Skip to content
Back to home

GDPR: Your Rights

Last updated: 11 October 2026

The General Data Protection Regulation (EU) 2016/679 gives you a set of rights over the personal data an organisation holds about you. This page explains each of them in plain language and how to use them with HORSETEK. What we collect and why is described in our Privacy Policy.

Your rights

  • Access: you can ask whether we hold data about you and receive a copy of it, together with information about how we use it.
  • Rectification: you can have inaccurate data corrected and incomplete data completed.
  • Erasure: you can have your data deleted, for example when we no longer need it or when you object to its use. We may have to keep some data where the law obliges us to, such as invoices.
  • Restriction: you can ask us to store your data without using it, for example while we check a correction you requested.
  • Portability: you can receive the data you gave us in a commonly used, machine readable format, or ask us to send it to another organisation where that is technically possible.
  • Objection: you can object at any time to processing we base on our legitimate interest. We then stop, unless we have compelling reasons that the law recognises.
  • Withdrawal of consent: where we rely on your consent, you can withdraw it at any time. This does not affect what was done before the withdrawal.
  • Automated decisions: you have the right not to be subject to decisions made only by automated means that significantly affect you. We do not make such decisions.

How to use them

  • Write to [email protected] and tell us which right you want to use and what data it concerns.
  • If we cannot tell who you are from your message, we may ask for a detail that confirms your identity. We use it only for that purpose.
  • We answer within one month. For complex or numerous requests the law allows us to extend this by up to two more months, and we will tell you if that happens and why.
  • Requests are free of charge. The law allows a reasonable fee, or a refusal, only for requests that are clearly unfounded or excessive.

If we cannot do what you ask

Some rights have limits. For example, we cannot delete data that the law requires us to keep. If we are unable to fulfil a request, in full or in part, we will explain the reason in our answer.

Complaints

We would like the chance to solve any concern first, so please write to us. You also have the right, at any time, to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at dataprotection.ro, or with the data protection authority of the EU country where you live or work.