GDPR Rights

1. Right of Access

You may request:

• Confirmation that we process your data.
• A copy of your personal data in a readable format.
• Details about the purpose, categories, and recipients of your data.

We'll respond within 1 month (extendable to 3 months for complex requests).

2. Right to Rectification

Request corrections if your data is inaccurate or incomplete.

3. Right to Erasure

Request deletion when:

• Data is no longer necessary.
• You withdraw consent.
• Data was unlawfully processed.

Exceptions: We retain data if required by French law (e.g., fiscal records under Article L 123-22 of the French Commercial Code).

4. Right to Restrict Processing

Ask us to temporarily restrict processing if:

• You contest data accuracy.
• Processing is unlawful but you oppose erasure.

5. Right to Data Portability

Request your data in a structured, commonly used format (e.g., JSON, CSV) for transfer to another provider.

6. Right to Object

• Direct marketing: Unsubscribe via any marketing email or object via dpo@synopp.io (we'll stop immediately).
• Legitimate interests: We'll cease unless we demonstrate compelling legal grounds.

7. Automated Decisions

Synopp does not use fully automated decision-making that significantly affects users.

8. Right to Withdraw Consent

Withdraw consent anytime (e.g., newsletters). This does not affect prior lawful processing.

How to Exercise Your Rights

1. Email: Send requests to dpo@synopp.io with:
   • Full name + proof of identity (e.g., redacted ID).
   • Specific request details.
2. Response Time:
   • 1 month (may extend to 3 months with notification).
3. No Fees: Free unless requests are manifestly unfounded or excessive.

Complaints

If unsatisfied, lodge a complaint with:

• Synopp's DPO: dpo@synopp.io
• French Data Protection Authority (CNIL):
  Online complaint form
  | Address: 3 Place de Fontenoy, 75007 Paris, France

Contact

Note: For requests by post, we recommend using tracked mail.

Last Updated: April 7, 2025