GDPR and International Data Request

Last updated: July 22, 2026

Who May Use This Process

This process is available to individuals in the European Union, European Economic Area, United Kingdom, Canada, and other jurisdictions that provide comparable personal-data rights. MagDI Guide primarily targets the United States and Canada. Submitting a request does not by itself determine that a particular law applies; Cyntar S.C. will evaluate the request under the law applicable to the requester and the processing involved.

Right of Access

You may ask whether Cyntar S.C. processes personal data about you and request access to that information together with required details about purposes, categories, recipients, retention, source, safeguards, and applicable rights.

Right to Rectification or Correction

You may ask Cyntar S.C. to correct inaccurate personal data or complete information that is incomplete, subject to applicable law.

Right to Erasure or Deletion

You may ask Cyntar S.C. to delete personal data when a legal basis for deletion applies. This right is not absolute. Information may be retained when required by law, needed to complete an active request, necessary to protect another person, or required to establish or defend legal claims.

Right to Restriction

Where recognized by applicable law, you may ask Cyntar S.C. to restrict certain processing while accuracy, legality, an objection, or another disputed issue is reviewed.

Right to Data Portability

When the legal conditions are met, you may request personal data you provided in a structured, commonly used, machine-readable format and may ask that it be transmitted to another organization when technically feasible.

Right to Object and Opt Out

You may object to processing based on legitimate interests or to direct marketing. You may also request to opt out of sale, sharing, cross-context behavioral advertising, or targeted advertising when the law applicable to you provides that right. Cyntar S.C. does not sell MagDI Guide leads.

Right to Withdraw Consent

You may withdraw consent at any time. Withdrawal applies to future processing and does not affect processing that lawfully occurred before withdrawal.

Automated Decision-Making Rights

You may ask for information about any solely automated decision that produces legal or similarly significant effects. MagDI Guide does not use solely automated decision-making for diagnosis, medical eligibility, access to services, or other similarly significant decisions.

How to Submit a Request

Email privacy@magdiguide.com with the subject line “Data Rights Request,” or use the privacy-request form on this page. Include your full name, the email address or telephone number used with MagDI Guide, your country or region, the right you wish to exercise, the approximate date and nature of the interaction, and any details that help us locate the data. Do not send medical records or an unredacted identification document by ordinary email.

Authorized Representatives

Where permitted, an authorized representative may submit a request. We may require evidence of authority and may contact the individual directly to verify identity and confirm the representative’s authorization.

Identity Verification

Cyntar S.C. will use information already associated with the inquiry when possible. Verification will be proportionate to the sensitivity of the information and the risk of unauthorized disclosure. We may request confirmation through an existing email address or telephone number, information about the interaction, a signed declaration, or a securely submitted identification document when strictly necessary.

GDPR and UK Response Time

For requests governed by the GDPR or UK GDPR, Cyntar S.C. will respond without undue delay and ordinarily within one calendar month. When permitted because of complexity or the number of requests, the period may be extended by up to two additional months. We will notify you within the initial period if an extension is required.

Canadian Response Time

For access requests governed by Canada’s Personal Information Protection and Electronic Documents Act, Cyntar S.C. will ordinarily respond within 30 calendar days, subject to any extension permitted by applicable law. Provincial privacy laws may provide different procedures or timelines.

Other Jurisdictions

For requests governed by another privacy law, Cyntar S.C. will apply the response period and procedural requirements of that law. When no mandatory period applies, we aim to provide a substantive response within 30 days.

Fees

Requests are generally handled without charge or at minimal cost where applicable. When permitted by law, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded, excessive, or repetitive. We will explain the basis for any fee or refusal.

Limits and Exceptions

Rights may be limited by applicable law. Cyntar S.C. may preserve information to comply with law, protect another person’s rights, maintain legal privilege, complete a requested interaction, prevent fraud, or establish, exercise, or defend legal claims.

Complaints

Individuals covered by the GDPR may complain to the data-protection supervisory authority in the country where they reside, work, or believe an infringement occurred. Canadian individuals may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator. Individuals in other jurisdictions may contact the regulator identified by their applicable law.

Privacy Lead

The MagDI Guide privacy lead may be contacted at privacy@magdiguide.com. Cyntar S.C. has not represented that it has formally appointed a statutory Data Protection Officer, EU representative, or UK representative unless and until such an appointment is confirmed.

Contact Information

Cyntar S.C.
Legal representative: Lic. Jorge Arriaga
Paseo de los Héroes 9111-100, Zona Urbana Río Tijuana, C.P. 22010, Tijuana, Baja California, México
privacy@magdiguide.com