[ Legal / GDPR ]
Your GDPR Rights
Last updated: June 2026
The General Data Protection Regulation (GDPR) gives you specific rights over your personal data. GRAY | 360° is committed to honouring these rights fully and without delay.
Right of access
You have the right to obtain confirmation of whether we process personal data about you, and if so, to receive a copy of that data along with supplementary information about its use.
Right to rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data held about you.
Right to erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes collected, where consent is withdrawn, or where processing is unlawful.
Right to restriction
You have the right to request that we restrict processing of your personal data in certain circumstances — for example, while accuracy is contested.
Right to data portability
Where processing is based on consent or contract and is automated, you have the right to receive your data in a structured, commonly used, machine-readable format.
Right to object
You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
How to exercise your rights
Send a request to studio@gray360.design with the subject 'GDPR Request'. We will respond within 30 days. You may also contact Integritetsskyddsmyndigheten (IMY) at imy.se if you believe your rights are not being respected.