GDPR & data rights

Your rights

• Access: obtain confirmation and a copy of personal data we process.
• Rectification: correct incomplete or inaccurate information.
• Erasure: request deletion where no overriding legal basis requires retention.
• Restriction: ask us to limit processing in qualifying circumstances.
• Portability: receive data you provided in a structured, commonly used, machine-readable format where applicable.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: withdraw health-data, analytics or marketing consent at any time without affecting earlier lawful processing.
• Human review: request information about significant automated processing. Diet Scan does not make legal or similarly significant decisions about you solely by automated means.
• Complaint: complain to the Czech Office for Personal Data Protection or the supervisory authority where you live or work.

How to exercise your rights

Use the export and deletion controls in your profile or email hello@dietscan.eu. Describe the request and the account email involved. We may request proportionate identity verification to protect your data.

We normally respond within one month. GDPR permits an extension for complex or numerous requests; if that happens, we will explain the reason and timing. Requests are generally free, although a reasonable fee or refusal may apply to manifestly unfounded or excessive requests where permitted by law.

Explicit consent for health data

Diet Scan uses health-related information only to provide the personalised functions you request. Where explicit consent is the applicable condition under Article 9 GDPR, consent must be specific, informed, freely given and withdrawable. You can withdraw it in Profile → Privacy & data; affected active-service data is then deleted as described in the Privacy Policy unless another legal obligation requires limited retention.

Supervisory authority