This page is the central entry point for access, rectification, erasure, restriction, portability, objection and withdrawal of consent under the GDPR.
First identify who controls the data
Data in a Maildroppa account or in Maildroppa’s own website, billing or support systems
Maildroppa is generally the controller. Submit your request through our contact form.
A newsletter or campaign sent by a Maildroppa customer
The sender or organisation named in the message is generally the controller and decides why the data is used. Contact that organisation directly where possible. Maildroppa acts mainly as its processor and will forward an identifiable request and assist the customer.
The unsubscribe link in the message is normally the fastest way to stop marketing emails. You may still submit any other legal request.
What to include
- your name and email address;
- the right you wish to exercise;
- the relevant Maildroppa account, sender, message, campaign or URL;
- enough context to locate the data without collecting unnecessary additional information;
- the preferred structured format for a portability request, if relevant.
Do not send a copy of an identity document unless we specifically request it. If identity or authority is uncertain, we will ask only for information reasonably necessary to prevent disclosure, alteration or deletion of another person’s data. Additional identity evidence is used only for verification and erased when no longer needed for that purpose.
Available rights
Subject to the legal requirements and exceptions, you may request:
- access to your personal data and the information required by Article 15 GDPR;
- correction of inaccurate and completion of incomplete data;
- erasure;
- restriction of processing;
- receipt of data you provided in a structured, commonly used and machine-readable format and, where technically feasible, transmission to another controller;
- objection to processing based on legitimate interests;
- objection to direct marketing at any time and without giving reasons;
- withdrawal of consent with future effect;
- human review where a decision with legal or similarly significant effects was made solely by automated means.
A product export may help, but is not necessarily a complete Article 15 response. A complete response also considers purposes, recipients, retention, sources, applicable safeguards and lawful exceptions.
Timing and response
We acknowledge receipt and generally respond within one month. For complex or numerous requests, the period may be extended by up to two further months where the GDPR permits; we will inform you within the first month and explain why.
Requests are generally free of charge. We may charge a reasonable fee or refuse to act only where a request is manifestly unfounded or excessive and the legal requirements are met.
If we cannot fulfil a request in whole or in part, we will explain the reason and available complaint or legal-remedy options. Data that must be retained by law may be restricted instead of erased.
Complaint
You may complain to a supervisory authority. Maildroppa’s competent local authority is generally:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de
You may also contact the authority at your habitual residence, place of work or the place of the alleged infringement.