Make a request
Email urbexology.com@gmail.com. You can use the subject “Personal data access request”, but no particular subject, form or explanation is required.
Tell us which email address or other identifier you used with Urbexology so that we can locate your records. You may request all your personal data or specify a part of it. If you cannot use the email address associated with your account, contact us anyway. You can also make a request through your usual Urbexology support contact or an authorised representative.
The email link opens your email application. Your request is sent only when you send the email. If the link does not work, copy the address into your email service.
We may ask for additional information if we have reasonable doubts about your identity or a representative’s authority. We will ask only for what is necessary. Do not send your password, sign-in link, payment card details or identity documents with your initial request.
What you will receive
We will confirm whether we process your personal data. If we do, we will provide a copy of the actual data and an explanation that covers:
- The purposes for which we use your data and the categories of data involved.
- The recipients to whom your data have been or will be disclosed, identifying them where possible.
- How long we retain the data, or the criteria used to determine that period.
- Any available information about the source of data that you did not provide yourself.
- Whether automated decision-making, including profiling covered by Article 22 GDPR, applies to you and, if it does, meaningful information about its logic, significance and likely consequences.
- Relevant transfers outside the European Economic Area and the applicable safeguards, including information about safeguards under Article 46 where it applies.
- Your rights to request correction, deletion or restriction, to object to processing, and to complain to a supervisory authority.
Depending on how you use Urbexology, your data may include account and profile information, linked Discord details, contributions and photos, comments, personal markers and notes, colour preferences, wish lists, friendships, notifications, activity and achievement records, membership and transaction records, support correspondence, and identifiable technical or moderation records. We will explain the fields in the copy.
For an electronic request, we will normally provide the response electronically in commonly used formats, with suitable protection for the data. Tell us if you need another accessible format. Where necessary to protect other people’s rights, we may redact parts of a record. We will explain any restriction and provide the remaining information.
Timing and cost
We will respond without undue delay and within one month of receiving your request. If its complexity or the number of requests makes an extension necessary, we may take up to two additional months. We will explain the reason and revised deadline within the first month.
Your first copy is free. A reasonable administrative fee may apply to further copies. If we believe a request is manifestly unfounded or excessive, we must justify any fee or refusal. If we do not act on a request, we will explain why within one month and tell you how to challenge the decision.
Your other rights and complaints
You can use the same email address to request correction or deletion of personal data, restriction of processing, or to object to processing, where these rights apply. Read about account deletion. An access request does not itself delete your account.
You may complain to CNIL, the French data protection authority, or to the supervisory authority in the EU country where you usually live, work, or where you believe an infringement occurred. You also have the right to seek a judicial remedy.