GDPR Data Subject Rights

Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have specific rights regarding your personal data. Equilia AI is committed to honoring these rights and processing your requests in accordance with applicable data protection laws.

1. Right of Access (Article 15)

You have the right to obtain confirmation as to whether your personal data is being processed, and if so, access to your personal data and information about:

• The purposes of the processing
• The categories of personal data concerned
• The recipients to whom personal data has been or will be disclosed
• The retention period or criteria used to determine the period
• The source of the data (if not collected directly from you)

2. Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete personal data completed.

3. Right to Erasure / "Right to be Forgotten" (Article 17)

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

Note: This right is not absolute. We may need to retain certain data to comply with legal obligations, establish legal claims, or for other legitimate reasons.

4. Right to Restriction of Processing (Article 18)

You have the right to request that we limit how we use your personal data when:

• You contest the accuracy of the data (pending verification)
• Processing is unlawful but you oppose erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing (pending verification of legitimate grounds)

5. Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller when:

• Processing is based on your consent or a contract
• Processing is carried out by automated means

6. Right to Object (Article 21)

You have the right to object to processing of your personal data when:

• Processing is based on legitimate interests or public interest
• Processing is for direct marketing purposes
• Processing is for scientific/historical research or statistical purposes

How We Process Your Request

Verification Process

To protect your privacy and prevent unauthorized access to your personal data, we must verify your identity before fulfilling your request. We may request additional information to confirm your identity.

Response Timeline

Under GDPR Article 12(3), we will respond to your request within 1 month of receipt. If your request is complex or we receive multiple requests from you, we may extend this period by an additional 2 months (3 months total). We will inform you of any extension within the first month and explain the reasons for the delay.

Free of Charge

We provide information and process requests free of charge. However, if your request is manifestly unfounded or excessive (particularly if it is repetitive), we may charge a reasonable fee or refuse to act on the request.

Representatives and Third Parties

Under GDPR Article 80, you may authorize a representative (such as a not-for-profit organization) to submit a request on your behalf. The representative must provide proof of authorization.

Right to Lodge a Complaint

If you believe we have not adequately addressed your request or have violated your data protection rights, you have the right to lodge a complaint with a supervisory authority in your country, particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Spain (Equilia AI's location): Agencia Española de Protección de Datos (AEPD)
Website: www.aepd.es