Individuals have the right to access, rectify, erase, restrict or object to processing of their personal data, the right to data portability, and the right to withdraw consent at any time.
How rights are exercised
For your own account data, these can be exercised from inside the account where applicable โ profile, billing, deletion โ or by contacting us through the contact form.
There is also a right to lodge a complaint with a local data protection authority.
Requests from end users about advertising data
Because you are the controller for advertising data processed through your DSP instance (see GDPR: who is the controller?), requests from end users about that data come to you, not to us. You need a route for people to reach you and a process for responding within statutory deadlines.
What to prepare before you launch
- A published contact route for data subject requests, under your brand.
- An internal process for handling them within the deadline.
- A record of what you process and why.
Not legal advice. How these obligations apply to your business depends on your jurisdiction and your processing โ take your own advice.
Related: Data transfers, subprocessors and retention ยท Industry standards and supply-chain transparency