Your GDPR Rights

Your rights

• Access — find out what data we hold about you and receive a copy.
• Rectification — correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") — under the conditions set by law.
• Restriction — limit processing in certain situations.
• Portability — receive your data in a structured, usable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, without affecting the lawfulness of prior processing (see "Biometric Data" for consequences).

How to exercise your rights

Send a request to [EMAIL CONTACT / CONTACT EMAIL] or to the DPO at [EMAIL DPO / DPO EMAIL]. We respond within one month at most.

Complaint to the authority

If you are unhappy, you may complain to your national data protection authority (in Romania: ANSPDCP, www.dataprotection.ro).

International transfers

Processing takes place within the European Union (face verification runs in an EU region). If any transfer outside the EU becomes necessary, it will be protected by appropriate safeguards (e.g. standard contractual clauses).

Automated decisions

Face verification uses automated scores, but results below the threshold are reviewed by a person before any consequence. You are not subject to a decision with legal effect based solely on automated processing without human involvement.