Your rights at a glance
As a data subject in the EU/EEA, the GDPR grants you the following rights over your personal data. They apply both to the data Soryx holds about you and, through Soryx, to data held by the brokers we contact on your behalf.
| Right | Article | What it means |
|---|---|---|
| Access | Art. 15 | Get a copy of the personal data we hold about you and information about how we use it. |
| Rectification | Art. 16 | Correct inaccurate data and complete data that is incomplete. |
| Erasure (“right to be forgotten”) | Art. 17 | Have your data deleted when it is no longer needed or you withdraw consent. |
| Restriction | Art. 18 | Limit how we process your data while a dispute or check is resolved. |
| Portability | Art. 20 | Receive your data in a structured, machine-readable format and reuse it elsewhere. |
| Objection | Art. 21 | Object to processing based on legitimate interests, and to direct marketing at any time. |
| Automated decisions | Art. 22 | Not be subject to solely automated decisions with legal or similarly significant effects. |
Article 17 erasure - what Soryx does for you
Soryx is built around Article 17. When you enrol, we identify data brokers and people-search sites holding your information and submit formal erasure requests to each one as your authorised agent. We track every request, chase non-responders, and re-submit when records reappear - all from your dashboard.
How to exercise your rights with Soryx
For data Soryx holds about you directly, you can:
| Action | How |
|---|---|
| Access or export your data | Use “Export my data” in account settings, or email dpo@matrix.eu. |
| Correct your data | Edit it in your profile, or contact us if you cannot. |
| Delete your account and data | Use “Delete account” in settings; we erase your data within 30 days. |
| Withdraw consent | Toggle off optional emails/analytics in settings, or email us. |
| Object or restrict | Email dpo@matrix.eu describing your request. |
Our response timelines
We respond to rights requests within one month, as required by Article 12(3). If a request is complex we may extend this by up to two further months and will tell you why. We do not charge a fee unless a request is manifestly unfounded or excessive.
Verifying your identity
To protect your data, we may need to confirm your identity before acting on a request. We will ask only for what is necessary and will not use that information for any other purpose.
Complaints
If you believe we have not handled your data correctly, please contact our DPO at dpo@matrix.eu first. You also have the right to lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie) or your local supervisory authority.