Your rights under GDPR
As the person being screened, you have specific legal rights over your data: access, correction, deletion, and the right to object. Here is how to use them.
In short: You have full GDPR rights over the data we hold about you, including the right to access it, correct it, have it anonymised, restrict its processing, and object. Most requests are free and we respond within one month.
The rights you have
The GDPR gives you the following rights, all of which apply to your Pescheck data:
| Right | What it means |
|---|---|
| Access | Get a copy of the data we hold about you |
| Rectification | Have inaccurate data corrected |
| Erasure (“right to be forgotten”) | Have your data anonymised so it can no longer be traced back to you |
| Restriction | Pause processing while a dispute is being resolved |
| Portability | Receive your data in a machine-readable format |
| Object | Stop us from processing your data for a specific purpose |
| Withdraw consent | Take back the consent you gave for a check |
How to exercise them
The fastest channel for any GDPR request is email to our Privacy Officer:
- Email: [email protected]
- Or via our support form (select “Data access request” or the relevant right)
- Provide the email address you used during the screening; we will verify your identity before processing, to protect you from someone else requesting your data
We respond within one month as required by GDPR. For most requests there is no cost. We will only refuse a request if it is clearly unfounded or excessive, and we will explain why.
What we anonymise and what we retain
You have a broad right to erasure, and under our policy that means anonymising your personal data rather than fully deleting records (which lets us keep the audit trail required by Dutch screening regulations while making the data no longer traceable to you):
- We anonymise: screening data once the legitimate purpose is met, supporting documents you uploaded (passport, ID), draft information that was never finalised
- We may retain (when legally required): audit logs for compliance, completed reports the organisation has not yet been allowed to anonymise under their own retention obligations, financial records (invoices)
When we cannot anonymise something immediately, we will tell you why and how long the legal retention period is. After that, anonymisation happens automatically.
Right to object
You can object to the processing of your personal data at any time. To do this, contact our support team explaining that you wish to object. We will then:
- Stop processing your data for the purpose objected to
- Either anonymise it or restrict it depending on what is legally permitted
- Confirm what we have done within one month
Withdrawing consent has the same effect for active screenings, the screening pauses or stops, and uncollected data is not collected.
If you are not satisfied
If we do not handle your request to your satisfaction, you can complain to the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl. They will investigate independently.
We take this seriously, if you tell us your request has not been handled well, we will escalate it internally before you go to the regulator. Submit a complaint directly to us first.
Related articles
What data does Pescheck collect about me?
Only the data that's necessary for the specific checks you've consented to. Here is what we collect, why, and how long we keep it.
How do I submit a complaint?
If something has gone wrong with your screening or how we handled your data, here is how to raise it with us and what to expect.
Giving consent as a candidate
You've been asked to complete a Pescheck screening. Here is exactly what consent means, what we will ask you for, and your rights at every step.
