The GDPR states that you have certain rights with regard to your personal data, including:


  • Right of access (Article 15 GDPR). You have the right to view the personal data that we process about you.
  • Right to rectification (Article 16 GDPR). You have the right to correct or supplement the personal data that we process about you if they are incorrect or incomplete.
  • Right to erasure (Article 17 GDPR). You can request to delete your personal data.
  • Right to restriction of processing (Article 18 GDPR): in some cases, a request may be made to restrict the processing of your personal data (whether or not temporarily), which means that we process less data.
  • Right to data portability (Article 20 GDPR): if technically possible, you have the right to have the personal data that we process about you transferred to a third party.
  • Right to object to data processing (Article 21 GDPR): you can object to the processing of your personal data.
  • Right to withdraw your consent: you can easily withdraw your consent at any time.
  • Finally, you are entitled to clear information about what we do with your personal data (Article 12 GDPR).


Important! The controller is responsible for submitting and following up your request. In many cases, Zaurus is the processor and the healthcare organization is the controller. You can therefore exercise your rights through the healthcare organization to which you belong. They will notify us of your request, after which we will take action accordingly.


In principle, a request for information or exercising a right must be granted within one month. If this is not possible, you will be informed within this period. Information is provided free of charge.


To find out more about your rights or how Zaurus handles requests, please contact our data protection officer via dpo@zaurus.io