Data Deletion Instructions

MAJOR KEY Research GmbH ("we," "us," or "our") respects your right to control your personal data. This page explains how to request deletion of personal data we hold about you, including data we receive through advertising platforms such as Meta (Facebook and Instagram), Google, TikTok, and other partners.

This is a summary of your deletion rights. For a full overview of how we process personal data, see our Privacy Policy.

1. Your Right to Erasure

Under Article 17 of the EU General Data Protection Regulation (GDPR), you have the right to request that we erase the personal data we hold about you. This is sometimes referred to as the "right to be forgotten."

Residents of California have an equivalent right under Section 1798.105 of the California Consumer Privacy Act (CCPA). Other applicable data protection laws may provide similar rights.

2. How to Request Deletion

To request deletion of your personal data, send an email with the details below:

We may need to verify your identity before processing the request. Verification typically involves confirming the request is sent from the email address on file.

3. What Will Be Deleted

Upon a valid request, we will delete:

• Your account and authentication credentials
• Your name, email address, and contact details
• Marketing preferences and communication history
• Behavioural and product analytics data linked to your identifiers
• Advertising data we have received from third-party platforms (Meta Pixel, Meta Conversions API, and similar event-tracking tools) that is associated with your identifiers
• Identifiers we have shared with advertising partners for retargeting and audience matching

We will also instruct our processors and advertising partners to remove your data from their systems to the extent that they hold it on our behalf.

4. What We Are Required to Retain

Some data must be retained even after a deletion request, as permitted by Article 17(3) GDPR:

• Transaction records (10 years): Required by German commercial and tax law (§ 257 HGB, § 147 AO). This includes invoices, receipts, and payment records.
• Records related to legal claims: Data necessary to establish, exercise, or defend legal claims.
• Aggregated analytics: Anonymous and aggregated data that no longer identifies you may be retained indefinitely.

Where we cannot delete data, we will instead restrict its processing to the legal purpose for which we are required to keep it.

5. Response Time

We will confirm your request and complete the deletion process within the timeframes required by applicable law:

• GDPR (EU/EEA): Within 30 days of receipt
• CCPA (California): Within 45 days of receipt

In complex cases the response window may be extended in line with the relevant law. We will notify you of any such extension.

6. Data Received from Meta Platforms

If you visited our website or interacted with our advertising on Facebook or Instagram, we may have received event data through the Meta Pixel and the Meta Conversions API. This data is held under our control and is covered by any deletion request you submit using the procedure above.

You may also manage advertising-related data directly with Meta via the Meta Off-Facebook Activity controls and the Accounts Center privacy settings.

7. Data Received from Other Advertising Platforms

We may also receive data from other advertising and analytics platforms listed in our Privacy Policy (for example Google, TikTok, LinkedIn, Reddit, and PostHog). The deletion procedure described in Section 2 applies equally to data received from these platforms. You can also exercise your rights directly with those providers via their own data settings.

8. Contact

You also have the right to lodge a complaint with a data protection supervisory authority. For Germany, the competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.