GDPR & data rights

Last updated 28 August 2026

How to exercise your rights under the General Data Protection Regulation, and what to expect when you do. Read this alongside the Privacy policy.

1. The rights you have

Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. The Privacy policy explains when each applies to the data we hold about you.

2. How to make a request

Email [email] with the word "GDPR" in the subject line and tell us which right you want to exercise. You do not need to use a particular form or give a reason, except when objecting to processing based on legitimate interests.

3. Confirming your identity

Because these requests concern personal data, we will ask you to confirm your identity before we act — normally by replying from the email address we hold for you, or by providing one piece of matching identification. We will not act on a request we cannot attribute to you.

4. Our response time

We respond within one month. For complex or numerous requests we may extend this by two further months and will tell you why within the first month.

5. If you are not satisfied

Contact us first so we can put it right. You may also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the supervisory authority where you live or work.

Questions about this document? Write to legal@setupcompany.eu and we will reply within one working day.