Retention may still be required
- An invoice or accounting record during its statutory retention period.
- Information needed to establish, exercise or defend legal claims.
- Certain data still needed to perform a contract or keep a service secure.
Loading page…
Name, address, phone number, old accounts, profiles, photos or advertising identifiers: different traces need different approaches. Here is what you can request, what may be retained and how to organise the process.
These actions can complement each other, but produce different outcomes. First identify who controls the data and what you want to achieve.
The organisation deletes the data from its service or database, subject to information it is legally required to keep.
The search engine stops showing certain links in searches for your identity, but the original page may remain online.
Closing an account ends access to the service. On its own, it does not guarantee that all data is erased immediately.
The right to erasure can apply to any information that identifies you directly or indirectly. What matters is not only the type of data, but why and on what basis it is still used.
Name, address, email, phone number, date of birth or old contact details in an account, directory or marketing database.
Old accounts, biographies, usernames, comments, photos, videos, posts or other content linked directly or indirectly to your identity.
Interests, inferred habits, consumer categories, scores, advertising segments or profiles built for direct marketing.
IP addresses, cookies, advertising identifiers, devices, sign-in history or other signals used to recognise a browser or user.
Usual address, precise or approximate position, location history and data that can reveal where you live or your habits.
Health, biometrics, political opinions, religion, sexual orientation and trade union membership receive additional protection, but cannot automatically be erased in every situation.
Explain the outcome you want and, where useful, the legal reason that fits your situation.
The purpose for which it was collected or used no longer applies.
Processing relied on your consent and no other legal basis allows it to continue.
Collection, publication or use does not comply with the applicable rules.
This applies particularly to direct marketing or when no overriding legitimate grounds justify continued use.
The GDPR gives particular attention to data provided in connection with an online service.
European or national rules may require its deletion.
The right to erasure is not absolute. An organisation may retain limited data, but must be able to explain why, on what basis and for how long.
The same information may exist on a page, in a search engine, with a broker and in an old account. Each holder needs a separate request.
Start with account settings, then contact the service or its DPO if the available deletion is incomplete.
Delete content you control and report content published by others where it infringes your rights.
Identify the responsible company, the data held and the official channel for access, objection or erasure requests.
Contact the website operator to remove or amend the information directly at the source.
Request delisting when content remains online but should no longer appear in searches for your name.
A copy that has already circulated cannot always be recalled. Secure the affected accounts and contact holders you can still identify.
Removal is not a universal button. It starts with identifying the trace and continues until a useful reply or confirmation arrives.
Identify the trace, the responsible organisation and its channel for exercising your rights.
Erasure at the source, objection, account closure or delisting: the request depends on your situation.
Identify the data concerned and your reason, and keep dated proof of sending.
The usual deadline is one month. Record any extension, refusal or lack of response before considering a complaint.
Data Knight brings research, requests and tracking together while keeping the process clear. Actions are based on what you selected and authorised.
Très bon outils, facile d’utilisation et avec un onboarding très simple
Une vraie expertise dans le domaine de la cybersécurité et de la protection de données. J’ai pris l’abonnement à l’année et je suis très satisfaite des résultats ! Une entreprise sérieuse et compétente que je recommande sans hésiter.
The right to erasure can cover contact details, an old account, photos, posts, location data, technical identifiers, marketing profiles or sensitive data. The type of data alone is not enough: erasure depends on why it is used, the legal basis for processing and any retention obligations.
No. There is no button that erases every copy on the internet. You can take action with identified websites, apps, social networks, brokers, directories and search engines. Some data may still be retained to meet a legal obligation, protect freedom of information, defend a legal claim or carry out a task in the public interest.
Erasure removes data from the website, service or database holding it. Delisting removes certain search engine results for queries relating to your identity, but does not delete the source page. Depending on the situation, it may be useful to request both separately.
Not always. Closing an account generally ends access to the service and starts the handling of associated data, but some information may be retained for a limited time for billing, security, fraud prevention, a legal obligation or the defence of a claim. The organisation must explain what it keeps and why.
It must respond without undue delay and, in principle, within one month. It may extend this period by a further two months for complex or numerous requests, but it must tell you within the first month and explain the extension.
Not automatically. The organisation may ask for additional information if it has reasonable doubts about your identity, but verification must remain proportionate. A full copy of your ID should not be required by default when your identity is already sufficiently established.
Keep the original request, its sending date and any replies. You can ask the organisation to explain the basis for its refusal, follow up if the deadline has passed and then complain to the CNIL if the response remains absent or unsatisfactory.
No. Data Knight can identify traces, prepare and send authorised requests, bring evidence together and track replies. The final decision depends on the organisation, data, legal basis and applicable exceptions. Tracking therefore distinguishes between a request that is sent, pending, refused or confirmed.