Last updated: 28 May 2025 · Regulation (EU) 2016/679 — General Data Protection Regulation
The General Data Protection Regulation (GDPR) gives EU/EEA residents strong rights over their personal data. This page explains those rights and how to exercise them at GenPicz.
Right of Access (Art. 15)
You can request a complete copy of all personal data we hold about you, including how it's used and who it's shared with. We will respond within 30 days.
Right to Rectification (Art. 16)
You can request correction of inaccurate or incomplete personal data. For account data, you can update most information directly in your account settings.
Right to Erasure — "Right to be Forgotten" (Art. 17)
You can request deletion of your personal data. We will delete it unless we are required to retain it for legal obligations (e.g., tax records must be kept for 10 years under Portuguese law).
Right to Restriction of Processing (Art. 18)
You can request that we restrict how we process your data while a dispute is being resolved, or if you believe the data is inaccurate or processed unlawfully.
Right to Data Portability (Art. 20)
You can request your personal data in a structured, machine-readable format (JSON or CSV) to transfer to another service provider. This applies to data processed by automated means based on consent or contract.
Right to Object (Art. 21)
You can object to processing based on legitimate interests or for direct marketing purposes. For direct marketing, we will always honour objection requests immediately.
Rights Related to Automated Decision-Making (Art. 22)
If we make automated decisions that significantly affect you, you have the right to request human review and to contest the decision. GenPicz does not currently make automated decisions that produce legal or similarly significant effects.
Right to Withdraw Consent (Art. 7)
Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing. Withdrawal is effective immediately.
As required by GDPR Article 30, we maintain an internal record of all data processing activities. Key processing activities include:
If you believe your data rights have been violated, you have the right to lodge a complaint with the Portuguese supervisory authority:
CNPD — Comissão Nacional de Proteção de Dados
Av. D. Carlos I, 134, 1º · 1200-651 Lisboa
Tel.: +351 213 928 400
www.cnpd.pt
geral@cnpd.pt
You may also contact the supervisory authority of your country of residence within the EU/EEA.
Some of our service providers are based outside the EEA (e.g., Stripe and Vercel in the United States). These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission under GDPR Article 46(2)(c), ensuring your data receives equivalent protection.
Sergio Henrique Assumpção
Rua Luciano Cordeiro, 4 · Freguesia de Santo Antônio
1150-215 Lisboa · Portugal
Email: contact@genpicz.com
Tel.: 273249320