GDPR and California matrix
| Right | EU / UK | California |
|---|---|---|
| Know / access | Access, processing details, and a copy | Access / know categories and specific pieces |
| Correct | Rectify inaccurate or incomplete data | Correct inaccurate personal information |
| Delete | Erase where no exception applies | Delete subject to statutory exceptions |
| Portability | Machine-readable data supplied under consent or contract | Portable copy where applicable |
| Restrict processing | Limit processing in specified cases | Available through applicable request rights |
| Object / opt out | Object to direct marketing or legitimate-interest processing | Opt out of sale or sharing; Global Privacy Control honored |
| Limit sensitive information | Special-category data receives additional protection | Limit use or disclosure of sensitive personal information |
| Automated decisions | Human review where solely automated decisions have significant effect | Access, opt-out, and appeal rights where applicable |
Response timing
GDPR requests are handled without undue delay and generally within one month. California requests to delete, correct, or know are confirmed within 10 business days and answered within 45 calendar days, with a permitted extension when notice is provided. Opt-out and limit requests are applied as soon as feasible and no later than the applicable legal deadline.
No discrimination
Proofway will not discriminate against you for exercising a privacy right. Some service features may require information that you ask us to delete, and we will explain any resulting impact before completing the request.
Official guidance
Read the European Commission’s data-protection guidance, the California Privacy Protection Agency FAQ, and the California Attorney General’s CCPA overview.