Your rights and personal data — GDPR
In accordance with the GDPR, you have the following rights over your personal data:
- Access: obtain a copy of the data we process about you.
- Rectification: correct inaccurate data (you can also edit your data directly in the app).
- Erasure: delete your account and your data — see “Account deletion”.
- Restriction of processing in the cases provided for by the regulation.
- Objection, where applicable (in particular to processing based on legitimate interest).
- Withdrawal of consent at any time (health, marketing, sharing with a therapist), without retroactive effect.
- Portability: receive your data in a structured format.
- Complaint to the competent supervisory authority — in France, the CNIL (www.cnil.fr).
How to exercise your rights
Send your request to contact@powalia.com (or to the EU representative: representative+palta.negra@data-privacy-office.eu). To protect your account, we may ask you for reasonable information in order to verify your identity; no identity document is requested systematically where a less intrusive method is sufficient. We handle your request as soon as possible and no later than one month from its receipt, unless an extension is authorised by the applicable regulation.
Access and portability
You can download your data directly from the app: Profile → Privacy and my data → Export my data. A file containing your account data (profile, consents, tracking and well-being data, favourites, progress) is then provided to you. If you no longer have access to your account, send your request for a copy or portability by email to contact@powalia.com.
Withdrawal of consent
Consent to the processing of health data (Article 9) may be revoked at any time, without retroactive effect; its revocation stops the synchronisation of the health data concerned.