Your Data Protection Rights
If Cert-IX holds personal data about you, data protection law — including the EU General Data Protection Regulation (GDPR) — gives you a set of rights over that data. This page explains what those rights are, how to exercise them through our online form, and what happens after you submit a request.
You can make a request free of charge, and you do not need to give a reason for most of them.
Who can use this
Anyone whose personal data may be processed by Cert-IX — for example visitors, newsletter or early-access subscribers, account holders, and people who have contacted us. You can submit a request whether or not you have an account.
Your rights at a glance
| Right | What it lets you do |
|---|---|
| Access | Get confirmation of whether we process your personal data and receive a copy of it. |
| Rectification | Have inaccurate personal data corrected, or incomplete data completed. |
| Erasure ("right to be forgotten") | Ask us to delete your personal data where there is no overriding reason to keep it. |
| Restriction | Ask us to limit how we use your data while a concern is being resolved. |
| Portability | Receive the personal data you provided to us in a structured, commonly used, machine-readable format. |
| Objection | Object to certain processing of your personal data. |
In addition to the above, you may also have the right to withdraw consent at any time where our processing is based on consent, and the right to lodge a complaint with a data protection authority (see If you are not satisfied).
Whether a particular right applies can depend on the legal basis for the processing and on other applicable law. If a right does not apply to your specific situation, we will explain why in our response.
How to submit a request
The quickest way to exercise your rights is our online form:
▶️ Open the rights-request form —
https://cert-ix.com/privacy/request
- Choose the type of request — Access, Correct, Delete, Restrict, Portability, or Object.
- Tell us who you are — your name and the email address we should use to reach you.
- Describe your request — add any details that help us find your data and understand what you want (for example, the email address you subscribed with). Please do not include more sensitive information than necessary.
- Complete the short anti-abuse check and submit.
When you submit, you will immediately see:
- a reference number for your request — keep it for any follow-up, and
- the date by which we will respond.
You can also make a request by emailing our Data Protection Officer directly at [email protected] if you prefer not to use the form.
Verifying your request
To protect you, we send a confirmation link to the email address you provided. Click that link to confirm the request genuinely comes from you.
This step exists so that no one can submit a request in your name without access to your inbox. We cannot begin processing your request until you confirm it, so please check your email (including spam or promotions folders) shortly after submitting.
What happens after you submit
- Acknowledgement. You receive an on-screen confirmation with your reference number, and an email acknowledging the request.
- Response time. We respond within one month of receiving your confirmed request. For complex or numerous requests, this period may be extended by up to two further months — if that happens, we will tell you within the first month and explain why.
- Cost. Handling your request is free of charge. In the rare case of a manifestly unfounded or excessive request, we may charge a reasonable fee or decline to act, and we will explain our decision.
- Identity checks. Where we have reasonable doubts about who you are, we may ask for additional information to confirm your identity before we act. This is to make sure we do not disclose your data to the wrong person.
- How we contact you. We use the email address associated with your request.
Acting on behalf of someone else
If you are submitting a request on behalf of another person (for example as a parent, guardian, or authorised representative), please say so in the request and be ready to provide evidence that you are authorised to act for them.
If you are not satisfied
If you have concerns about how we have handled your personal data or your request, we would like the chance to put things right — please contact our Data Protection Officer first.
You also have the right to lodge a complaint with a data protection supervisory authority. In France this is the Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr. If you are located elsewhere in the EU/EEA, you may contact your local supervisory authority.
Contact our Data Protection Officer
- Email: [email protected]
- Rights-request form: https://cert-ix.com/privacy/request
- Privacy Policy: https://cert-ix.com/privacy
For details of what personal data we process and why, please see our Privacy Policy.
Questa pagina ti è stata utile?