Data Protection Rights - vivora-nest.shop | Your GDPR Rights & How to Exercise Them

Data Protection Rights

Your comprehensive guide to GDPR rights and how to exercise them. Take control of your personal data with transparency and ease.

GDPR Articles 15-22 | Last Updated: June 23, 2025

🛡️ Your Rights Are Our Priority

Under the General Data Protection Regulation (GDPR), you have fundamental rights regarding your personal data. We are committed to facilitating the exercise of these rights quickly and transparently.

⚡ Fast Processing

All rights requests processed within 30 days (may be extended to 60 days for complex requests)

🆓 Free of Charge

Exercise all your rights completely free of charge unless requests are excessive

📋 Clear Information

Plain language explanations and transparent processes for all rights

🔒 Secure Handling

Identity verification and secure processing of all personal data requests

⚖️ Your GDPR Rights Overview

Eight fundamental rights that give you control over your personal data under Articles 15-22 of the GDPR.

👁️

Right of Access

Article 15

Access to your personal data and information about how we process it

✏️

Right to Rectification

Article 16

Correction of inaccurate or incomplete personal data

🗑️

Right to Erasure

Article 17

Deletion of personal data ("right to be forgotten")

⏸️

Right to Restriction

Article 18

Limit processing of personal data in certain circumstances

📤

Right to Portability

Article 20

Receive your data in structured, machine-readable format

🚫

Right to Object

Article 21

Object to processing based on legitimate interests or direct marketing

🤖

Automated Decision-Making

Article 22

Protection against solely automated decisions including profiling

📋

Right to Information

Articles 13-14

Clear information about data processing (provided in our Privacy Policy)

👁️ Right of Access (Article 15)

Your right to know what personal data we hold about you and how we use it

What You Can Request

  • Confirmation whether we process your personal data
  • Copy of your personal data in a commonly used format
  • Purposes of processing and legal basis for each purpose
  • Categories of data we collect and process
  • Recipients who have received your data
  • Retention periods for different categories of data
  • Source of data if not collected directly from you
  • Automated decision-making details including profiling

What We Provide

Complete Data Export: All personal data in structured format (JSON/CSV) | Processing Report: Detailed explanation of all processing activities | Response Time: Within 30 days of verified request

📁 Your Access Report Includes

  • Account information and profile data
  • Order history and transaction records
  • Communication history and support tickets
  • Website usage data and preferences
  • Marketing consents and communication preferences

✏️ Right to Rectification (Article 16)

Your right to have inaccurate or incomplete personal data corrected

When You Can Request Correction

  • Inaccurate data: Any personal data that is factually incorrect
  • Incomplete data: Missing information that affects completeness
  • Outdated information: Data that is no longer current or relevant
  • Spelling errors: Mistakes in names, addresses, or other details

Our Rectification Process

🔍 Verification Required

We may request evidence to verify corrections, especially for sensitive information like identity documents or financial data. This protects against unauthorized changes to your account.

Immediate Updates

Profile information, preferences, contact details

Verification Required

Legal name, date of birth, official documents

Third-Party Notification

Updates shared with processors and partners

🗑️ Right to Erasure (Article 17)

Your "right to be forgotten" - deletion of personal data in specific circumstances

Grounds for Erasure

  • No longer necessary: Data no longer needed for original purpose
  • Withdrawal of consent: Where consent was the legal basis
  • Unlawful processing: Data processed without legal basis
  • Legal compliance: Erasure required by law
  • Child's data: Data collected from children without proper consent
  • Object to processing: Valid objection with no overriding interests

When We Cannot Erase Data

⚖️ Legal Obligations & Exceptions

  • Legal requirements: Tax records, accounting obligations (10 years)
  • Vital interests: Health and safety of individuals
  • Public interest: Archiving, research, statistics
  • Legal claims: Defense of legal claims in progress
  • Freedom of expression: Information required for freedom of expression

🔄 Partial Erasure Available

When complete erasure isn't possible, we can delete specific categories of data or anonymize information while retaining necessary records for legal compliance.

⏸️ Right to Restriction (Article 18)

Limit processing of your personal data while maintaining storage

When You Can Request Restriction

  • Accuracy contested: While we verify accuracy of disputed data
  • Unlawful processing: Instead of erasure, you prefer restriction
  • No longer needed: We don't need data but you need it for legal claims
  • Objection pending: While we assess objection to legitimate interest processing

What Restriction Means

🛑 Processing Suspended

Data stored but not actively processed for original purposes

✅ Limited Use Only

Data used only with consent, legal claims, protection of rights, or public interest

📞 Notification Commitment

We will notify you before lifting any restriction on your data processing and inform all recipients of the restriction and its removal.

📤 Right to Data Portability (Article 20)

Receive your data in structured format and transfer to another service

Conditions for Portability

  • Consent or contract: Data processed based on consent or contract performance
  • Automated processing: Data processed by automated means
  • Personal data only: Right applies only to your personal data
  • Technical feasibility: Direct transfer where technically feasible

Data Formats We Provide

📊 JSON Format

Machine-readable structured data

📈 CSV Format

Spreadsheet-compatible data export

📄 XML Format

Standardized markup format

🔗 API Access

Direct technical integration option

🔄 Direct Transfer Service

Where technically feasible, we can transfer your data directly to another service provider. Contact us to discuss technical requirements and compatibility.

🚫 Right to Object (Article 21)

Object to processing based on legitimate interests or for direct marketing

Grounds for Objection

  • Legitimate interest processing: Object to processing based on our legitimate interests
  • Direct marketing: Absolute right to object to marketing communications
  • Profiling for marketing: Automated profiling related to direct marketing
  • Public interest tasks: Object to processing for public interest or official authority

Types of Objections

🚫 Absolute Right

Direct Marketing: We must stop all marketing communications immediately

⚖️ Balancing Test

Legitimate Interest: We assess if compelling legitimate grounds override your interests

📧 Easy Opt-Out Options

Marketing emails: One-click unsubscribe in every email | Account settings: Manage all communication preferences | Contact us: Request complete marketing opt-out

🚀 How to Exercise Your Rights

Multiple convenient ways to exercise your data protection rights with fast, secure processing and expert support.

🔴 Priority Rights Hotline

+49 (0) 800 678 9012

24/7 dedicated data rights specialists

Immediate assistance and secure verification

🛡️ Data Protection Officer

dpo@vivora-nest.shop

Direct contact with certified DPO

Expert guidance on complex rights

📝 Online Rights Form

Secure web form below

Structured request with document upload

Automatic case tracking

📱 Account Dashboard

Self-service rights management

Instant access to personal data

Direct control over preferences

📝 Submit Data Rights Request

Complete the secure form below to exercise your data protection rights. All requests are processed within 30 days.

Upload a copy of your ID, passport, or driver's license to verify your identity (required for security)

🔒 Secure Processing

Identity Verification: Required to protect your data | Secure Transmission: All data encrypted in transit | Response Time: Maximum 30 days (may be extended to 60 days for complex requests)

⏱️ Rights Request Processing Timeline

Clear timeline showing how we process your data rights requests from submission to completion.

1

Request Received

Day 0

Automatic confirmation email sent with case number

2

Identity Verification

Day 1-3

Secure verification of identity and authorization

3

Request Assessment

Day 3-7

Legal review and technical feasibility assessment

4

Data Processing

Day 7-25

Execution of rights request with quality checks

5

Response Delivery

Day 25-30

Secure delivery of response and confirmation

⏰ Extension Circumstances

Complex Requests: May require up to 60 additional days | Multiple Requests: Excessive requests may incur reasonable fees | Notification: We'll inform you of any delays within the initial 30-day period

🏛️ Supervisory Authority Contact

If you're not satisfied with how we handle your data rights request, you have the right to lodge a complaint with the relevant supervisory authority.

🇩🇪 German Authority

Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)

Website: bfdi.bund.de

Email: poststelle@bfdi.bund.de

Phone: +49 (0)228 997799-0

🇪🇺 EU Data Protection Board

European Data Protection Board

Website: edpb.europa.eu

Coordinates between EU member states

Cross-border complaint handling

🌍 Local Authorities

Your Country's DPA

Contact the supervisory authority in your country of residence

Full list available at: edpb.europa.eu

Same rights protection across EU

📞 Before Filing a Complaint

We encourage you to contact us first so we can try to resolve any concerns directly. Many issues can be resolved quickly through direct communication with our Data Protection Officer.

📞 Data Rights Support Team

Our certified data protection specialists are ready to help you exercise your rights and answer any questions about data processing.

🔴 Priority Rights Hotline

+49 (0) 800 678 9012

24/7 specialized support

🛡️ Data Protection Officer

dpo@vivora-nest.shop

Certified privacy expert

📧 Rights Team

rights@vivora-nest.shop

Dedicated rights processing

📍 Postal Address

Vivora Nest GmbH

Data Rights Department

Musterstraße 123

12345 Berlin, Germany

Scroll to Top