Your Data Protection Rights

Under the General Data Protection Regulation (EU) 2016/679

Overview

As a data subject under the GDPR, you have extensive rights regarding your personal data. This page explains each right and how you can exercise it with respect to data processed by AI Group LTD through the DPP Platform.

1. Right to Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether we process your personal data, and if so, to access that data and receive information about:

  • The purposes of processing
  • The categories of personal data concerned
  • The recipients or categories of recipients
  • The envisaged retention period
  • Your other GDPR rights

How to exercise: Log into your dashboard and use the GDPR Data Export feature, or email dpo@d-pass.eu.

2. Right to Rectification (Art. 16 GDPR)

You have the right to have inaccurate personal data corrected and incomplete data completed without undue delay.

How to exercise: Update your profile in the dashboard settings, or contact dpo@d-pass.eu.

3. Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR)

You have the right to request deletion of your personal data when:

  • The data is no longer necessary for the purposes collected
  • You withdraw consent and there is no other legal basis
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Important: DPP data is subject to a mandatory 10-year retention period under EU ESPR Regulation 2024/1781. We may retain data where required by law even if you request deletion.

How to exercise: Use the Delete Account feature in your dashboard, or email dpo@d-pass.eu.

4. Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request that we restrict processing of your data when:

  • You contest the accuracy of the data (for a period enabling verification)
  • The processing is unlawful and you oppose erasure
  • We no longer need the data, but you require it for legal claims
  • You have objected to processing pending verification of overriding grounds

How to exercise: Email dpo@d-pass.eu with your request and justification.

5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (JSON, CSV), and to transmit it to another controller.

How to exercise: Use the GDPR Data Export feature, which provides your data in JSON format.

6. Right to Object (Art. 21 GDPR)

You have the right to object to processing based on:

  • Legitimate interests — We will cease processing unless we demonstrate compelling legitimate grounds
  • Direct marketing — You may object at any time; we will stop immediately

How to exercise: Click "Unsubscribe" in any marketing email, or email dpo@d-pass.eu.

7. Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

How to exercise: Update your consent preferences in your dashboard settings or contact dpo@d-pass.eu.

8. Right to Lodge a Complaint (Art. 77 GDPR)

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority:

Commission for Personal Data Protection of Bulgaria
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: www.cpdp.bg
Phone: +359 2 915 3580

You may also lodge a complaint with the supervisory authority in your country of residence, place of work, or place of the alleged infringement.

Response Time

We will respond to all GDPR requests within 30 days of receipt. Complex requests may require an extension of up to 60 days, of which you will be notified.

No Fees

We do not charge fees for exercising your GDPR rights. However, we may charge a reasonable fee or refuse manifestly unfounded or excessive requests.

Contact

Data Protection Officer (DPO)
AI Group LTD
Email: dpo@d-pass.eu
General legal: legal@d-pass.eu