GDPR & Your Rights
Last updated: 16 July 2026
⚠️ Draft template — not legal advice. This document is a starting
point. It must be reviewed and completed by a qualified lawyer for your jurisdiction and your actual
data-processing practices before a public launch. Bracketed fields like [COMPANY] must be filled in.
If you are in the EU/EEA or UK, the GDPR (and UK GDPR) gives you rights over your personal data. This page
summarizes them and how to exercise them with Puaro.
Your rights
- Access — get a copy of your personal data.
- Rectification — correct inaccurate or incomplete data.
- Erasure — delete your data (you can delete your account in your profile).
- Restriction & objection — limit or object to certain processing.
- Portability — receive your data in a machine-readable format.
- Withdraw consent — for optional analytics/personalization, anytime, via “Cookie settings”.
- Complain — lodge a complaint with your local supervisory authority.
Data controller
[COMPANY], [ADDRESS]. Data protection contact: [CONTACT EMAIL] [/ DPO if applicable].
How to exercise your rights
Email [CONTACT EMAIL] with your request. We will respond within the statutory timeframe (generally one
month). We may need to verify your identity first.
Legal bases & processors
See our Privacy Policy for the categories of data, purposes, legal bases and the
processors we use (AI/search provider, login provider, hosting).