Data subject rights and your EU representative
EU residents have eight rights under the GDPR, and your representative is where they exercise them. Here are the rights, the response clock, and how requests flow to you.
The eight rights
The GDPR gives people a set of rights over their personal data. Your EU representative is the contact point where EU residents exercise them:
| Right | Article | What it means |
|---|---|---|
| Access | Art. 15 | A copy of their data and information about how it is processed. |
| Rectification | Art. 16 | Correction of inaccurate or incomplete data. |
| Erasure | Art. 17 | Deletion of their data in defined circumstances (“right to be forgotten”). |
| Restriction | Art. 18 | Limiting how their data is processed while a matter is resolved. |
| Portability | Art. 20 | Receiving their data in a portable format, or having it transferred. |
| Objection | Art. 21 | Objecting to processing, including direct marketing. |
| Transparency | Art. 13–14 | Being told who processes their data, why, and on what basis. |
| Automated decisions | Art. 22 | Not being subject to solely automated decisions with legal effects. |
The response clock
You have one month from receiving a request to respond. For complex or numerous requests you can extend by a further two months, as long as you tell the person about the extension — and why — within the first month.
Missing the deadline is itself a compliance failure, which is why a representative that tracks the clock and chases the response matters as much as one that simply receives the request.
How a request flows through Usantis
- The person submits a request via your hosted form or by email
- We verify their identity proportionately
- We translate non-English requests and forward them to you with the deadline tracked
- You respond in your dashboard; we translate the reply back
- The exchange is preserved in an append-only audit log
Standard includes fair-use DSAR handling (10 per year); Premium is unlimited — see cost & pricing.
Frequently asked questions
Related guides
When a representative is required
The Article 27 triggers — offering goods/services to, or monitoring, people in the EU.
Penalties for non-compliance
How Article 83 fines apply and why a missing representative is an easy finding for a DPA.
Representative vs. DPO
Two different roles that are often confused. When you need one, the other, or both.
Last updated 2026-05-23.
Get your EU representative in about ten minutes
€99/month, fully self-service, with DSAR handling and a hosted compliance page included.