GDPR Rights

effective date: January 27, 2026

Introduction to GDPR

The General Data Protection Regulation (GDPR) is an EU regulation that strengthens individuals' rights regarding the processing of their personal data. This page explains your rights under GDPR and how you can exercise them.

contentesflow.com respects your privacy and is committed to complying with GDPR requirements. This document tells you what rights you have and how you can exercise them.

Your Rights Under GDPR

2.1. Right to Access Your Data

You have the right to obtain confirmation as to whether your personal data is being processed, and if so, access to that data and the following additional information:

  • Categories of personal data
  • Purposes of processing
  • Recipients or categories of recipients of the personal data
  • Retention period of the personal data
  • Right to request rectification or erasure

2.2. Right to Rectification

You have the right to have your personal data rectified without undue delay if the data is inaccurate or incomplete. You can request rectification of the following data:

  • Name and contact details
  • Profile information
  • Settings and preferences
  • Other personal data

2.3. Right to Erasure ("Right to be Forgotten")

You have the right to have your personal data erased without undue delay in the following situations:

  • The personal data is no longer needed for the original purposes
  • You withdraw your consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The personal data has been processed unlawfully
  • Erasure is necessary to fulfill a legal obligation

2.4. Right to Restriction of Processing

You have the right to have the processing of your personal data restricted in the following situations:

  • You contest the accuracy of the personal data
  • The processing is unlawful and you oppose erasure
  • We no longer need the personal data, but it is required for legal claims
  • You have objected to processing while verification is pending

2.5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format and the right to transmit this data to another controller. The data is typically provided in XML or CSV format.

2.6. Right to Object to Processing

You have the right to object to the processing of your personal data when processing is based on legitimate interest or direct marketing. You can object to:

  • Direct marketing processing at any time
  • Processing based on legitimate interest

2.7. Right Not to be Subject to Automated Decision Making

You have the right not to be subject to automated decision making, including profiling, if the decision produces legal effects for you or significantly affects you in a similar manner.

2.8. Right to Withdraw Consent

If the processing of your personal data is based on consent, you have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

Contact:

You can exercise your rights by contacting us via email: info@contentesflow.com

What to include in your request:

  • Clear description of which right you wish to exercise
  • Verification of your identity (e.g., email address)
  • Any additional details that may help process your request

Response time:

We generally respond to your request within one month. In complex cases the response time may be up to three months, of which we will inform you.

Fees:

Exercising your rights is generally free. However, we may charge a reasonable fee if your request is manifestly unfounded or excessive.

Right to Complaint

If you are dissatisfied with the processing of your personal data, you have the right to lodge a complaint with a supervisory authority. In New Zealand, the supervisory authority is the Privacy Commissioner.

Contact: Privacy Commissioner, PO Box 10094, Wellington 6143, New Zealand, enquiries@privacy.org.nz