GDPR Information

EU Data Protection Rights
Your GDPR Rights at a Glance
Right to Access
Right to Rectification
Right to Erasure
Right to Restrict Processing
Right to Data Portability
Right to Object
Right to Withdraw Consent
Right to Complain
What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to all companies processing personal data of individuals in the European Union, regardless of where the company is located.

Who Does This Apply To?

  • • Residents of EU member states
  • • UK residents (under UK GDPR)
  • • Anyone whose data is processed in the EU
  • • New People users regardless of location (we extend these rights globally)
Right to Access (Article 15)

What This Means

You have the right to know what personal data we have about you, how we use it, and who we share it with. You can request a copy of all your personal data.

What You'll Receive

Account Data

  • • Personal information (name, email)
  • • Account creation and login history
  • • Subscription and billing information
  • • Communication preferences

Content Data

  • • All resume and CV content
  • • Portfolio information
  • • Uploaded documents and images
  • • Usage analytics and preferences

How to Request

Response time: Within 30 days (may be extended to 60 days for complex requests)

Right to Rectification (Article 16)

What This Means

You have the right to correct any inaccurate or incomplete personal data we hold about you. This ensures your information is always up-to-date and accurate.

How to Update Your Data

Self-Service Updates

Most information can be updated directly in your account settings and profile pages.

Support

For data you cannot update yourself, contact our support team with the corrections needed.

Verification Process

We may ask for verification to ensure the security of your account before making changes.

Response Time

We will correct inaccurate data within 30 days of your request. If we've shared the incorrect data with third parties, we'll also inform them of the corrections.

Right to Erasure / "Right to be Forgotten" (Article 17)

When This Right Applies

  • • The personal data is no longer necessary for the original purpose
  • • You withdraw consent and there's no other legal basis for processing
  • • Your data has been unlawfully processed
  • • Erasure is required for compliance with legal obligations
  • • You object to processing and there are no overriding legitimate grounds

What Gets Deleted

Complete Account Deletion

  • • All personal information and account data
  • • All resumes, CVs, and portfolio content
  • • Uploaded files and images
  • • Usage history and preferences
  • • Communication records (except legal requirements)

Limitations

We may retain some data when we have a legitimate interest or legal obligation:

  • • Financial records for tax and accounting purposes (7 years)
  • • Data needed to defend against legal claims
  • • Anonymized analytics data that cannot identify you
  • • Backup copies (automatically deleted within 90 days)

How to Request Deletion

⚠️ Account deletion is permanent and cannot be undone. Please export your data first if needed.

Right to Restrict Processing (Article 18)

What This Means

You can ask us to limit how we use your personal data instead of deleting it entirely. We'll store the data but not process it further without your consent.

When You Can Request This

  • • You contest the accuracy of your data (while we verify it)
  • • Processing is unlawful but you don't want deletion
  • • We no longer need the data but you need it for legal claims
  • • You've objected to processing (while we consider your objection)

What Happens

Data Storage

Your data remains in our system but is marked as restricted and not actively processed.

Limited Access

Only essential staff can access restricted data for specific legal purposes.

Right to Data Portability (Article 20)

What This Means

You can obtain your personal data in a structured, commonly used format and transfer it to another service provider.

Available Export Formats

JSON Format

Machine-readable structured data

CSV Format

Spreadsheet-compatible format

PDF Archive

Human-readable format

What's Included

  • • All resume and CV content you've created
  • • Profile information and preferences
  • • Portfolio data and customizations
  • • Account settings and communication preferences
  • • Usage metadata (creation dates, modification history)

Direct Transfer

Where technically feasible, we can transfer your data directly to another service provider. Contact us to discuss direct transfer options.

Right to Object (Article 21)

What This Means

You can object to certain types of data processing, particularly for marketing purposes or when processing is based on legitimate interests.

Types of Objections

Marketing Communications

Object to receiving promotional emails, newsletters, and marketing messages.

Analytics and Profiling

Object to analysis of your usage patterns for service improvement.

Automated Decision Making

Object to automated processing that significantly affects you.

Response Process

We'll stop the objected processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to Withdraw Consent (Article 7)

What This Means

Where we process your data based on consent, you can withdraw that consent at any time. Withdrawal doesn't affect the lawfulness of processing before withdrawal.

Consent-Based Processing

Marketing Emails

Promotional content and newsletters

Optional Analytics

Non-essential usage tracking

LinkedIn Integration

Import profile data from LinkedIn

Effect of Withdrawal

Withdrawing consent may limit some features but won't affect core functionality that's necessary for providing our service.

Right to Lodge a Complaint (Article 77)

Supervisory Authorities

If you believe we've violated your data protection rights, you can lodge a complaint with your local data protection authority.

Contact Information

European Data Protection Board

Website: edpb.europa.eu

Find your local authority's contact details

UK Information Commissioner's Office

Website: ico.org.uk

Phone: 0303 123 1113

Before Filing a Complaint

We encourage you to contact us first so we can try to resolve any concerns directly:

Data Protection Officer: dpo@nullspace.biz

Privacy Team: privacy@nullspace.biz

Response Time: Within 30 days

How to Exercise Your Rights

Request Methods

Account Settings

Many rights can be exercised directly through your account settings dashboard.

Email Request

Send detailed requests to our privacy team for manual processing.

Support Ticket

Create a support ticket for guidance on exercising your rights.

Verification Process

To protect your privacy, we may need to verify your identity before processing requests:

  • • Login to your account for automatic verification
  • • Provide government-issued ID for account recovery
  • • Answer security questions about your account
  • • Confirm email address and other account details

Response Timeline

  • Acknowledgment: Within 72 hours
  • Simple Requests: Within 30 days
  • Complex Requests: Up to 60 days (with explanation)
  • Urgent Requests: Expedited processing available
Data Protection Contacts

Data Protection Officer

Email: dpo@nullspace.biz
Responsible for: GDPR compliance, data protection queries, privacy concerns

Privacy Team

Email: privacy@nullspace.biz
Responsible for: Rights requests, consent management, privacy policy questions

Legal Team

Email: legal@nullspace.biz
Responsible for: Legal compliance, data processing agreements, regulatory matters

Last updated: January 1, 2025 • GDPR questions? Contact dpo@nullspace.biz