Data subject requests
How to exercise access, correction, deletion, and export rights.
Last updated: 2026-05-10
If you are a data subject whose personal data is processed through the customer portal, you can exercise your rights under applicable data protection law (for example, the GDPR). In most cases your data is controlled by your organisation, and we will route requests through them.
Quick links
Rights you can exercise
- Access to the personal data we hold about you.
- Correction of inaccurate or incomplete data.
- Deletion (subject to legal retention obligations).
- Restriction of processing.
- Objection to processing based on legitimate interests.
- Data portability in a structured, commonly used, machine-readable format.
How to submit a request
- If your organisation manages this portal on your behalf, contact your administrator first — they are the controller of your data.
- If you need to contact us directly, use the support contact referenced by the engagement, or email the address listed in your order or agreement.
- Include enough information for us to identify the relevant records (for example, the email used to sign in and the approximate dates).
Identity verification
To protect your data, we may need to verify your identity before acting on a request. We will only use the information you provide for verification for that purpose.
Response time
We aim to respond within 30 days of receiving a complete request. If a request is complex or we receive several from you, we may extend that period by up to 60 additional days and will tell you why.
Complaints
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).