EU Data Protection

GDPR Rights Notice

Your rights under the General Data Protection Regulation (GDPR). We are committed to protecting your personal data and respecting your privacy rights.

GDPR Compliant
30-Day Response
Data Security

1Overview

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union (EU) and European Economic Area (EEA). At Friendly Web Designs, we are committed to complying with GDPR and respecting your data protection rights.

This notice explains your rights under GDPR and how you can exercise them. We process your personal data lawfully, fairly, and transparently, and we take appropriate measures to protect your information.

2Scope of This Notice

This GDPR notice applies to you if:

  • You are located in the European Union (EU) or European Economic Area (EEA)
  • You are an EU/EEA citizen regardless of your current location
  • You interact with our website, services, or communications from within the EU/EEA
  • Your personal data is processed in connection with our services

3Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data ('Right to be Forgotten')

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing of your personal data for certain purposes

Right to Restriction

Request limitation of how we process your data

4Right to Access (Article 15)

You have the right to obtain confirmation as to whether we are processing your personal data, and if so, access to that data along with the following information:

The purposes of the processing
The categories of personal data concerned
Recipients of the personal data
Retention period or criteria
Your rights regarding the data
Source of the data (if not collected from you)
Existence of automated decision-making
Safeguards for international transfers

5Right to Rectification (Article 16)

You have the right to request correction of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed.

Note: We will notify any recipients of your data about the rectification unless this proves impossible or involves disproportionate effort.

6Right to Erasure (Article 17)

Also known as the "Right to be Forgotten," you can request deletion of your personal data when:

The data is no longer necessary for the original purpose
You withdraw consent (where consent was the legal basis)
You object to processing and there are no overriding legitimate grounds
The data has been unlawfully processed
Erasure is required by law

Exceptions: This right does not apply where processing is necessary for legal compliance, public interest, legal claims, or archiving purposes.

7Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. This right applies when:

Conditions

  • Processing is based on consent or contract
  • Processing is carried out by automated means

Formats We Provide

  • JSON (JavaScript Object Notation)
  • CSV (Comma-Separated Values)
  • XML (Extensible Markup Language)

8Right to Object (Article 21)

You have the right to object to processing of your personal data in certain circumstances:

Direct Marketing

You can object to processing for direct marketing purposes at any time. We will stop processing immediately upon receiving your objection.

Legitimate Interests

You can object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

9Right to Restriction of Processing (Article 18)

You can request that we restrict the processing of your personal data when:

You contest the accuracy of the data (restriction applies while we verify)
Processing is unlawful and you prefer restriction over erasure
We no longer need the data but you require it for legal claims
You have objected to processing (restriction applies pending verification)

10Automated Decision-Making (Article 22)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

Our Practice

Friendly Web Designs does not make any automated decisions that have legal or similarly significant effects on individuals. All significant decisions involving personal data are reviewed by our team members.

11Exercise Your Rights

To exercise any of your GDPR rights, please complete the form below. We will respond within 30 days.

12Data Protection Contact

Data Protection Officer

For any questions about this notice or your GDPR rights, please contact our Data Protection team.

Response Time: We will respond to all GDPR requests within 30 days of receipt. If we need additional time (up to 60 days for complex requests), we will inform you within the initial 30-day period.

13Right to Lodge a Complaint

If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority. You can do this in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

Finding Your Supervisory Authority

Each EU Member State has a Data Protection Authority (DPA). You can find a list of all EU DPAs on the European Data Protection Board website.

View EU Data Protection Authorities

Last Updated: January 1, 2026

This GDPR Rights Notice is reviewed and updated regularly to ensure compliance with applicable data protection laws.