Datenschutz

Your Data Rights Under GDPR & Indian Law

Last Updated: October 26, 2025

Allstar Cynosure Consulting Private Limited ("ACCPL") is committed to protecting your personal data and respecting your privacy rights. This page explains your data protection rights under the General Data Protection Regulation (GDPR) and applicable Indian laws.

We believe in transparency and empowering you with control over your personal information. This document outlines how you can exercise your rights.

Your Data Protection Rights

Under GDPR and the Indian Digital Personal Data Protection Act, 2023, you have the following rights:

1. Right to Access

You have the right to request a copy of the personal data we hold about you. This includes:

  • What personal data we collect
  • Why we collect it
  • How we use it
  • Who we share it with
  • How long we keep it

2. Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you. We will update your information promptly upon verification.

3. Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent and there's no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data was unlawfully processed
  • Legal obligation requires deletion

Note: This right may be limited if we have a legal obligation to retain the data or if it's necessary for legal claims.

4. Right to Restrict Processing

You can request that we limit how we use your personal data in certain situations:

  • When you contest the accuracy of the data
  • When processing is unlawful but you don't want erasure
  • When we no longer need the data but you need it for legal claims
  • When you've objected to processing pending verification

5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can request that we transfer this data directly to another organization where technically feasible.

This applies to data you provided to us with consent or for contract performance, and when processing is automated.

6. Right to Object

You have the right to object to processing of your personal data:

  • For direct marketing purposes (absolute right)
  • For legitimate interests, scientific/historical research, or statistical purposes
  • For automated decision-making and profiling

7. Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

You can withdraw consent by contacting us or using the unsubscribe link in our communications.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe your data protection rights have been violated.

For EEA residents: Contact your local data protection authority
For Indian residents: Data Protection Board of India (once established)

How to Exercise Your Rights

Contact Methods

To exercise any of your data protection rights, you can contact us through:

Email

General Inquiries:

info@accplaccounting.com

Data Protection Officer:

dpo@accplaccounting.com

Postal Address

Allstar Cynosure Consulting Pvt Ltd
Data Protection Officer
301, H-4, 3rd Floor, Vardhman Plaza
Netaji Subhash Place, Pitampura
New Delhi, 110034, India

📝 What to Include in Your Request

To help us process your request efficiently, please include:

  • Your full name and contact information
  • A clear description of your request
  • Which right(s) you wish to exercise
  • Proof of identity (to prevent unauthorized access)
  • Any relevant account numbers or reference details

⏱️ Response Timeline

We are committed to responding to your request promptly:

  • Standard Response: Within 30 days of receiving your request
  • Complex Requests: Up to 60 days (we'll inform you of any delay)
  • Acknowledgment: We'll acknowledge receipt within 72 hours

Identity Verification

To protect your privacy and prevent unauthorized access, we may need to verify your identity before processing certain requests. This may involve:

  • Requesting a copy of government-issued ID
  • Confirming information we have on file
  • Sending verification codes to registered email/phone
  • Asking security questions

We will only use this information for verification purposes and will not retain it longer than necessary.

Fees & Charges

We will not charge a fee to process your data rights request unless:

  • The request is manifestly unfounded or excessive
  • You request multiple copies of the same information

If a fee applies, we will inform you in advance and explain why. The fee will be reasonable and based on administrative costs.

Limitations on Your Rights

In certain circumstances, we may be unable to fulfill your request if:

  • We have a legal obligation to retain the data
  • The data is necessary for legal claims or defense
  • Processing is required for public interest or official authority
  • The request is manifestly unfounded or excessive
  • Fulfilling the request would adversely affect others' rights

We will always explain the reasons if we cannot fulfill your request and inform you of your right to complain to a supervisory authority.