Participants may ask to access, correct, delete, restrict, transfer, object to processing, or withdraw from a study where those rights apply.
Who should respond
The study controller usually decides how to respond to a rights request. In many studies this is the customer, institution, or researcher organization, not Assentics alone.
What to record
Record the request type, requester, data subject, project context, deadline, verification status, responsible owner, decision notes, and closure evidence. Avoid copying raw response content into operational notes.
Systems to check
A request may involve Assentics records, Supabase Auth, Formbricks responses or displays, Resend delivery data, Sentry/logs, generated exports, and backups.
Withdrawal
Withdrawal from participation does not automatically decide whether historical response data must be deleted. Follow the participant notice, study protocol, and controller decision.