Your Data Rights
A practical guide to your rights under the GDPR and how to use each of them on LeraLink.
Last updated: 12 November 2026
Who answers your request
On LeraLink, your data can be held for two different parties.
| Data | Who decides about it (controller) | Where to ask |
|---|---|---|
| Your platform-wide account: email address, name, picture, sign-in, the list of installations you belong to | SSStudio | From your account, or privacy@lera.link |
| What an installation holds about you: your profile there, roles, contributions, comments, newsletter subscriptions, editorial records | The organisation or person running that installation | That installation's contact (see its privacy statement), or from your account where a tool exists |
| SSStudio's own website, enquiries, contracts and invoices | SSStudio | privacy@lera.link |
| AI-written descriptions of a person in an installation | The organisation or person running that installation | A request from your account on that installation's site, or privacy@lera.link |
| The platform's global record of concepts and people | SSStudio | privacy@lera.link |
Some data, such as a shared identity used across installations or public discovery, can involve more than one controller. You do not need to work out which one applies. If you are unsure, write to privacy@lera.link. When a request concerns data we hold for an installation, we pass it to that installation and help it answer, as its processor (GDPR Article 28). We tell you that we have done so.
Many requests can be handled by you directly from your account, without waiting for anyone.
Your rights, and how to use them
Right of access (Article 15)
You can ask what personal data is held about you, why, where it came from, who receives it and for how long it is kept.
On LeraLink: use Download my data (below). For anything a package does not contain, such as editors' internal notes, write to the installation or to privacy@lera.link. The Privacy Statement and the Data Retention Schedule describe the purposes, recipients and periods.
Right to rectification (Article 16)
You can have incorrect data corrected and incomplete data completed.
On LeraLink: edit your name, picture and profile yourself from your account. To change your email address, write to privacy@lera.link. A published work is corrected by its authors and editors through the installation's normal process; ask the installation. For an AI-written description of you, see below.
Right to erasure (Article 17)
You can have your data deleted when there is no longer a reason to keep it, or when you withdraw consent or object and nothing overrides that.
On LeraLink: leave an installation, or delete your account (below). Some data stays for reasons the GDPR allows (Article 17(3)): published works that are part of the public record, evidence kept under legal hold, and invoices required by tax law.
Right to restriction (Article 18)
You can ask for your data to be used only for storage while, for example, a correction or an objection is being considered.
On LeraLink: write to the installation concerned, or to privacy@lera.link for your account. There is no self-service button for this.
Notification of recipients (Article 19)
When data is corrected, deleted or restricted, recipients it was disclosed to are told, unless that is impossible or takes disproportionate effort. You can ask who they are.
On LeraLink: inside the platform, a correction or removal applies everywhere the data appears. For recipients outside the platform, ask privacy@lera.link or the installation.
Right to data portability (Article 20)
You can receive the data you provided, in a structured, commonly used, machine-readable format, and pass it to someone else.
On LeraLink: Download my data gives a machine-readable package. Installations can also export their own content; see the Data Export and Exit Policy.
Right to object (Article 21)
You can object to processing based on legitimate interests or public interest, on grounds relating to your situation. You can always object to direct marketing.
On LeraLink: to object to an AI-written description of you, ask for its removal (below). To stop newsletters or other mail, unsubscribe. For any other objection, write to the installation or to privacy@lera.link and say what you object to.
Automated decisions (Article 22)
You have the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you.
On LeraLink: no such decisions are made. AI is not used to decide about people: not about access, roles, membership, submissions or reviews. Those are decided by people. How LeraLink Uses AI explains what AI does.
How to do it on LeraLink
Download my data
- Sign in and open your account.
- Choose Download my data and the kind of package you want.
- Read the warning, type the confirmation word and enter the code sent to your inbox.
- The package is built in the background. A link is sent to your inbox. It is never offered on screen.
- Open the link while signed in as the same person. The link and the file end after 7 days.
You can ask for one package a day. There are two kinds of package:
| Package | Contains |
|---|---|
| My data in this community | What that installation holds about you: your profile, preferences, roles, your own contributions and comments, and your credits |
| My account across LeraLink | Your platform-wide account and the list of the installations you belong to. That list is never shown to any installation |
A package contains only what is yours alone:
- Works with other people on them are not included: not their text and not their files, because they are also other people's data. Your own credit on such a work is included, as its title and your role, without anybody else's name.
- Blind review holds. If you reviewed, you receive your own words without the work or its author. If you are an author, you receive the decisions addressed to you, but never who reviewed.
- Editors' internal notes about you are not included. You can ask for them separately; the installation will consider the request, taking into account the rights of others (Article 15(4)).
- Other people's comments and details are never included.
Correct your profile
In your account you can edit your name, picture and profile. Each installation holds a separate profile, which you edit on that installation's site. Your email address cannot yet be changed from your account; write to privacy@lera.link.
Leave an installation
In your account, under Membership, choose Leave this community. This removes that installation's profile, preferences, contact relationship, sessions, roles and grants. Your account and your other memberships remain. Your published contributions and credits in that installation stay, as part of its record.
Delete your account
- In your account, choose Delete my account everywhere.
- Deletion happens after 7 days. You can cancel during that time.
- On the day, the request is checked again. It is held, and you are told why, while you are the only owner of an installation or have a submission still in progress. Give the installation another owner, or finish or withdraw the submission, and the deletion goes ahead.
- Then every membership is left and the account is deleted.
What is deleted: your email address, picture, public address, biographies, identity keys, reactions, notes, reading history and unpublished work that is yours alone.
What stays, and why:
| What stays | Why |
|---|---|
| Your published works and credits, under the name they were published with | They are part of the public record and of other people's work, such as co-authors, editors and journals |
| Your comments, without your name | They are part of a discussion others took part in |
| The audit record, with your account identifier only | Evidence of who had access and who changed it, kept under legal hold |
| The record of the terms you accepted | Evidence of the agreement, kept under legal hold |
| Database backups | They are not edited and expire after 30 days |
The Data Retention Schedule gives each period.
An AI-written description about you
An installation can show a short description of a person that its public texts are about, written by AI from the published evidence and marked as machine-made. If it is about you and the installation has confirmed that the description is of you, your account on that installation's site shows it under "What is written about you here". There you can:
- Ask for a correction. Say what is wrong. If the installation agrees, a person corrects it; the correction is kept beside the machine-made text, and no automatic process writes over it.
- Ask for its removal. If the installation agrees, the text is removed in every language, and a mark is left that every automatic process honours, so it is not written again.
The people who run the installation decide, and you see the answer in your account. If you cannot use these options, or disagree with the answer, write to privacy@lera.link.
Unsubscribe
As a member of an installation you receive its newsletters and publication email by default. You can switch them off at any time in your settings or with the link in every message. Newsletters may record whether a message was opened and which links were followed, to measure reach. In your account, under Notifications, you can change what you receive from each installation. Messages needed to run your account, such as sign-in codes and notices about your data, cannot be switched off.
Withdraw consent
Where something is based on your consent, you can withdraw it at any time, as easily as you gave it (Article 7(3)). Withdrawal does not affect what was done before.
Cookie settings
LeraLink sets only sign-in session cookies and two language cookies, and no analytics cookies. Content from other services, such as YouTube, Vimeo, X and other external media, loads only after you allow it. You can change that choice at any time under Cookie settings at the foot of every page. See the Cookie and Local Storage Statement.
Timelines
We answer within one month of receiving your request. If a request is complex or there are many, the period can be extended by two further months; we tell you within the first month, with the reason (Article 12(3)). Self-service actions take effect at once, except that a data package takes some time to prepare and account deletion waits 7 days so that you can cancel.
Using your rights is free. We may refuse, or charge a reasonable fee, only for requests that are manifestly unfounded or excessive, and we explain why (Article 12(5)).
Identity checks
We must be sure a request comes from you.
- From your account: signing in, and for downloads the code sent to your inbox, is the check.
- By email: write from the address linked to your account. If that is not possible, we ask for the least information needed to confirm who you are. We do not ask for a copy of an identity document unless there is no other way, and then only with the parts that are not needed blacked out.
You can ask someone to act for you. We then ask for proof that they may.
Complaints
If you are not satisfied with an answer, tell us at privacy@lera.link, and we will look at it again. You also have the right to complain to a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). You may also complain in the EU country where you live or work, or go to court (Articles 77–79).
Contact
privacy@lera.link, in English or Dutch. More about how we process data is in the Privacy Statement.