GDPR & your rights

You have the following rights regarding your personal data:

• Access — get a copy of all data we hold on you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request that we delete your data ("right to be forgotten").
• Restriction — limit how we process your data while you contest accuracy or our basis.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, where processing relies on consent (e.g. ID verification).
• Lodge a complaint with your national data-protection authority.

Exercise your rights

Two of the most common rights are built directly into your account:

• Download my data — instant export in JSON, one click.
• Delete my account — initiates erasure within 30 days.

For any other request, email our DPO at dpo@arze.example. We respond within 30 days as required by Art. 12(3) GDPR.

International transfers

Where data is processed outside the EU/EEA, we rely on Standard Contractual Clauses and equivalent safeguards. See the live subprocessors list and the Trust Center.