GDPR Data Subject Rights

This page explains the rights granted to individuals under the EU General Data Protection Regulation (GDPR), the UK GDPR, and comparable international privacy laws. These rights apply to personal data processed by OM Digital LLC when acting as a data controller.

If you are located in the European Union, United Kingdom, or any jurisdiction that provides similar data protection rights, you may exercise the rights described below.

1. Right to Be Informed

You have the right to clear and transparent information about:

• How your personal data is collected
• Why it is collected
• How it is processed
• With whom it is shared
• How long it is retained
• Your rights under GDPR

All such information is detailed in our Privacy Policy and related legal documents.

2. Right of Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Your access request may include:

• Categories of data processed
• Purposes of processing
• Recipients or third parties with access
• Retention periods
• Information about your rights
• Sources of data if not collected directly from you

We will provide the requested information unless restricted by law or the rights of others.

3. Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request correction.

We will promptly update inaccurate information and notify third parties where required.

4. Right to Erasure (Right to Be Forgotten)

You may request deletion of your personal data under certain conditions, such as:

• The data is no longer needed for its original purpose
• You withdraw consent
• You object to processing and no overriding legitimate interests exist
• Processing is unlawful
• Deletion is required by law

We may decline deletion when data must be retained for:

• Tax purposes
• Legal obligations
• Accounting requirements
• Security or fraud prevention
• Contractual evidence
• Dispute resolution

If deletion is not possible, we may anonymize or restrict the data instead.

5. Right to Restrict Processing

You may ask us to temporarily limit how we use your data if:

• You contest the accuracy of your data
• Processing is unlawful and you prefer restriction instead of deletion
• We no longer need the data but you require it for legal claims
• You object to processing pending verification of legitimate interest

Restricted data will not be processed except for storage or legal claims.

6. Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another organization.

Portability applies to data:

• You have provided
• Processed based on consent or contract
• Processed through automated means

We will deliver the data securely and in a standard format.

7. Right to Object

You may object to processing of your personal data when processing is based on:

• Legitimate interests
• Public interest considerations

If you object, we will stop processing unless we can demonstrate compelling legitimate grounds or the processing is necessary for legal claims.

You may always object to:

• Direct marketing
• Profiling linked to direct marketing

8. Rights Related to Automated Decision-Making

You have the right not to be subject to automated decisions that have legal or significant effects on you.

OM Digital LLC does not use automated decision-making that produces such effects.

If this ever changes, we will provide explicit notice and safeguards.

9. Right to Withdraw Consent

If you previously consented to processing activities such as:

• Analytics cookies
• Marketing communications
• Optional data collection

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your country of residence, workplace, or place of alleged violation.

Examples include:

• Data Protection Authorities in EU member states
• The UK Information Commissioner's Office (ICO)

We encourage you to contact us first so we may address your concerns promptly.

11. How to Submit a Data Rights Request

To exercise your rights, email us at:

Your request should include:

• Your full name
• Email address associated with your data
• Description of the right you want to exercise
• Any additional details necessary to locate your data

We may request proof of identity to protect your personal information.

12. Response Time

We will respond to verified requests:

• Within 30 days under GDPR requirements
• Within legally permitted extensions when necessary for complex requests

If we need additional time, we will notify you with an explanation.

13. Limitations

We may deny or limit a request when:

• It violates the rights of others
• It conflicts with legal obligations
• It would compromise security or confidentiality
• We cannot reasonably verify your identity
• The data falls under exemptions permitted by law

In such cases, we will explain our justification unless restricted by law.

14. Contact Information

For privacy inquiries or rights requests, contact: