Making a request
Email contact@tutortrack.ro with subject “GDPR request”, the right requested and the relevant account or workspace. The supplier has confirmed this mailbox is monitored. You can also contact the tutor or organization acting as controller directly. Operational handling must provide registration, proportionate verification, assessment and a timely response.
An active account is not required to exercise rights. Identity and, where applicable, parental authority may be verified proportionately to risk; never send passwords or access codes. Requests are normally free; only statutory exceptions for manifestly unfounded or excessive requests can justify additional measures.
Rights and deadlines
GDPR provides access and a copy, correction, erasure where applicable, restriction, portability under Article 20 conditions and objection, including to legitimate-interest processing. Withdrawing consent does not affect prior lawful processing. Rights have conditions and exceptions; a refusal must give reasons and explain complaint options.
The ordinary statutory deadline is one month from receipt. Where complexity or request volume permits an extension of up to two further months, reasons must be communicated within the first month. An automatic acknowledgement or receipt number is not completion.
App controls and limits
The workspace menu provides account deletion with the current password. Owners must first transfer ownership or close their workspaces. In-app export and account deletion are partial tools and do not replace a GDPR request assessment.
Account deletion removes access and some links but may retain historical references in other controllers’ workspaces. Workspace deletion triggers file cleanup. Backups may persist until expiry; restoration must reapply deletions before user access. A request receipt does not establish actual erasure.
Complaints and representation
You may complain to ANSPDCP through its official complaints page and seek a judicial remedy. Complaints do not require buying a subscription or keeping an account. Requests by representatives or concerning a child may require verification of authority.