GDPR Rights & Requests
A practical, transparent guide for individuals to exercise their fundamental data protection rights.
Direct Exercise of Your Statutory Rights
Under Chapter III of the GDPR, European data subjects possess clear, actionable rights regarding their personal information. We provide direct, non-bureaucratic mechanisms to process and fulfill your requests promptly.
Comprehensive Catalog of Rights
Right of Access (Article 15)
You have the right to request confirmation as to whether your personal data is being processed, and where that is the case, receive a copy of the specific personal data processed along with processing details.
Right to Rectification (Article 16)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you, including the right to have incomplete personal data completed.
Right to Erasure / 'Right to be Forgotten' (Article 17)
You have the right to request the erasure of your personal data when the data is no longer necessary in relation to the purposes for which they were collected or when you withdraw your consent.
Right to Restriction of Processing (Article 18)
You have the right to request restriction of processing when you contest the accuracy of the data, the processing is unlawful, or during the verification of legitimate ground objections.
Right to Data Portability (Article 20)
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller.
Right to Object (Article 21)
You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on legitimate interests (Article 6(1)(f)).
Rights Related to Automated Decision-Making (Article 22)
We do not utilize fully automated decision-making or profiling algorithms that produce legal effects concerning you.
Right to Withdraw Consent (Article 7(3))
Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Submitting a Data Subject Request (DSR)
To initiate a request, email our compliance desk directly at cristianvaduva@duck.com with the subject line “GDPR Data Subject Request”.
- Your full name and contact email address used in past communications
- Specific right you wish to exercise (e.g. Access, Rectification, Erasure)
- Context of your interactions (e.g. general advisory inquiry, Jotform questionnaire)
In accordance with GDPR Article 12(3), requests are acknowledged within 5 business days and fulfilled within one calendar month of receipt. If requests are complex, the period may be extended by two further months with formal notification.
Requests are handled free of charge unless manifestly unfounded or excessive.