Take Control

Your Rights

Like any company offering services to EU citizens, we.CONECT is subject to the new EU-General Data Protection Regulation. We believe that the core of this regulation aims providing you – our customers – are much more direct control over your personal data. In this spirit, we would like to make very transparent what rights you have and what we do to respond in a professional manner:

You have the right:

To be provided with information on the legal identity of we.CONECT, the reasons for processing their personal data and other relevant information necessary to ensure the fair and transparent processing of your personal data
To access your data
- confirmation of whether, and where, we.CONECT is processing your personal data
- information about the purposes of the processing
- information about the categories of data being processed
- information about the categories of recipients with whom the data may be shared
- information about the period for which the data will be stored
- information about the existence of the right to complain to the DPA
- where the data were not collected from the data subject, information as to the source of the data
To rectify your data, should it be inaccurate or incomplete
To erase your data („right to be forgotten“), if:
- there is no legitimate grounds for retaining it
- the data are no longer needed for their original purpose (and no new lawful purpose exists)
- the lawful basis for processing is your consent and you withdraw it
- If you exercise your right to object to processing, and the we.CONECT has no overriding grounds for continuing the processing
To restrict processing (meaning that your data may only be held by we.CONECT, and may only be used for limited purposes), if:
- you believe your data is inaccurate
- our processing activities are unlawful and you request restriction
- we.CONECT no longer needs your data for their original purpose, but the data is still required by we.CONECT to establish, exercise or defend legal rights
- verification of overriding grounds is pending, in the context of an erasure request
To receive a copy of your personal data in a structured, commonly used, machine-readable format that supports re-use
To object to processing, in those cases where weCONECT’s is pursuing own legitimate interests as a basis for processing
To be be informed and object to automated decision-making / profiling
To be informed about a data breach, should this ever occur

Access Request

FAQ

How do I complain

We take every request very seriously and would like to ask you to use the above form if you would like to file a complaint.

What am I supposed to do if we.CONECT does not respond to my access request?

Please bear with us and give us some time to respond properly to your request. We are going to need at least 7 days to verify the legitimacy of your request. If we do not satisfy your request within 20 days, you may reach out to our data protection officer to escalate the process.

How long do I need to wait?

As per the EU-GDPR, the timescale for responding may be up to one month. We aim at being much quicker than that.

Do I need to provide additional data to issue an access request?

Technically yes, and we understand it is a bit irritating at first glance that we have to ask you to provide additional information about yourself before we can respond to any access request. To verify the legitimacy of your request and making sure you’re actually „you“, we are going to need to ask for your ID. EU-GDPR requires us to use all reasonable efforts to verify the identity of „data subjects“.

Rest assured we will delete all identification documents immediately after triaging your request.

Can I delete all my data?

Yes, you can request us to delete your data using the access request form on this page.

For transparency’s sake, we would like to point out that the while „right to be forgotten” has attracted a lot of attention, it is often misunderstood or not well explained.

First off, you may, at any point in time, request us to delete all your data. We will respectfully execute your request.

However, we can only delete data under the following conditions:

If the data is no longer required for the contractual purposes it was initially collected for
If the processing was based on your consent and you withdraw it, and where then we.CONECT has no other lawful basis
If it turns out that the data was obtained „illegally“ with no legal basis at all
If we do not have a different legal obligation to retain it (such as for tax & accounting purposes)”