GDPR Data Subject Rights Policy
Effective Date: December 5, 2025
Company Name: Arca Consulting LLC
Company Address: 30 N Gould St, Sheridan, WY 82801, United States
Website: https://www.arcaconsulting.agency/
Email: info@arcaconsulting.agency
1. Purpose and Scope
This GDPR Data Subject Rights Policy explains the rights of individuals located in the European Union, European Economic Area, and other jurisdictions where similar data protection laws apply, and outlines how Arca Consulting LLC handles requests related to Personal Data.
This Policy applies to all Personal Data processed by the Company in its role as Data Controller.
2. Definitions
For the purposes of this Policy:
-
Data Subject refers to an identified or identifiable natural person whose Personal Data is processed.
-
Personal Data refers to any information relating to an identified or identifiable individual.
-
Processing refers to any operation performed on Personal Data.
-
Controller refers to Arca Consulting LLC.
3. Right of Access
Data Subjects have the right to request confirmation as to whether their Personal Data is being processed and to obtain access to such data, including information about processing purposes, categories of data, recipients, and retention periods.
4. Right to Rectification
Data Subjects have the right to request correction of inaccurate or incomplete Personal Data without undue delay.
5. Right to Erasure
Data Subjects may request the deletion of Personal Data where:
-
The data is no longer necessary for the purposes collected
-
Consent is withdrawn and no other legal basis applies
-
Processing is unlawful
-
Erasure is required to comply with legal obligations
This right is subject to legal and regulatory exceptions.
6. Right to Restriction of Processing
Data Subjects may request restriction of processing where:
-
Accuracy of data is contested
-
Processing is unlawful and erasure is opposed
-
Data is no longer needed but required for legal claims
Restricted data will be processed only for permitted purposes.
7. Right to Data Portability
Where applicable, Data Subjects have the right to receive their Personal Data in a structured, commonly used, machine-readable format and to transmit it to another controller.
8. Right to Object
Data Subjects have the right to object to processing based on legitimate interests or for direct marketing purposes. Processing will cease unless compelling legitimate grounds exist.
9. Right to Withdraw Consent
Where processing is based on consent, Data Subjects may withdraw consent at any time without affecting the lawfulness of prior processing.
10. Automated Decision-Making and Profiling
The Company does not engage in automated decision-making or profiling that produces legal or similarly significant effects on Data Subjects.
11. Exercising Data Subject Rights
Requests may be submitted by contacting:
Email: info@arcaconsulting.agency
The Company may request verification of identity before processing requests.
12. Response Timeframes
Requests will be addressed without undue delay and within one month, subject to extensions permitted under GDPR for complex requests.
13. Limitations and Exceptions
Certain rights may be limited where processing is necessary for compliance with legal obligations, establishment or defense of legal claims, or other lawful exceptions.
14. Complaints
Data Subjects have the right to lodge a complaint with a competent supervisory authority in their jurisdiction if they believe their rights have been violated.
15. International Data Transfers
Where Personal Data is transferred outside the EU, appropriate safeguards are implemented in accordance with GDPR requirements.
16. Updates to This Policy
This Policy may be updated periodically. Updated versions will be published on the Website with a revised Effective Date.
17. Contact Information
For questions regarding this Policy or Data Subject rights, contact:
Arca Consulting LLC
30 N Gould St, Sheridan, WY 82801, United States
Email: info@arcaconsulting.agency
Website: https://www.arcaconsulting.agency/