Your GDPR Rights
Last updated: July 14, 2025
Quick summary
The General Data Protection Regulation (GDPR) gives you strong rights over your personal data. We support all of them. Here is exactly how to exercise each right.
For all requests, email [email protected]. We respond within 30 calendar days (GDPR Article 12.3).
1. Right of access (Article 15)
You can ask us what personal data we hold about you. We will tell you:
- What data we have
- Why we are processing it
- Who we share it with (if anyone)
- How long we will keep it
- Where we got it from (if not from you)
How to request: Email us. We will verify your identity before releasing data (usually by sending a confirmation link to the email address we have on file).
For most users, the data we hold is: your email address (if you subscribed to the newsletter) and/or analytics pageviews associated with a random session identifier. If you have never subscribed or we have no identifier linked to you, we likely hold no personal data.
2. Right to rectification (Article 16)
If any data we hold about you is incorrect, tell us and we will fix it. For example, if you subscribed with a typo in your email, we can update it.
3. Right to erasure / "right to be forgotten" (Article 17)
You can ask us to delete your personal data. We will delete:
- Your email address and subscription record (instant unsubscribe + deletion)
- Analytics events associated with your session identifier (if you provide it)
- Any other personal data we hold about you
Exceptions: We may retain data if required by law (e.g., tax records) or for the establishment, exercise, or defense of legal claims.
Easier way: You can unsubscribe from the newsletter instantly using the unsubscribe link in any email. To also request full deletion, email us.
4. Right to restriction of processing (Article 18)
You can ask us to limit how we use your data (e.g., keep it but stop sending emails) while a dispute is resolved.
5. Right to data portability (Article 20)
You can request a copy of your data in a structured, commonly used, machine-readable format (JSON or CSV). We will provide it within 30 days.
6. Right to object (Article 21)
You can object to processing based on legitimate interest. Since our only legitimate-interest processing is essential server logs (14-day rotation), objecting to those would not meaningfully affect you. For newsletter and analytics, we rely on consent, which you can withdraw at any time.
7. Right to withdraw consent (Article 7.3)
You can withdraw consent at any time, as easily as you gave it:
- Newsletter: Click "Unsubscribe" in any email, or visit /api/unsubscribe?token=YOUR_TOKEN
- Analytics: Clear your browser's localStorage for thedutchdirectory.com and refresh. The consent banner will reappear and you can choose "Essential only."
Withdrawing consent does not affect the lawfulness of processing before withdrawal.
8. Automated decision-making (Article 22)
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects. Our "Ask AI" feature provides informational responses only.
9. Right to lodge a complaint (Article 77)
If you believe we have violated your data protection rights, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
We encourage you to contact us first at [email protected] so we can resolve your concern directly.
10. Contact for data protection
Dutch Fluency (operator of The Dutch Directory)
Email: [email protected]
Since we are a small organization and do not process sensitive data at scale, we are not required to appoint a Data Protection Officer under Article 37. The above contact handles all data protection inquiries.