TodoWeekend.

Data subject requests.

If you're in the EU, EEA or UK you have the right to access, correct, delete or port the personal data we hold about you — and to withdraw consent or object to processing. Here's how to exercise those rights.

What you can ask for

  • Access — a copy of the personal data we hold linked to you (newsletter record, any support emails).
  • Rectification — correction of an email address, name or any other inaccurate field.
  • Erasure — deletion of your newsletter record and any linked support correspondence.
  • Portability — your data exported in a machine-readable format (JSON).
  • Withdraw consent — one-click unsubscribe is at the foot of every newsletter email; or ask us to remove you.
  • Object to processing — ask us to stop using your data for a specific purpose.
  • Complain — you can lodge a complaint directly with the Spanish data protection authority (AEPD) or your national authority.

How to submit a request

Email hello@todoweekend.com with the subject line Data subject request. Tell us:

  • Which right you're exercising (access, erasure, etc.).
  • The email address you signed up with (or any other identifier you believe we hold for you).
  • Any context that helps us find the right record.

Identity verification

To protect your data from impersonation, we may ask you to confirm the request from the email address associated with the record. For more sensitive requests (e.g. a full data export) we may ask one follow-up question that only the account holder would know. We will not ask for government ID unless there is a specific doubt about identity.

Response time

We aim to respond within 7 calendar days. In any case we will respond within the one-month statutory ceiling under Article 12(3) of the GDPR. For particularly complex requests we may extend by a further two months and will tell you why within the first month.

No fee

Data subject requests are free. We reserve the right to charge a reasonable administrative fee or refuse a request that is manifestly unfounded or excessive (for example, repeated identical requests), as permitted by GDPR Article 12(5).

Lodging a complaint

If you're unhappy with our response you can complain to the Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) at aepd.es, or to your national data protection authority.

Related

Full Privacy Policy and Cookie Policy.