Cumplimiento
Derechos de los interesados
Documento de cumplimiento
Derechos de los interesados
Este documento se publica en inglés.
(original en inglés)
Last reviewed: 2026-10-20 · Version: 1.1
GDPR Articles 15 to 22 give people rights over their personal data. The customer, as controller, answers these requests within one month (art. 12(3)), extendable by two further months for complex requests. Because the data sits in the customer's own database, the customer can always act on it; as processor we help.
The rights, and how the product supports each
| Right | GDPR | How it works in Fundarem |
|---|---|---|
| Access | Art. 15 | Every object is stored in a documented structure in the customer's database, so a person's data can be found and listed across all connected systems in one place |
| Rectification | Art. 16 | Correct the data in the source system; the next sync updates the ontology. A correction made through Fundarem is a proposal that a person approves |
| Erasure | Art. 17 | Delete the person in the source systems and in the customer's database. Once deleted, the pseudonyms that stood for them can no longer be turned back into their values. The append-only object history is removed by the customer's administrator |
| Restriction | Art. 18 | The customer can stop agents for a tenant with the kill switch, and restrict which roles see an object type |
| Portability | Art. 20 | Objects can be exported from the customer's database in a common, machine-readable format |
| Objection | Art. 21 | Where processing relies on legitimate interests (art. 6(1)(f)), the person can object; the customer then stops unless it has compelling grounds |
| Automated decisions | Art. 22 | Agents only propose; a person decides, and sensitive actions need a second person |
The customer answers export and deletion requests together with us: tell us what the request covers, and we carry it out with your administrator.
How to exercise a right
- If you are a customer's employee, customer or supplier: contact that business. It is the controller of your data.
- If you want to contact us (as processor, or about this website): the address given in the agreement we sign with you. We pass requests about a customer's data to that customer without delay.
Complaints
You can complain to the data protection authority in the country where you live or work in the EU/EEA — in Norway, for example, that is Datatilsynet (datatilsynet.no). Each country's authority and its URL are listed on that country's page in our country notes, sent on request.