Your GDPR Rights
Protecting your privacy under European law
Understanding Your Rights
Under the General Data Protection Regulation (GDPR), you have specific rights regarding your personal data. Bright Ideas EU is committed to respecting these rights and making it easy for you to exercise them.
This page explains your rights and how to contact us if you wish to exercise them.
Data Controller Information
Data Controller: Bright Ideas EU
Address: Barkhausenstraße 7, 01069 Dresden, Germany
Email: support@brightideaseu.com
Website: brightideaseu.com
Data Protection Contact: privacy@brightideaseu.com
Your GDPR Rights in Detail
1. Right of Access (Article 15)
What it means:
You have the right to obtain confirmation whether we are processing your personal data and, if so, access to that data along with specific information about the processing.
What you can request:
- Confirmation that we are processing your data
- Access to your personal data
- Information about processing purposes
- Categories of personal data we hold
- Recipients or categories of recipients
- Storage period or criteria for determining it
- Information about your other GDPR rights
How to exercise:
Email us at support@brightideaseu.com with "Data Access Request" in the subject line. We will respond within 30 days with your data in a commonly used electronic format.
2. Right to Rectification (Article 16)
What it means:
You have the right to have inaccurate personal data corrected and incomplete personal data completed.
When to use it:
- Your personal data is inaccurate or outdated
- Your personal data is incomplete
- You need to update your contact information
How to exercise:
Contact us at support@brightideaseu.com with the specific information you want corrected or completed. We will make the changes within 30 days and notify any third parties if necessary.
3. Right to Erasure "Right to be Forgotten" (Article 17)
What it means:
You have the right to have your personal data deleted in certain circumstances.
When it applies:
- The data is no longer necessary for the original purpose
- You withdraw consent and there is no other legal basis
- Your data has been unlawfully processed
- Deletion is required for compliance with legal obligations
- You object to processing and there are no overriding legitimate grounds
Limitations:
We may retain data if needed for legal compliance, public interest, or establishment of legal claims.
How to exercise:
Email support@brightideaseu.com with "Data Deletion Request" in the subject line, explaining why you believe deletion is appropriate.
4. Right to Restrict Processing (Article 18)
What it means:
You can request that we limit how we use your personal data in certain situations.
When you can request it:
- You contest the accuracy of the data (during verification)
- Processing is unlawful but you prefer restriction over deletion
- We no longer need the data but you need it for legal claims
- You have objected to processing (pending verification of grounds)
What it means for you:
We will store your data but not process it further, except with your consent or for legal claims.
How to exercise:
Contact support@brightideaseu.com specifying which data and why you want processing restricted.
5. Right to Data Portability (Article 20)
What it means:
You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.
When it applies:
- Processing is based on consent or contract
- Processing is carried out by automated means
- It is technically feasible
What you receive:
Your data in a structured format (like CSV or JSON) that you can use with other services.
How to exercise:
Email support@brightideaseu.com with "Data Portability Request" and specify if you want us to transmit the data directly to another service (where technically feasible).
6. Right to Object (Article 21)
What it means:
You have the right to object to certain types of processing of your personal data.
Types of objection:
- General objection: To processing based on legitimate interests or public tasks
- Direct marketing: Absolute right to object to marketing communications
- Profiling: Object to automated decision-making related to direct marketing
What happens:
We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
How to exercise:
For marketing: Use unsubscribe links in emails or contact support@brightideaseu.com
For other processing: Email us explaining your objection grounds.
How to Exercise Your Rights
Step 1: Contact Us
Send an email to support@brightideaseu.com with your request. Please include:
- Clear subject line indicating your request type
- Your full name and contact information
- Specific details about your request
- Any supporting information or documentation
Step 2: Identity Verification
To protect your privacy, we may need to verify your identity before processing your request. We may ask for:
- Additional identifying information
- Proof of identity (in some cases)
- Clarification of your request
Step 3: Processing
We will:
- Acknowledge your request within 3 business days
- Process your request within 30 days (may extend to 60 days for complex requests)
- Keep you informed of any delays or complications
- Provide the requested information or action
Step 4: Follow-up
After processing:
- We will confirm completion of your request
- Provide any requested data or confirmation of actions taken
- Inform relevant third parties if required
- Update our records accordingly
Withdrawing Consent
Where our processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
How to withdraw consent:
- Marketing emails: Click the unsubscribe link in any email
- Cookies: Adjust your browser settings or use our cookie preference center
- General consent: Email support@brightideaseu.com with "Consent Withdrawal" in the subject line
Cookie Management
You have control over cookies and similar technologies used on our website:
Browser Settings: You can also manage cookies through your browser settings. Note that disabling cookies may affect website functionality.
Complaints and Supervisory Authority
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.
Supervisory Authorities:
Before lodging a complaint: We encourage you to contact us first at support@brightideaseu.com so we can try to resolve your concerns directly.
Frequently Asked Questions
How long do you take to respond to GDPR requests?
We acknowledge requests within 3 business days and complete them within 30 days. Complex requests may take up to 60 days, and we will inform you if an extension is needed.
Is there a fee for exercising my GDPR rights?
No, exercising your GDPR rights is free of charge. However, if requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse the request.
Can I make requests on behalf of someone else?
Yes, if you have written authorization from the data subject or legal authority to act on their behalf. We will require proof of authorization.
What if you cannot fulfill my request?
We will explain why we cannot fulfill your request and inform you of your right to complain to a supervisory authority and seek judicial remedy.
How do you verify my identity?
We may ask for additional information that matches what we have on file, or in some cases, official identification documents. This protects your data from unauthorized access.
Contact Information
Data Protection Inquiries:
Primary Contact: support@brightideaseu.com
Subject Line Format: "GDPR Request - [Type of Request]"
Postal Address:
Bright Ideas EU
Data Protection Officer
Barkhausenstraße 7
01069 Dresden
Germany
Response Times:
Acknowledgment: 3 business days
Complete Response: 30 days (may extend to 60 days for complex requests)
Business Hours:
Monday - Friday: 9:00 AM - 6:00 PM CET
Email support available 24/7