The General Data Protection Regulation (GDPR) gives you specific rights over your personal data. This article provides a general overview of what these rights are and how you exercise them with civitas. It is not legal advice; the binding details are set out in our privacy policy.
What rights you have
As a data subject, you can invoke the following rights, among others:
- Access (Art. 15 GDPR): You can find out whether and which data we process about you, and request a copy of that data.
- Rectification (Art. 16 GDPR): You can have incorrect or incomplete data corrected.
- Erasure (Art. 17 GDPR): You can request the erasure of your data if there is no reason for continued storage.
- Restriction (Art. 18 GDPR): You can have the processing temporarily restricted in certain cases.
- Data portability (Art. 20 GDPR): You can receive data that you have provided to us in a common format.
- Objection (Art. 21 GDPR): You can object to the processing of your data on grounds relating to your particular situation.
How you exercise your rights
For most of these requests, a message to our data protection contact is enough. You will find the contact details in the privacy policy; our contact page also answers general questions. We handle your request and get back to you within the statutory time limits.
To delete your account, you do not need to write an email: you can trigger this yourself directly in your account settings. For exactly how this works, see the article "Deleting your account and data".
Retention period
Regardless of any erasure request, your data is deleted 90 days after the delivery of your application. Once this period has expired, only the data we are legally required to retain remains.
Note: This article explains your rights in general terms. The binding information on the controller, legal bases, and time limits can be found in the privacy policy.