Your Rights
Under the GDPR and Dutch data protection law, you have rights over your personal data. This page explains those rights and how you can exercise them in relation to Lensym.
- Operated by
- Aletso VOF
- Governing law
- The Netherlands
- Data stored in
- Frankfurt, Germany (European Union)
- Contact
- privacy@lensym.com
01Overview of your rights
The General Data Protection Regulation (GDPR) gives individuals rights over their personal data. As a Netherlands-based company, Aletso VOF is committed to making these rights clear and easy to exercise.
Your rights at a glance
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Right to withdraw consent
Note for survey respondents: for data collected through a survey, the survey creator is the data controller. We recommend contacting them first; we assist them in fulfilling your rights.
02Right to be informed
You have the right to clear and transparent information about how we collect, use, share, and protect your personal data.
How we fulfil this right
- Privacy Policy: comprehensive information about our data practices
- Collection notices: clear information when collecting data
- Purpose statements: clear explanation of why we need your data
- Plain language: information provided in clear and understandable terms
- Regular updates: notifications when our practices change
03Right of access
What you can request
- Confirmation of whether we process your personal data
- A copy of the personal data we hold about you
- Information about how we use your data
- Details about who we share your data with
- Information about how long we retain your data
How to request access
- Self-service: export a complete copy of your data as a ZIP archive from your account settings
- Email request: contact us at privacy@lensym.com with “Data Access Request”
- Identity verification: we may request information to verify your identity and protect your data
- Response: we will respond within 30 days
04Right to rectification
You have the right to correct inaccurate or incomplete personal data.
Account information — update directly in settings
- Name and email address
- Organization details
- Profile information
Survey data — manage through survey tools
- Edit survey questions
- Update survey settings
- Correct response data where applicable
If you are unable to correct your data yourself, you can contact us to request a correction.
05Right to erasure
Also known as the “right to be forgotten”: your right to have your personal data deleted.
When you can request deletion
- The data is no longer necessary for the original purpose
- You withdraw consent and there is no other legal basis
- Your data has been unlawfully processed
- Deletion is required for legal compliance
- You object to processing and there are no overriding legitimate grounds
Partial deletion — self-service
- Individual surveys and responses
- Specific personal information
- Account preferences
Complete account deletion — self-service
- Delete your entire account directly from account settings
- Personal data removed
- Surveys and responses deleted
- Backup data deleted according to our retention periods
Important notes
- Some data may be retained where required by law
- Backup data is deleted according to our retention schedule
- Deletion is permanent once completed and cannot be undone
06Right to restrict processing
When you can restrict processing
- You contest the accuracy of your data (while we verify it)
- Processing is unlawful, but you do not want deletion
- We no longer need the data, but you require it for legal claims
- You have objected to processing (while we assess your objection)
What restriction means
When processing is restricted, we may only:
- Store your data without further processing
- Process it with your consent
- Process it for legal claims
- Process it to protect the rights of others
07Right to data portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format.
What you can export
- Your account and profile information
- Survey questions and structure
- Survey response data
- Analytics and reporting data
- Other data you have provided to us
08Right to object
What you can object to
- Marketing: direct marketing communications
- Legitimate interests: processing based on our legitimate interests
- Profiling: automated decision-making or profiling, where applicable
Our current processing makes objecting easy
- Marketing: we do not send marketing emails unless you have subscribed or otherwise given consent
- No profiling: we do not profile users for commercial purposes
- No advertising: we do not use your data for ads
- Minimal processing: we only process data necessary for our Service
09Right to withdraw consent
You can withdraw consent for any processing that is based on your consent, including:
- Optional data you have chosen to provide
- Marketing communications (if applicable)
- Optional analytics or tracking (where consent is used)
Important: withdrawing consent does not affect the lawfulness of processing before withdrawal. We may continue processing your data where another legal basis applies, such as contract performance or legitimate interests.
10How to exercise your rights
You can exercise your data protection rights through your account settings where available, or by contacting us directly at privacy@lensym.com. We respond within 30 days.
What to include in your request
- Your name and email address
- The right you want to exercise
- Any relevant details about your request
We may ask for additional information to verify your identity and protect your data.
Our response process
- We confirm receipt of your request
- We may verify your identity where necessary
- We review and process your request
- We respond within 30 days, unless a longer period is permitted by law
If you are not satisfied with how we handle your request, you may contact us again. You also have the right to lodge a complaint with the Dutch Data Protection Authority or, if you are located in another EU country, with your local data protection authority.
11Frequently asked questions
Do these rights cost anything?
No, exercising your data protection rights is free. We may charge a reasonable fee for excessive or repetitive requests where permitted by law.
How long do you have to respond?
We respond within one month (30 days). In complex cases, this may be extended by up to two additional months, and we will inform you if this applies.
Can you refuse my request?
In some cases, yes. For example, if fulfilling your request would affect the rights of others or if we have overriding legitimate grounds. We will always explain our decision.
What if I’m not in the EU?
While the GDPR specifically protects individuals in the EU, we aim to provide similar privacy rights to all users where reasonably possible.
I answered someone’s survey — who do I contact?
The person or organization that created the survey is the data controller for your responses. Contact them first; they can view, correct, and delete your responses. If you cannot reach them, contact us and we will assist. See also our Privacy Policy.