GDPR requests
Last updated: 29 July 2026
For GDPR and privacy requests relating to Xeotype public websites, product enquiries, robotics orders, collaboration requests, email communication or WhatsApp conversations started from Xeotype websites, contact contact@xeotype.com.
Please use the subject line “GDPR request” so the request can be identified quickly.
Depending on the situation and legal conditions, you may have the following rights under the GDPR:
To help Xeotype identify and answer the request, please include:
To protect personal data, Xeotype may ask for additional information to verify that the request is made by the correct person or an authorised representative. This is especially important for requests involving access, deletion, invoices, project files, student-related information, event photos or business communication.
Xeotype will not request unnecessary identity documents. If identity proof is needed, we will ask only for information reasonably necessary to prevent unauthorised disclosure, modification or deletion.
Xeotype aims to respond to valid GDPR requests without undue delay and within the timeframe required by the GDPR. Where the request is complex, covers many records, involves third-party rights or requires additional verification, the response period may be extended where permitted by law and you will be informed when required.
Some requests cannot always be fulfilled completely. Xeotype may need to keep or restrict certain data where required or permitted by law, including for:
If Xeotype cannot fulfil a request fully, we will explain the relevant reason where appropriate.
If your request concerns photos, videos, robotics competitions, educational events, public demonstrations or portfolio materials, please identify the specific material as clearly as possible. Useful details include the event name, date, URL, screenshot, project name or image description.
Where removal is legally required or appropriate, Xeotype will take reasonable steps. In some situations, complete removal may not be possible from third-party platforms, cached pages, search engines, public event organisers or materials already distributed outside Xeotype’s control.
If a request relates to a minor, Xeotype may require confirmation that the requester is the parent, legal guardian, authorised school representative or another person legally entitled to act. This protects minors and prevents unauthorised disclosure or deletion.
If you act on behalf of another person, Xeotype may ask for proof of authorisation. This can include a written mandate, legal representation proof or other appropriate confirmation, depending on the context.
Where processing is based on consent, you may withdraw consent at any time by contacting Xeotype. Withdrawal does not affect processing that was lawful before withdrawal, and it may not affect processing required for legal obligations, contracts, invoices, disputes or legitimate security reasons.
You may object to processing based on legitimate interests. Xeotype will review the request and stop processing unless there are compelling legitimate grounds to continue or the data is needed for legal claims or other legally permitted reasons.
If you believe your data protection rights have not been respected, you can contact Xeotype first at contact@xeotype.com. You may also contact the Romanian supervisory authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, through dataprotection.ro.
For the broader explanation of how Xeotype processes data, see the Privacy Policy. For cookies and similar technologies, see the Cookie Policy. For company and website terms, see the Legal Notice.
This GDPR request procedure may be updated as Xeotype websites, products, legal requirements and internal processes evolve. The latest version will be published on this page.