Your rights under GDPR

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) gives you the following rights in relation to personal data we hold about you:

  • Right of access - you can ask us to confirm whether we hold personal data about you and to provide a copy of it.
  • Right to correction - you can ask us to correct inaccurate personal data or complete incomplete data.
  • Right to erasure - you can ask us to delete your personal data where there is no compelling reason to continue processing it.
  • Right to portability - you can ask for personal data you provided to us in a structured, commonly used, machine-readable format.
  • Right to restrict processing - you can ask us to pause processing your data in certain circumstances.
  • Right to object - you can object to processing based on legitimate interests or for direct marketing purposes.

These rights are not absolute and may be subject to limitations in certain circumstances. We will respond to any request within 30 days of receipt.

Your rights under India DPDP Act

If you are located in India, the Digital Personal Data Protection Act 2023 (DPDP Act) grants you rights as a data principal. These include:

  • Right to access - you may obtain a summary of the personal data we process about you and the processing activities we carry out.
  • Right to correction and erasure - you may request correction of inaccurate, incomplete, or outdated personal data. You may also request erasure of personal data that is no longer necessary for the purpose for which it was collected.
  • Right to grievance redressal - you may raise a grievance with us regarding the processing of your personal data. We will acknowledge your grievance and resolve it within 30 days.
  • Right to nominate - you may nominate another individual to exercise rights on your behalf in the event of your death or incapacity.

The DPDP Act also provides the right to approach the Data Protection Board of India if your grievance is not resolved to your satisfaction.

How to submit a request

To exercise any of the rights described on this page, send your request by email. Please include:

  • Your name and contact email address
  • A clear description of the right you wish to exercise
  • Any information that helps us identify the data you are referring to

We may ask you to verify your identity before we can act on your request. This is to protect your personal data from being disclosed or deleted as a result of an unauthorised request.

Data requests
privacy@vinove.com (placeholder)
Subject line: Data Subject Request

Response timeline

We will acknowledge your request within 5 business days and will respond in full within 30 days of receipt. If your request is complex or we receive a high volume of requests, we may extend this period by a further 30 days. We will notify you if this is the case.

We will not charge a fee for handling data requests unless they are manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable fee or decline to act.

Supervisory authority contacts

If you are not satisfied with how we have handled your request, you have the right to lodge a complaint with the relevant supervisory authority.

  • India - Data Protection Board of India. Details will be published following the Board's establishment under the DPDP Act 2023.
  • European Union - your national data protection authority. A full list is available at edpb.europa.eu.
  • United Kingdom - Information Commissioner's Office (ICO). ico.org.uk.

We encourage you to contact us directly in the first instance so we have the opportunity to address your concern.