GDPR erasure requests, filed with the site that holds your data
NetClearer drafts and files erasure requests under GDPR article 17 and objections under article 21 with the websites, platforms and databases that publish your personal data. You sign a mandate; we send the request, track the one-month deadline and prepare the next step if the answer is no. €29 incl. VAT per site or link. The site decides first.
Published · Updated by Pierre Billard, founder of NetClearer
Erasure at the source versus delisting
A Google delisting request hides a page in searches for your name. An erasure request goes to the source: the site that published your data. When it works, the data is gone for everyone, on every search engine. When it does not, delisting is often still possible. Most of our cases use both, in this order: the source first, then Google.
The rules in plain words
| Article | What it says | Typical use |
|---|---|---|
| Art. 17 (erasure) | You can ask a controller to erase your data, for example when it is no longer needed, was processed unlawfully, or after a valid objection | Old profiles, directories, data kept after you left a service |
| Art. 21 (objection) | You can object to processing based on the controller’s legitimate interest; it must stop unless it shows stronger reasons | Copy sites, people-search sites, company-data sites |
| Art. 10 (criminal data) | Data about convictions and offences may only be processed under official control or with a legal basis | Sites that publish judgments by name |
| Art. 16 (rectification) | Wrong data must be corrected | A false address, a wrong date of birth |
| Art. 12(3) | The controller must answer within one month, with a possible extension for complex cases | We track the deadline |
Exceptions exist (art. 17(3)): freedom of expression and information, legal obligations, public interest, legal claims. News, official registers and tax lists are often protected. We tell you before you pay if your case falls into one of them. Sources: EUR-Lex GDPR and the EDPB guidelines 5/2019.
Can someone else send the request for me?
Yes. The European Data Protection Board accepts requests made through an authorised third party. The site may check your identity and our authorisation where this is suitable and proportionate, but should not ask for more than needed (EDPB). That is why each request carries your signed mandate and a copy of your ID, with anything not needed (ID number, photo) masked where the site allows it.
Two limits. First, national rules can reserve some legal work to lawyers: this is why we do not serve Germany, Austria, the Czech Republic, Romania or Cyprus. Second, only non-profit bodies may represent you before a data protection authority (GDPR art. 80). So we prepare the complaint; you sign and send it.
Related routes
On platforms such as social networks, forums and review sites, a notice under the Digital Services Act often works faster than a GDPR letter.
How a case runs
- Map: you send the links. We find who runs each site, its privacy contact and its own form, if it has one.
- Mandate: you sign; we send the first request the same day you order, citing the articles that fit your case.
- Deadline: we note the one-month date and send a reminder before it ends.
- Answer: if the site erases or anonymises the data, we check the page and ask Google to update its result. If it refuses or stays silent, we explain the options.
- Escalation: we prepare a complaint to your data protection authority, such as the Autoriteit Persoonsgegevens, AEPD, IMY, UODO, DPC or Datatilsynet. You sign and send it.
What a refusal can look like
Not every refusal is wrong. The Danish Datatilsynet found it justified that a classifieds site kept user data to fight fraud (31 January 2022, lovguiden). Finnish courts allow the media to publish tax data. We read each refusal and tell you plainly whether a complaint has a point. NetClearer is not a law firm and does not give legal advice.
Price
€29 incl. VAT per site or link, €69 incl. VAT for 3, €199 incl. VAT for 10. The DPA complaint, when needed, is included for the link concerned. No refund once your request has been filed. You have 14 days to withdraw before that. All prices.
Frequently asked questions
How long does a site have to answer?
One month from receiving the request, under GDPR article 12(3). For complex cases or many requests, the site may extend this by two more months, but it must tell you within the first month and explain why. We track both dates and send a reminder before the deadline.
The site is outside the EU. Does the GDPR still apply?
It can. The GDPR applies to sites outside the EU that offer services to people in the EU or monitor their behaviour. Enforcement is harder, though. For such sites we usually combine the request with Google delisting, which works on the search side whatever the host country.
Do I have to give my ID to the website?
The site may check who you are, but only as far as needed. We send a copy of your ID with the parts it does not need masked, together with the mandate. Some sites accept other proof, such as an email from the address they have on file.
Will you file the complaint with the data protection authority?
We prepare it: the facts, the timeline, the copies of letters, the articles concerned. You sign it and send it yourself, because the GDPR reserves representation before the authority to non-profit bodies. Most authorities offer an online form, and we tell you which fields to fill.
What if the data is in an official register?
Official registers follow their own laws, and the EU Court said in the *Manni* case that a director’s data in a company register cannot simply be erased. We target the private sites that copy those registers. Our page on company-data sites explains this route.
Reviews of this service
Did you use this service? Share your experience under a pseudonym: your review is published after moderation. Links, email addresses and phone numbers are not accepted.
No review yet for this service.
Related services
DSA notices
Report illegal content to a platform or host under article 16 of the Digital Services Act, with the elements it must review, then use the appeal routes.
Learn moreGoogle delisting
Ask Google to stop showing outdated, inaccurate or excessive results for your name, under the EU right to be forgotten. We prepare, file and follow up the request.
Learn morePersonal data online
Your address, phone number, income or old judgments on people-search sites, directories and company-data copies: requests to each site, self-service steps explained, Google delisting.
Learn moreCompany-data copy sites
Your home address or old company data copied from the KvK, CRO, CEIDG, BORME or Lursoft onto private sites: we ask each copy to update or erase it.
Learn moreTell us what is happening. We will take it from here.
Free, confidential assessment. Written reply within 24 hours.