Legal
Exercising your GDPR rights
How to exercise your rights under Regulation (EU) 2016/679 (GDPR), simply.
Your rights at a glance
- Access: find out what data we process about you.
- Rectification: have inaccurate data corrected.
- Erasure: the “right to be forgotten”, unless a legal obligation prevents it.
- Restriction: temporarily restrict processing.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawing consent: at any time, without affecting processing before the withdrawal (where processing is based on consent).
How to submit a request
- Send an email to gdpr@nxtrum.cz with the subject “GDPR request”.
- State which right you want to exercise, which processing it concerns and how we can contact you.
- To verify your identity, we may ask for additional information, especially where disclosing data to the wrong person could harm you.
- We will reply without undue delay and within one month of receiving the request at the latest (GDPR Art. 12(3)). For complex or numerous requests we may extend this by two further months; we will tell you about the extension and the reasons within one month.
- Requests are free of charge. For manifestly unfounded or excessive requests (especially repeated ones) we may charge a reasonable fee or refuse the request (GDPR Art. 12(5)).
If we do not grant a request
If we refuse a request or cannot grant it in full, we will tell you the reasons, your right to lodge a complaint with the Czech Office for Personal Data Protection and your right to a judicial remedy, within one month of receiving the request at the latest.
Lodging a complaint
If you disagree with how we handled your request, you can lodge a complaint with the Czech Office for Personal Data Protection: uoou.gov.cz, Pplk. Sochora 27, 170 00 Praha 7.