may incur a reasonable fee.

✅ Identity Verification

We may request additional information to confirm your identity before processing requests.

📝 Documentation

All requests and actions taken are documented for compliance and audit purposes.

Data Protection Measures

  • Encryption: All data encrypted in transit and at rest
  • Access Control: Role-based access with multi-factor authentication
  • Regular Audits: Security assessments and penetration testing
  • Data Minimization: We only collect necessary data
  • Privacy by Design: Data protection built into all processes

Contact Our Data Protection Team

Data Protection Officer:
Email: dpo@emerlya.com

Privacy Team:
Email: privacy@emerlya.com

Lodge a Complaint

If you're unsatisfied with how we handle your data or requests, you have the right to lodge a complaint with:

Dutch Data Protection Authority

Autoriteit Persoonsgegevens
Website: autoriteitpersoonsgegevens.nl
Phone: 0900-2001201

Questions About Your Rights?

We're here to help. Contact us with any questions about your data protection rights.