GDPR — your rights and how to exercise them

This page explains, in practical terms, how to exercise the GDPR rights you have over the data we hold about you.

1. How to submit a request

Send an email to hello [at] ediconnect.ro with the subject "GDPR request". State the type of request (access, rectification, erasure, portability, objection, restriction) and the email address you used on the site so we can locate your records.

2. Identity verification

To protect your data, we reply to the email address associated with the records. If the request comes from another address, we may ask for additional confirmation, strictly limited to what is necessary.

3. Response time

We respond within 30 calendar days of receiving the request. If the request is complex, we will inform you of the extension and the reason for it.

4. Full data erasure

We delete the contact form record and any copies held in email logs.
We remove you from the newsletter list.
We confirm the erasure in writing.
Exception: we may retain data strictly required to meet a legal obligation, where one exists.

5. Complaints

If you are not satisfied with our response, you may lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), based in Bucharest.