Effective date: [EFFECTIVE DATE]. This page explains how to exercise your rights under the GDPR with [LEGAL ENTITY NAME].
Your rights Access, rectification, erasure, restriction, data portability, objection, and the right not to be subject to solely automated decisions with legal effect.
How to make a request Email [PRIVACY EMAIL] from the address associated with your account, describing your request. We may need to verify your identity.
Our response We respond within one month, extendable by two further months for complex requests, and will tell you if we need more time. There is normally no fee unless a request is manifestly unfounded or excessive.
If you use a BulFront-built site For requests about data collected by a website built on BulFront (its leads, orders or bookings), the website owner is the controller; contact them, and we will assist them as processor under the DPA.
Complaints You may lodge a complaint with your local supervisory authority. In [GOVERNING COUNTRY] this is [SUPERVISORY AUTHORITY, e.g. the Commission for Personal Data Protection].
Data Protection Officer [DPO CONTACT, IF APPOINTED — assess whether a DPO is required.]
This document is a template pending review by a qualified lawyer.