Your Rights

Access to your data. Confirmation of whether we process data about you and, if we do, a copy of it plus information about how we use it.

Rectification. Correction of data that is wrong, or completion of data that is incomplete.

Erasure, also known as the right to be forgotten. It applies in the situations set out in the Regulation, not automatically in every case. If we cannot honour it, we tell you why.

Restriction of processing. We stop using the data temporarily while keeping it. Useful while a dispute is being checked.

Data portability. You receive the data you gave us in a machine-readable format, or we send it directly to another controller.

Objection. You can object to processing based on our legitimate interest. Where direct marketing is concerned, we stop immediately, with no discussion.

Withdrawal of marketing consent. If you ever ticked a box to receive commercial messages, you can undo it.

The full explanations, with their legal bases, are in section 7 of the Privacy Policy.

Fill in the form below. You will receive an email confirming that it arrived, along with the deadline by which we must answer.

• Your request reaches the person responsible for data protection and is recorded with its date.
• You receive an email confirming it arrived and stating the deadline.
• We answer within one month of receiving the request. If the request is complex, or you have sent several, that period can be extended by at most two further months. In that case we tell you before the first month is out, and why.

Answering is free. If requests become manifestly excessive or repetitive, the law allows us to charge a reasonable fee or to refuse, but we will always explain the reason.

Sometimes an email address alone does not tell us that you are who you say you are. In those cases we ask for additional information to help identify you. We do not do it to make the request harder, but for the opposite reason: so that we do not hand your data to someone impersonating you.

For the same reason, an erasure request is not executed automatically when the form is submitted. A person reviews it. A system that deleted data on the strength of an unverified email address would let anyone destroy someone else’s history.

You have the right to lodge a complaint with the supervisory authority. You can do so directly, without contacting us first, though it is usually resolved faster if you write to us as well.

You also have the right to go to court.

If you would rather not use the form, write to us at gdpr@thefactory.agency, call +40 314 014 100, or send a written request to S.C. THEFACTORY S.R.L., at the registered office in Strada Balanței 46, Corbeanca, Ilfov County, or at the place of business in Strada Părintele Galeriu 6C, Sector 2, Bucharest, marked “for the attention of the data protection officer”.

To let us handle the request faster, tell us which right you want to exercise and which email address you used when you contacted us before.