Your Data Rights
Exercise your data protection rights under GDPR and PDPA
Exercise Your Rights
Under the EU General Data Protection Regulation (GDPR) and the Sri Lankan Personal Data Protection Act (PDPA), you have specific rights regarding your personal data. Use the form below to exercise these rights.
📄 Data Export
Download a copy of all personal data we have about you
🗑️ Data Deletion
Request permanent deletion of your personal data
Submit Your Request
What would you like to do?
📥 Export My Data
Download a copy of your personal data
🗑️ Delete My Data
Permanently remove your personal data
Your Data Protection Rights
You have the following rights under GDPR and Sri Lankan PDPA:
Right to Access
You can request access to your personal data and receive a copy of the personal data we hold about you.
Right to Rectification
You can request that we correct any personal data we hold about you that is inaccurate or incomplete.
Right to Erasure
Also known as the “right to be forgotten,” you can request that we delete your personal data.
Right to Restrict Processing
You can request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
You can request to receive your personal data in a structured, commonly used format.
Right to Object
You can object to the processing of your personal data for direct marketing purposes.
Response Timeline
We are committed to responding to your data protection requests promptly:
Acknowledgment
Within 72 hours
Processing
Up to 30 days
Completion
Secure delivery
Need Additional Help?
If you have questions about your data rights or need assistance with your request, our Data Protection Officer is here to help.
Data Protection Officer
Email: privacy@cosmopolitanlk.com
Subject: Data Rights Inquiry
Legal Framework
These rights are established under:
🇪🇺 EU GDPR
General Data Protection Regulation (EU) 2016/679
🇱🇰 Sri Lankan PDPA
Personal Data Protection Act No. 9 of 2022