MailOdds

Legal

Data Subject Rights

Under the General Data Protection Regulation (GDPR/AVG), you have specific rights regarding your personal data. This page explains how to exercise those rights with MailOdds.

Your Rights

RightWhat It MeansHow to Exercise
Access
Art. 15
Obtain a copy of all personal data we hold about youDashboard: Settings > Privacy > Export Data, or email us
Rectification
Art. 16
Correct inaccurate or incomplete personal dataDashboard: Account Settings, or email us
Erasure
Art. 17
Request deletion of your personal dataDashboard: Settings > Delete Account, or email us
Restriction
Art. 18
Request that we limit how we process your dataEmail us with details of the restriction requested
Portability
Art. 20
Receive your data in a machine-readable format (JSON)Dashboard: Settings > Privacy > Export Data, or email us
Objection
Art. 21
Object to processing based on legitimate interest or for direct marketingEmail us. For direct marketing, objection is absolute and takes immediate effect.

How to Submit a Request

You can exercise your rights in three ways:

Verification

To protect your data, we verify your identity before processing requests. For logged-in users, your authenticated session is sufficient. For email requests, we will send a verification link to the email address on your account. We do not require excessive identification beyond what is necessary to confirm your identity (per Art. 12(6)).

Response Timeline

We respond to all requests within one calendar month of receipt. If a request is particularly complex or we receive a high volume of requests, we may extend this by up to two additional months. If we need to extend, we will notify you within the first month with the reasons for the delay.

When We Process Data on Behalf of Others

MailOdds processes some data as a processor on behalf of our customers (controllers). This includes email addresses submitted for validation, contact lists, and campaign tracking data. If you want to exercise your rights regarding data that one of our customers uploaded, please contact that customer directly. They are the controller of that data and will direct us to fulfill your request.

If you contact us directly about such data, we will forward your request to the relevant customer within three business days and assist them in responding.

Exceptions

Certain data may be retained even after an erasure request:

  • Billing records: Retained for 7 years as required by Dutch fiscal law (Algemene wet inzake rijksbelastingen Art. 52)
  • Legal claims: Data needed for the establishment, exercise, or defense of legal claims (Art. 17(3)(e))
  • Consent evidence: Records proving that consent was validly given, retained for accountability purposes (Art. 5(2))

Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl.

For complaints about commercial electronic messages (spam), the competent authority is the Autoriteit Consument & Markt (ACM).

Contact