Last Updated: November 2025

Introduction

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law that protects the rights of individuals in the European Economic Area (EEA) and the United Kingdom.

At Gemlen.com, we respect your privacy rights and are committed to transparency about how we collect and process your personal data.

This page explains your rights under GDPR and how to exercise them.

Who Does GDPR Apply To?

GDPR applies to individuals located in:

  • European Union (EU) member states
  • European Economic Area (EEA) countries
  • United Kingdom (UK)

Even if you are outside these regions, we strive to apply similar privacy protections to all our users.

What Personal Data We Collect

As outlined in our Privacy Policy, we collect minimal personal data:

Data You Provide:

  • Name and email address (when contacting us)
  • Message content (via contact form)

Automatically Collected Data:

  • IP address
  • Browser and device information
  • Cookies and usage data (via Google Analytics and AdSense)

We do NOT collect:

  • Payment information
  • Government ID numbers
  • Health or biometric data
  • Precise geolocation data

Your GDPR Rights

1. Right to Access (Article 15)

What it means: You have the right to know what personal data we hold about you.

You can request:

  • Confirmation of whether we process your data
  • A copy of your personal data
  • Information about how we use your data

How to exercise: Email us at info@www.gemlen.com with subject line “GDPR Access Request”

2. Right to Rectification (Article 16)

What it means: You can correct inaccurate or incomplete personal data.

Examples:

  • Update your email address
  • Correct spelling of your name

How to exercise: Email us at info@www.gemlen.com with the correct information

3. Right to Erasure / “Right to be Forgotten” (Article 17)

What it means: You can request deletion of your personal data in certain circumstances.

When this applies:

  • Data is no longer necessary for its original purpose
  • You withdraw consent and there’s no other legal basis
  • Data was unlawfully processed
  • You object to processing and there are no overriding legitimate grounds

Exceptions: We may retain data if required by law or for legal claims.

How to exercise: Email us at info@www.gemlen.com with subject line “GDPR Deletion Request”

4. Right to Restriction of Processing (Article 18)

What it means: You can limit how we use your data while we verify its accuracy or our legitimate grounds for processing.

When this applies:

  • You contest the accuracy of the data
  • Processing is unlawful but you don’t want erasure
  • We no longer need the data, but you need it for legal claims
  • You’ve objected to processing pending verification

How to exercise: Email us at info@www.gemlen.com with subject line “GDPR Restriction Request”

5. Right to Data Portability (Article 20)

What it means: You can receive your personal data in a structured, commonly used format and transfer it to another service.

What you’ll receive: Data in JSON, CSV, or PDF format

Note: This right applies only to data you provided to us and that we process automatically.

How to exercise: Email us at info@www.gemlen.com with subject line “GDPR Data Portability Request”

6. Right to Object (Article 21)

What it means: You can object to processing of your personal data for specific purposes.

You can object to:

  • Direct marketing (including profiling)
  • Processing based on legitimate interests
  • Processing for research or statistical purposes

Special note on cookies: You can object to tracking cookies through our Cookie Settings page.

How to exercise: Email us at info@www.gemlen.com with subject line “GDPR Objection”

7. Right to Withdraw Consent (Article 7)

What it means: If we process your data based on consent, you can withdraw it at any time.

Examples:

  • Unsubscribe from newsletters
  • Disable analytics cookies
  • Opt-out of personalized advertising

Note: Withdrawing consent doesn’t affect the lawfulness of processing before withdrawal.

How to exercise:

8. Right to Lodge a Complaint (Article 77)

What it means: You can file a complaint with your local data protection authority if you believe we’ve violated GDPR.

How to file a complaint:

For EU residents: Find your local Data Protection Authority: https://edpb.europa.eu/about-edpb/board/members_en

For UK residents: Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Helpline: +44 (0) 303 123 1113

We prefer you contact us first so we can address your concerns directly.

How to Exercise Your Rights

Step 1: Contact Us

Send an email to info@www.gemlen.com with:

  • Subject line indicating your request (e.g., “GDPR Access Request”)
  • Your full name
  • Your email address
  • Description of your request
  • Any relevant details

Step 2: Identity Verification

To protect your privacy, we may ask you to verify your identity before processing your request.

Step 3: Response Time

We will respond to your request within 30 days (one month) of receipt. In complex cases, we may extend this by an additional two months and will inform you of the delay.

Step 4: Free of Charge

Exercising your GDPR rights is free of charge. However, we may charge a reasonable fee if requests are manifestly unfounded, excessive, or repetitive.

Third-Party Data Processing

We use third-party services that may process your data:

Google Analytics

Purpose: Website analytics
Data processed: Anonymous usage data, IP addresses
Privacy Policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout

Google AdSense

Purpose: Display advertisements
Data processed: Cookies, browsing behavior
Privacy Policy: https://policies.google.com/technologies/ads
Opt-out: https://www.google.com/settings/ads

To exercise your rights with these third parties, contact them directly through the links above.

Data Transfers Outside the EEA

Your data may be transferred to and processed in countries outside the EEA, including the United States (where Google’s servers are located).

We ensure appropriate safeguards are in place through:

  • EU-U.S. Data Privacy Framework
  • Standard Contractual Clauses
  • Google’s GDPR compliance measures

Data Retention

We retain personal data only as long as necessary:

  • Contact form data: Deleted after resolution of your inquiry or after 2 years
  • Analytics data: Retained by Google for up to 26 months
  • Cookie data: Varies by cookie type (see Cookie Settings)

Children’s Rights

We do not knowingly collect data from children under 16. If you’re a parent or guardian and believe your child has provided us with personal data, contact us immediately at info@www.gemlen.com.

Automated Decision-Making and Profiling

We do NOT engage in automated decision-making or profiling that produces legal or similarly significant effects.

Note: Google AdSense may use automated profiling for ad targeting, which you can opt-out of through Google Ads Settings.

Updates to GDPR Rights

We may update this page to reflect changes in GDPR requirements or our practices. Check the “Last Updated” date at the top of this page.

Contact Our Data Protection Team

For any GDPR-related questions or to exercise your rights:

Email: info@www.gemlen.com
Subject Line: GDPR Rights Inquiry
Website: https://www.gemlen.com

Related Pages:

Useful Resources

European Data Protection Board:
https://edpb.europa.eu

Your EU Data Protection Authority:
https://edpb.europa.eu/about-edpb/board/members_en

UK Information Commissioner’s Office:
https://ico.org.uk

GDPR Full Text:
https://gdpr-info.eu