GDPR — Your Rights
Last updated: May 1, 2026
Overview
If you are located in the European Economic Area (EEA), European Union (EU), or United Kingdom (UK), the General Data Protection Regulation (GDPR) provides you with specific rights regarding your personal data. This page explains those rights and how to exercise them with respect to iliassami.com.
Data Controller: Ilias Ahmed (Ilias Sami), Dhaka, Bangladesh — me@iliassami.com
Your GDPR Rights
Right of Access (Art. 15)
Request a copy of all personal data we hold about you, the purposes for processing, retention periods, and who it is shared with.
Right to Rectification (Art. 16)
Request correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17)
Request deletion of your personal data where there is no compelling reason for continued processing ('right to be forgotten').
Right to Restriction (Art. 18)
Request that we limit how we process your data in certain circumstances.
Right to Data Portability (Art. 20)
Receive your personal data in a structured, commonly used, machine-readable format and transfer it to another controller.
Right to Object (Art. 21)
Object to processing of your data for direct marketing or based on legitimate interests.
Right to Withdraw Consent (Art. 7)
Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
Rights Related to Automated Decisions (Art. 22)
Not be subject to solely automated decisions that have significant effects on you.
How to Submit a Data Request
To exercise any of these rights, contact us at:
Email: me@iliassami.com
Subject: GDPR Data Request — [Your Right]
We will acknowledge your request within 72 hours and respond within 30 days. For complex requests, this may be extended by up to 2 additional months with notice.
Legal Bases for Processing
- Consent (Art. 6(1)(a)): Analytics and marketing cookies — you may withdraw at any time
- Contract Performance (Art. 6(1)(b)): Processing required to deliver agreed SEO services
- Legitimate Interests (Art. 6(1)(f)): Website analytics, security, and service improvement
- Legal Obligation (Art. 6(1)(c)): Where required by applicable law
International Transfers
As our operations are based in Bangladesh (outside the EEA), data transfers occur under appropriate safeguards. We use Standard Contractual Clauses (SCCs) where applicable and only work with service providers who offer adequate data protection (Google Analytics, Calendly).
Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. In the EU, contact your national Data Protection Authority (DPA). In the UK, contact the ICO (Information Commissioner's Office).