Your rights as a data subject
The GDPR grants you concrete rights against anyone who processes your personal data. Here we show how you exercise these rights with DeepScript – what you can do yourself directly in the app and what runs through an email to us.
How to exercise rights quickly
- 1In the app itself: Settings → Data & Privacy. There you will find buttons for a full data export (Art. 15/20) and account deletion (Art. 17).
- 2By email: datenschutz@deepscript.com – we respond within 5 business days.
- 3If your employer uses DeepScript: Contact their data protection officer – we act on behalf of the controller and can only coordinate requests through them.
Your rights in detail
Right of access
You can request an overview of all personal data we process about you at any time. Directly in your account settings under „Data & Privacy → Export all my data“ there is a full JSON export – instantly, without enquiry. For business customers whose data we process on their behalf, the controller (= your employer) initiates the request; we deliver technically within five business days.
Right to rectification
You can correct inaccurate data yourself – profile, email, workspace name, billing address – all fields are editable in the settings. For data that only we can rectify (e.g. incorrect invoice line items), an email to datenschutz@deepscript.com is sufficient.
Right to erasure („right to be forgotten“)
You can delete your account and all data yourself at any time – Settings → Data & Privacy → „Delete account and all data“. Deletion takes effect immediately; in backups the data disappears within 14 days with the backup rotation. You will receive written confirmation of the deletion on request.
Right to restriction of processing
As long as you contest the accuracy of your data or have raised an objection, you can request the restriction of processing. We mark the affected records accordingly and only process them to resolve the dispute.
Right to data portability
The data export in your account settings provides your data in a structured, commonly used and machine-readable JSON format. You can pass this export directly on to another provider.
Right to object
You can object to the processing of your data at any time, insofar as it is based on a legitimate interest (Art. 6(1)(f) GDPR). Specifically with us: audit logs for security reasons. We review every objection within five business days.
No automated individual decision-making
DeepScript makes no automated decisions with legal effect on individuals. Transcriptions are aids for human processing – they can be reviewed, corrected or discarded at any time.
Response times
Self-service actions in the app (export, deletion) take effect immediately. We answer email requests within 5 business days – for particularly complex requests this period may be extended by a maximum of two months under Art. 12(3) GDPR, of which we will proactively inform you.
Identity verification: For email requests we may ask for additional information to ensure that we only release data to the entitled person. The in-app actions are already identity-secured through your login.
Right to lodge a complaint
Independently of us, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is that of your habitual residence, your place of work or the place of the alleged infringement. For us (Aliru GmbH, Mannheim) this is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
Questions?
Send us an email at datenschutz@deepscript.com – we reply within one business day.