Data Subject Request — GDPR & CCPA Rights | EC.DATA

Data Subject Request — GDPR & CCPA Rights

Submit a data access, deletion, or portability request under GDPR, CCPA, or applicable privacy regulation. EC.DATA processes all requests within 30 days.

Available Requests

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate personal data
Right to erasure: request deletion of your personal data
Right to data portability: receive your data in a machine-readable format
Right to restrict processing: limit how we use your data
Right to object: opt out of certain data processing activities

Submitting a data subject request to EC.DATA

This page allows a data subject to submit a request to access, correct, delete, restrict, port, or object to the processing of personal data held by EC.DATA. The form supports requests under GDPR (EU/EEA), UK GDPR, CCPA/CPRA (California), LGPD (Brazil), and other applicable regional regulations. EC.DATA acknowledges every request within five business days and resolves the request within thirty days, with one possible thirty-day extension for complex cases as permitted by GDPR Article 12(3).

Where EC.DATA acts as a data processor on behalf of a customer (for example, when the personal data in question was uploaded by an employer using the EC.DATA platform), the request will be forwarded to the customer who acts as data controller, and the data subject will be notified of the controller's identity. EC.DATA will support the controller in fulfilling the request in accordance with the data processing agreement.

To protect the rights of all data subjects, EC.DATA will verify the requester's identity before disclosing or modifying any personal data. Verification typically involves confirming the requester from a trusted email address on file, or requesting additional identification proportionate to the sensitivity of the data being requested. No fee is charged for the first request in any twelve-month period.