GDPR Data Subject Rights

As a data subject in the EEA, UK, or Switzerland, the GDPR grants you specific rights regarding your personal data. This page provides detailed information about each right and how to exercise them.

Right of Access (Art. 15)

You may request confirmation of whether we process your personal data and, if so, access to that data plus information about: purposes, categories, recipients, retention period, your other rights, source of data, automated decision-making, and international transfer safeguards.

How to Exercise

1. Email privacy@aimode.news with subject “GDPR Access Request”;
2. Include your full name and account email;
3. Verify identity (government ID with all info except name/photo redacted);
4. Specify format (default: JSON);
5. We provide the information within 30 days, free of charge.

Right to Rectification (Art. 16)

You may request correction of inaccurate personal data or completion of incomplete data.

How to Exercise

1. Email privacy@aimode.news with subject “GDPR Rectification Request”;
2. Specify the inaccurate data and the correction;
3. Provide supporting documentation if applicable;
4. We process within 30 days and notify you once corrected.

Note: We cannot rectify third-party news articles. Contact corrections@aimode.news for source content issues.

Right to Erasure / “Right to Be Forgotten” (Art. 17)

You may request deletion where: data is no longer necessary, you withdraw consent, you object and no overriding grounds exist, processing is unlawful, or legal obligation requires erasure.

Exceptions

• Freedom of expression and information;
• Legal obligation compliance;
• Public interest archiving/research/statistics;
• Legal claims establishment/defense;
• Tax/accounting compliance (billing records retained 7 years).

How to Exercise

1. Email privacy@aimode.news with subject “GDPR Erasure Request”;
2. Specify scope (full account deletion or specific categories);
3. Verify identity;
4. We confirm erasure within 30 days and notify third parties (Art. 17(2)).

Right to Data Portability (Art. 20)

You may receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

Data Included

• Account profile (name, email, subscription tier);
• Subscription and billing history (excluding full card numbers);
• MCP API usage metadata (query counts, timestamps);
• Newsletter subscription status;
• Cookie consent preferences.

How to Exercise

1. Email privacy@aimode.news with subject “GDPR Portability Request”;
2. Specify format: JSON (default), CSV, or XML;
3. Specify direct transmission to another controller or provision to you;
4. We provide data within 30 days.

Right to Object (Art. 21)

You may object to processing based on legitimate interest (Art. 6(1)(e) or (f)) on grounds relating to your particular situation. We will cease processing unless we demonstrate compelling legitimate grounds.

Right to Object to Direct Marketing

You may object to direct marketing at any time, free of charge, without providing a reason. We will cease immediately.

How to Exercise

1. Email privacy@aimode.news with subject “GDPR Objection”;
2. Specify the processing activity (analytics, MCP query logging, newsletter);
3. Describe grounds (required for Art. 21(1), not for direct marketing);
4. We respond within 30 days.

Automated Decision-Making and Profiling (Art. 22)

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We currently do not engage in such automated decision-making. Our automated systems (content aggregation, analytics, rate limiting) do not make individual-level decisions with legal effects.

Right to Restrict Processing (Art. 18)

You may obtain restriction where: you contest accuracy, processing is unlawful but you prefer restriction over erasure, we no longer need the data but you need it for legal claims, or you have objected pending verification of overriding grounds.

Verification Process

• Account holders: Verified by matching email to account. Sensitive requests may require additional verification.
• Non-account holders: May require government-issued ID (redacted except name/photo).
• Authorized representatives: Require written authorization and representative identity verification.

Complaints

Lodge a complaint with the Irish Data Protection Commission (DPC) or the supervisory authority in your EU Member State of habitual residence. Filing a complaint does not affect your right to seek judicial remedy (Art. 79).