Outread LogoOutread

GDPR and Your Data Rights

Last updated: October 13, 2026

This page explains how to exercise your rights under the General Data Protection Regulation (GDPR), where it applies to your personal data. It supplements our Privacy Policy, which describes how Outread handles information, and does not replace it.

Who to contact

Outread is operated by Supremum in Poland, the data controller for personal data we process in providing Outread. Contact us at [email protected] or write to PO Box 11, UP Warszawa 82, 01-880 Warszawa, Poland.

Your rights

Depending on the circumstances and the legal basis for processing, GDPR gives you the following rights:

  • Access your personal data and information about its use.
  • Correct inaccurate data or complete missing information.
  • Request deletion of your data where the right to erasure applies.
  • Request restriction of processing in the applicable circumstances.
  • Receive data you provided in a portable format where automated processing is based on consent or a contract.
  • Object to processing based on legitimate interests on grounds relating to your situation, and to direct marketing at any time.
  • Withdraw consent where processing relies on it, without affecting the lawfulness of processing before withdrawal.
  • Protection against solely automated decisions with legal or similarly significant effects, subject to the exceptions in GDPR.

These rights are not absolute. For example, a legal obligation to retain information may limit a deletion request. Read the European Commission's guidance on your rights for more detail.

Making a request

Email us with the right you wish to exercise and enough information to identify the relevant data, such as the email address associated with your Outread account, if you have one. Do not send passwords or payment card details. If we have reasonable doubts about your identity, we may request additional information necessary to confirm it.

We will respond without undue delay and within one month of receiving your request. GDPR allows an extension of up to two further months where necessary because of the complexity or number of requests; we will explain any extension within the first month. If we cannot act on your request, we will explain why and your options for challenging that decision.

Complaints

You may lodge a complaint with a data protection supervisory authority, including in the EU country where you live or work or where an alleged infringement occurred. In Poland, the authority is the Personal Data Protection Office (UODO). You do not need to contact us first to exercise this right.