Controller and processor roles
A white-label retailer or operator may be the controller for its subscribers, while murphx EMC may act as a processor for relevant account or service records. For platform customers' own company and billing records, the platform operator may act as controller. These roles must be recorded in the actual contractual and privacy documentation.
Data subject rights
- Access and copies of personal data.
- Correction of inaccurate information.
- Erasure when legally applicable, subject to retention duties.
- Restriction and objections where the lawful basis permits.
- Portability for eligible automated processing.
- Withdrawal of consent, without affecting earlier lawful processing.
Submitting a request
In production, a verified data-rights request channel will accept the request, confirm identity proportionately, identify the controller and relevant systems, record the statutory deadline and deliver the response securely. The public email or web endpoint must be configured before operation. This prototype provides no real submission channel.
Requests involving AI support
Tenant-scoped AI support must not provide cross-account information. Sensitive operational queries require permissions and an auditable escalation path, particularly where legal retention or disclosure restrictions apply.
Complaints
Individuals retain the right to complain to their relevant data protection supervisory authority where applicable. Consult the Privacy Notice and Data Processing Agreement.