Data Export (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to access and export your personal data. This guide explains how to exercise these rights.
Your Data Rights
As a Hello World DAO member, you have the right to:
| Right | Description |
|---|---|
| Access | See what personal data we hold about you |
| Export | Download a copy of your data |
| Rectification | Correct inaccurate data |
| Erasure | Request deletion of your data |
| Portability | Receive data in a machine-readable format |
What Data We Store
Personal Information
- Email address
- First and last name
- Join date
- KYC verification status (not the documents themselves)
- Marketing consent preferences
Membership Data
- Member ID
- Membership NFT information
- Membership status and history
- Payment history (transaction records, not full card details)
Activity Data
- Voting history (which proposals you voted on, how you voted)
- Login history
- Account changes
On-Chain Data
Some data is stored on the blockchain:
- Your Membership NFT
- Voting records
- Governance participation
INFO
Blockchain data is permanent and cannot be deleted. However, it is pseudonymous and not directly linked to your personal identity.
Exporting Your Data
Step 1: Access Account Settings
- Log in to helloworlddao.com
- Click your profile icon
- Select Settings
- Navigate to Privacy or Data Export
Step 2: Request Export
- Click Export My Data
- Select what data to include:
- Personal information
- Membership data
- Activity data
- All data
- Click Generate Export
Step 3: Download Your Data
- Processing may take a few minutes
- You'll receive an email when ready
- Click the download link (expires in 24 hours)
- Save the file to your device
Export Format
Your data is provided as:
- JSON format - Machine-readable structured data
- PDF summary - Human-readable document
Understanding Your Export
Personal Information Section
{
"email": "your.email@example.com",
"first_name": "John",
"last_name": "Doe",
"created_at": "2024-03-15T10:30:00Z",
"verified": true,
"gdpr_marketing_consent": true
}Membership Section
{
"member_id": "HW-12345",
"membership_nft": "abc123...",
"status": "active",
"join_date": "2024-03-15",
"expiration_date": "2024-12-31"
}Activity Section
{
"votes": [
{
"proposal_id": "prop-001",
"vote": "for",
"timestamp": "2024-04-01T14:00:00Z"
}
],
"logins": [...]
}Correcting Your Data
If any personal data is incorrect:
- Go to Account Settings
- Navigate to Profile
- Update the incorrect information
- Save changes
For data you cannot edit yourself, contact support@helloworlddao.com.
Requesting Data Deletion
You can request deletion of your personal data:
- Go to Account Settings
- Navigate to Privacy
- Click Request Data Deletion
- Confirm your request
What Gets Deleted
- Email address (replaced with hash)
- Name
- Payment details
- Activity logs
What Cannot Be Deleted
- Blockchain records (Membership NFT, voting history)
- Anonymized aggregate data
- Data required for legal compliance
Deletion Timeline
- Request acknowledged within 48 hours
- Deletion completed within 30 days
- Confirmation email sent when complete
WARNING
Data deletion is permanent. You will lose access to your account and membership history.
Marketing Preferences
Managing Consent
- Go to Account Settings
- Navigate to Notifications or Privacy
- Toggle marketing communications on/off
- Save your preferences
What's Covered
- Newsletter emails
- Product updates
- Promotional content
- Survey invitations
What's Not Affected
Essential communications are always sent:
- Password reset emails
- Membership renewal reminders
- Security alerts
- Transaction confirmations
Data Security
Your data is protected by:
- Encryption: Personal data is encrypted at rest
- Access Controls: Limited employee access
- Audit Logging: All access is logged
- Secure Infrastructure: Hosted on Internet Computer
Questions About Your Data
Contact Our Data Protection Team
For questions about your personal data:
- Email: privacy@helloworlddao.com
- Subject: Include "GDPR Request" in the subject line
- Include: Your member ID and specific request
Response Time
We respond to all data requests within:
- Acknowledgment: 48 hours
- Completion: 30 days (as required by GDPR)