Soryx
GDPR & Article 17

The right to be forgotten, exercised for you

The GDPR gives every person in the EU real, enforceable rights over their personal data. Soryx turns the strongest of them - Article 17 erasure - into action, filing genuine requests on your behalf and following them through.

Your rights

What the GDPR gives you

These rights apply to the data Soryx holds about you and - through the requests we send - to the data held by every broker we contact.

Art. 15

Access

Ask any organisation for a copy of the personal data it holds on you and a clear account of how it's used.

Art. 16

Rectification

Have inaccurate data corrected and incomplete data completed without undue delay.

Art. 17

Erasure

The right to be forgotten: demand deletion of your data when there's no lawful reason to keep it. This is the right Soryx exercises for you.

Art. 18 & 21

Restriction & objection

Pause processing, or object outright to uses like direct marketing and profiling.

Art. 20

Portability

Receive your data in a structured, machine-readable format and move it elsewhere.

Art. 22

No automated decisions

Not be subject to decisions made solely by automated processing where they significantly affect you.

Article 17 in practice

How a real erasure request works

Every removal Soryx makes is a genuine legal request - not a checkbox or a polite ask. Here's the lifecycle of one.

01

Map the exposure

We scan EU data brokers, people-search sites and known breaches to find exactly which organisations are holding and trading your personal data.

02

Draft the erasure request

For each holder, Soryx prepares a formal Article 17 request citing the relevant grounds, with only the minimum identifiers needed to prove the data is yours.

03

Send and track

We submit each request through the broker's lawful channel, log it to your audit trail, and watch the statutory one-month response clock under Article 12(3).

04

Follow up & re-check

We chase non-responders, escalate where needed, and keep monitoring - because brokers relist. A removal only counts when it stays removed.

The legal footing

Lawful basis & minimisation

We're explicit about why we're allowed to process your data - and ruthless about how little of it we keep.

Our lawful basis

We process your personal data on the basis of your explicit consent and the contract you enter into when you sign up - the agreement that we will find and remove your exposure. When we contact a broker, we act as your authorised agent asserting your statutory right, sharing only the identifiers strictly required to prove the data is yours.

Minimisation as a feature

Most products hoard data. We do the opposite. Soryx collects only what's needed to act on your behalf, encrypts it at the field level, and lets you delete everything at any time. Holding less is a security control, not a limitation - and it's central to how the product is built.

Soryx is EU-established

We are built and operated in the European Union, under EU law and accountable to EU supervisory authorities. That isn't a marketing line - it's why we can act as your agent with standing, and why your data never has to leave the bloc to be protected.