# request-gdpr.com

> A free tool to generate GDPR data subject access request letters and exercise your privacy rights under EU law. No account required, no data collected.

## About

request-gdpr.com helps individuals exercise their rights under the General Data Protection Regulation (GDPR) and UK GDPR. It generates ready-to-send formal letters for data access, erasure, and marketing objection requests. Available in 8 languages.

The site is a static generator — no personal data is stored server-side. All letter generation happens in the browser.

## Key pages

- /: Main letter generator — Article 15 data subject access request
- /rights/erasure/: Right to erasure letter — Article 17 ("right to be forgotten")
- /rights/marketing/: Right to object to direct marketing — Article 21
- /companies/: DPO contact directory for 15 major companies (Meta, Google, Apple, Amazon, TikTok, LinkedIn, Microsoft, Twitter/X, Spotify, Netflix, Uber, Airbnb, PayPal, Adobe, Booking.com)
- /industries/: Sector-specific templates for employer, bank, healthcare, insurance, telecom
- /batch/: Batch generator — send requests to multiple companies at once
- /breaches/: Data breach response pages for Meta, LinkedIn, Twitter/X, Uber, TikTok, Marriott, LastPass
- /guides/after-sending/: What to do after sending a GDPR request (timelines, escalation)
- /guides/supervisory-authorities/: DPA directory — all 27 EU countries + UK with direct complaint links

## Languages

English (/), German (/de/), French (/fr/), Spanish (/es/), Italian (/it/), Dutch (/nl/), Polish (/pl/), Portuguese (/pt/)

## Legal context

The GDPR (Regulation 2016/679) gives EU residents the right to:
- Access personal data held about them (Article 15)
- Erasure of personal data (Article 17)
- Restriction of processing (Article 18)
- Data portability (Article 20)
- Object to processing, including profiling for direct marketing (Article 21)

Organisations have one month to respond. Complaints can be filed with national data protection authorities (DPAs) if ignored.