Your Data Protection Rights
Under the General Data Protection Regulation (EU) 2016/679
Overview
As a data subject under the GDPR, you have extensive rights regarding your personal data. This page explains each right and how you can exercise it with respect to data processed by AI Group LTD through the DPP Platform.
Right to Access (Art. 15)
You have the right to obtain confirmation as to whether we process your personal data, and if so, to access that data and receive information about the purposes of processing, categories of data, recipients, and retention period.
How to exercise: Use the GDPR Data Export feature in your dashboard, or email dpo@d-pass.eu.
Right to Rectification (Art. 16)
You have the right to have inaccurate personal data corrected and incomplete data completed without undue delay.
How to exercise: Update your profile in the dashboard settings, or contact dpo@d-pass.eu.
Right to Erasure (Art. 17)
You have the right to request deletion of your personal data when the data is no longer necessary, you withdraw consent, or the data has been unlawfully processed. DPP data is subject to a mandatory 10-year retention period under EU ESPR Regulation 2024/1781.
How to exercise: Use the Delete Account feature in your dashboard, or email dpo@d-pass.eu.
Right to Restriction (Art. 18)
You have the right to request that we restrict processing of your data when you contest the accuracy of the data, the processing is unlawful, or we no longer need the data but you require it for legal claims.
How to exercise: Email dpo@d-pass.eu with your request and justification.
Right to Data Portability (Art. 20)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
How to exercise: Use the GDPR Data Export feature in your dashboard, which provides your data in JSON format.
Right to Object (Art. 21)
You have the right to object to processing based on legitimate interests or direct marketing. For direct marketing, we will stop immediately.
How to exercise: Click "Unsubscribe" in any marketing email, or email dpo@d-pass.eu.
Right to Withdraw Consent (Art. 7)
Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
How to exercise: Update your consent preferences in your dashboard settings or contact dpo@d-pass.eu.
Right to Lodge a Complaint (Art. 77)
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority.
Commission for Personal Data Protection of Bulgaria
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Response Time
We will respond to all GDPR requests within 30 days of receipt. Complex requests may require an extension of up to 60 days, of which you will be notified. We do not charge fees for exercising your GDPR rights.