GDPR Rights
Exercise your data protection rights. Full GDPR compliance with simple and transparent procedures.
Updated: January 2025
What is the GDPR?
The GDPR (General Data Protection Regulation) gives you control over your personal data. At Growfile, we implement these rights in a simple and accessible way with full transparency.
Your Fundamental Rights
- Know what data we hold about you
- Correct inaccurate information
- Request deletion of your data
- Obtain a copy of all your information
Our Commitment
- Total transparency about data
- Simple and fast processes
- Personalized support
- 100% verified compliance
Your Rights in Detail
Right of Access (Art. 15 GDPR)
You have the right to know what personal data we process about you.
What you can request:
- • A complete copy of all your personal data
- • Information about how we use each type of data
- • Who we share your data with (if applicable)
- • How long we retain your data
Right to Rectification (Art. 16 GDPR)
You can correct inaccurate data or complete incomplete information.
Correction process:
- • Identify the incorrect data
- • Provide the correct information
- • We verify and update your data
- • We confirm the correction made
Right to Erasure (Art. 17 GDPR)
Also known as the "right to be forgotten", you can request the deletion of your data.
When it applies:
- • When we no longer need the data
- • If you withdraw your consent
- • When data was processed unlawfully
- • If you need to exercise your right to object
Right to Data Portability (Art. 20 GDPR)
You can receive your data in a structured format and transfer it to another service.
Available formats:
- • JSON (preferred digital format)
- • CSV (for spreadsheets)
Right to Object (Art. 21 GDPR)
You can object to the processing of your data under certain circumstances.
Grounds for objection:
- • Duly justified legitimate interest
- • Processing for direct marketing purposes
- • Anthropological or historical research
Artificial Intelligence Processing
AI Usage Transparency
We use artificial intelligence to improve your experience, with full transparency:
- Providers: OpenAI and Google Gemini
- Purpose: Professional content generation and optimization
- Protection: Pseudonymized data before processing
Your Rights Regarding AI
- Know when we use AI for your data
- Request human intervention
- Obtain explanations about decisions
International Transfers
AI providers are located in the United States. We ensure all transfers comply with GDPR through:
- • EU-US Data Privacy Framework
- • Standard Contractual Clauses (SCCs)
- • End-to-end encryption
How to Exercise Your Rights
Simple Procedure
- 1.Send your request to support@growfile.app
- 2.Specify which right you want to exercise (access, rectification, erasure, etc.)
- 3.Attach identification document if necessary
- 4.You will receive a response within 24-48 hours (maximum 30 days)
Required Information
To process your request, we need:
- • Full name
- • Email associated with your account
- • Specific right to exercise
- • Details of your request
Response Time
Our time standards:
- • Simple requests: 24-48 hours
- • Complex requests: up to 30 days
- • All with proactive follow-up
Security of Your Data
Technical Measures
- AES-256 encryption at rest and in transit
- Role-based access control
- Regular security audits
- 24/7 access monitoring
Organizational Measures
- Ongoing privacy training
- Impact assessments (DPIA)
- Strict internal policies
- ISO 27001 certified compliance
Data Breaches
If a security breach were to occur, we will notify you:
- Within 72 hours of detection
- With clear information about those affected
- And measures taken to mitigate the risk
Data Controller Information
Controller Details
- Data Controller
- [Your Full Name or Business Name]
- Tax ID (NIF/NIE)
- [Your NIF/NIE]
- Address
- [Your Full Address in Murcia]
- support@growfile.app
Right to Lodge a Complaint
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with:
GDPR Contact and Support
Contact Information
Supervisory Authority
You can lodge a complaint with the competent data protection authority:
You can also contact the data protection authorities of your Autonomous Community if you are domiciled in territories with assumed competence (Catalonia, Basque Country).
We Are Here to Help
We take privacy very seriously. If you have any questions about your GDPR rights or need help exercising them, do not hesitate to contact us. We are here to support you and ensure you have total control over your personal data.