GDPR and Your Data Rights

Last updated: July 20, 2026

This page explains how people in the EEA and other jurisdictions with similar rights can exercise data-protection rights. It supplements our Privacy Policy.

Your rights

• Be informed about processing.
• Request access to your personal data.
• Correct inaccurate or incomplete data.
• Request erasure where the legal conditions apply.
• Restrict processing in qualifying circumstances.
• Receive eligible data in a portable format.
• Object to processing based on legitimate interests or direct marketing.
• Withdraw consent at any time without affecting earlier lawful processing.
• Ask for human intervention concerning qualifying solely automated decisions.

How to submit a request

Email privacy@xgenta.io from your account email. State the right you wish to exercise and provide enough detail to locate the data. We may request proportionate identity verification and will not request passwords or connector tokens.

Response time and fees

We normally respond within one month. Where permitted, that period may be extended by two further months for complex or numerous requests; we will explain the extension within the first month. Requests are generally free, though a reasonable fee or refusal may apply to manifestly unfounded or excessive requests.

Complaints

You may complain to the supervisory authority where you live or work, or where you believe an infringement occurred. Our lead supervisory authority is [SUPERVISORY AUTHORITY AND CONTACT DETAILS].

Controller and DPO

Controller: [LEGAL ENTITY NAME AND ADDRESS]. Data Protection Officer, if appointed: [DPO NAME/CONTACT]. Privacy contact: privacy@xgenta.io.