GDPR — YOUR RIGHTS

How to exercise your personal data rights at Vesteri · Version 1.0

You have the following rights:

  • Access (Art. 15) — confirmation of processing, a copy of your data, information about purposes, recipients, periods, and the logic of profiling;
  • Rectification (Art. 16) — correction of inaccurate data, completion of incomplete data;
  • Erasure (Art. 17) — where the data is no longer necessary, consent has been withdrawn, an effective objection has been raised, or the processing was unlawful;
  • Restriction (Art. 18) — for the time of verifying accuracy or an objection, or instead of erasure;
  • Portability (Art. 20) — receiving the data you provided to us on the basis of consent or contract in a structured format (e.g. JSON/CSV) and transmitting it to another controller;
  • Objection (Art. 21) — to processing based on legitimate interest; an objection to direct marketing is always effective;
  • Withdrawal of consent (Art. 7(3)) — at any time, without affecting prior processing; easiest via "Manage privacy" in the footer/your account;
  • Rights concerning profiling (Art. 22) — human review of your score, expressing your point of view, contesting the score;
  • Complaint — to the President of UODO: ul. Stawki 2, 00-193 Warszawa, Poland · uodo.gov.pl. You may also complain to the supervisory authority in your country of residence.

How to submit a request

Write to: privacy@vesteri.com (subject: "GDPR") or by post (address in the Privacy Policy). Describe which right you are exercising. We may ask for additional identity verification — proportionate, and only where necessary.

Deadlines: we respond without undue delay, at the latest within one month; for complex requests we may extend by a further 2 months, informing you of the extension. Exercising your rights is free of charge (for manifestly excessive requests we may charge a reasonable fee or refuse — with justification).

Data handed to a developer: the developer is an independent controller — at your request we will forward your request to them, and the data sharing agreement obliges them to honour your rights.

In case of discrepancies, for consumers habitually resident in Poland the Polish version prevails.