DSR Portal

1. Making a request

You can request access, correction, erasure, restriction, portability, withdraw consent or object to relevant processing by emailing [email protected] or writing to the operator’s address above. You do not need an Auxillo account. Explain the data or service involved and the outcome you seek.

2. Verification and timing

We may request proportionate information to confirm identity and prevent disclosure to the wrong person. Using your account email can help, but is not the only acceptable way to make a request. Do not send identity documents or credentials unless a justified verification step has been agreed.

We normally respond within one month of receiving the request. Where the GDPR permits an extension because of complexity or number of requests, we explain the reason within the first month; an extension can be up to two additional months. Requests are normally free. Any permitted refusal or fee will be explained with information about your rights.

3. Limits and customer-controlled data

Rights depend on the processing and applicable legal conditions. Some invoice, dispute or security records may need to be retained. Erasure of active data does not mean every historical recovery copy is immediately overwritten; see the retention schedule. We will explain any applicable exception or restriction.

Where Auxillo processes data on behalf of a customer, the customer normally handles the request as controller. We will assist them under the DPA and direct your request appropriately where possible.

4. Complaints and communication

We will use a suitable method for the response and agree a protected transfer when sensitive material is involved. Ordinary email is not a guarantee of end-to-end encryption. You may complain to the CNPD or your competent supervisory authority if you are dissatisfied with the handling of a request.