GDPR — Your Rights
Last updated: May 2026
The General Data Protection Regulation (EU 2016/679) grants EU residents specific rights over their personal data. This page presents these rights clearly and practically, with direct instructions on how to exercise them.
Data Controller
Isabella Becker — Founder of PRM™, based in Garmisch-Partenkirchen, Bavaria, Germany. Acts simultaneously as controller and data protection contact (DPO function) for all GDPR purposes.
Your 8 GDPR rights
1. Right of access (Art. 15)
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and where so, to request a copy of that data.
2. Right to rectification (Art. 16)
You have the right to have inaccurate personal data corrected and incomplete data completed.
3. Right to erasure ("right to be forgotten") (Art. 17)
You have the right to have personal data erased without undue delay in certain circumstances (e.g., when no longer necessary for the original purpose, or when consent is withdrawn).
4. Right to restriction of processing (Art. 18)
You have the right to obtain restriction of processing in specific situations — for example, when contesting the accuracy of the data or when objecting to its processing.
5. Right to data portability (Art. 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller without hindrance.
6. Right to object (Art. 21)
You have the right to object, on grounds relating to your particular situation, to processing based on legitimate interest. You also have the absolute right to object to processing for direct marketing purposes.
7. Right to withdraw consent (Art. 7)
Where processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
8. Right to lodge a complaint (Art. 77)
You have the right to lodge a complaint with a supervisory authority — see section below for details.
How to exercise your rights
Exercising your rights is free of charge and can be done at any time. The procedure is simple:
- Send an email to contato@alquimiadasvirtudes.com
- In the subject line, write: "GDPR — [right you wish to exercise]"
- In the body, identify yourself (full name and email used on the site) and describe your request
- Additional identity verification may be requested for your own protection
A response will be provided within 1 month, as required by GDPR Art. 12(3). This period may be extended by 2 further months in cases of complexity, with prior notice.
Data Protection Contact: Isabella Becker
Email: contato@alquimiadasvirtudes.com
Address: Garmisch-Partenkirchen, Bavaria, Germany
Lodging a complaint with the supervisory authority
If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority — particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.
For the controller's location (Bavaria, Germany), the competent authority is the:
- Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
- Promenade 18, 91522 Ansbach, Germany
- Website: www.lda.bayern.de
For other EU Member States, see the European Data Protection Board list: edpb.europa.eu
For Brazilian residents
If you are a Brazilian resident, your rights are also covered by the LGPD (Brazil). See our dedicated LGPD page (in Portuguese).
More information
For detailed information on how we process your data, see our Privacy Policy.