Loading…
Datajoy
+32 497 86 42 48 Log in
For you · free

Send your data
to another company

Even when the company holding it doesn't want to.

Start
For businesses · paid

Receive your
customers' data

Especially if your customer is a business.
And with consent you can prove for individuals

Try it or book a 15-minute demo

Free for your users.
Pay only if successful.

Pro
€1per transfer
Pack of 100 mandates
  • One mandate for all of a client's companies
  • Recurring requests on the same mandate
  • Registered-mail follow-ups and legal team
Scale
€0.50per transfer
Pack of 1,000 mandates
  • Everything in Pro
  • Half the price per client file

Need fewer than 100? Contact us for smaller packs.

FAQ

What does Datajoy do?

Companies hold a lot of data about youFor lawyers, this usually corresponds to:Personal data of the data subject (GDPR and Data Governance Act)Product data and related service data of the user (Data Act)Data of the end user (DMA). The law says you can get a copyFor lawyers, this usually corresponds to:Right of access (GDPR)Right of the user to access data (Data Act), or have it sent to another companyFor lawyers, this usually corresponds to:Right to data portability, direct transmission (GDPR)Right to share data with third parties (Data Act)Effective data portability for end users (DMA). In practice that means writing to each company, proving who you are, and chasing them for weeks.

Datajoy does that for you. You choose which companies have your dataFor lawyers, this usually corresponds to:Data controller (GDPR)Data holder (Data Act and Data Governance Act)Gatekeeper (DMA), for designated platforms such as Google and where it should goFor lawyers, this usually corresponds to:Recipient, which becomes a data controller in its own right (GDPR)Data user (Data Governance Act)Data recipient (Data Act)Third party authorised by the end user (DMA). You sign one mandateFor lawyers, this usually corresponds to:Mandate, power of attorney (civil law)Exercise of data subject rights through an authorised third party (GDPR, EDPB Guidelines 01/2022)Party acting on behalf of a user (Data Act). We send the requests, check that the companies answer, and follow up when they don't.

We're changing the system so that, in the future, we'll ask you to sign a mandate only when it's needed.

Link to this answer
What is a mandate?

A signed document that lets Datajoy act for youFor lawyers, this usually corresponds to:Mandate, power of attorney (civil law)Exercise of data subject rights through an authorised third party (GDPR, EDPB Guidelines 01/2022)Party acting on behalf of a user (Data Act), only within limits you set. It names:

  • the companies we may askFor lawyers, this usually corresponds to:Data controller (GDPR)Data holder (Data Act and Data Governance Act)Gatekeeper (DMA), for designated platforms such as Google
  • the data we may ask for
  • the companies that may receive itFor lawyers, this usually corresponds to:Recipient, which becomes a data controller in its own right (GDPR)Data user (Data Governance Act)Data recipient (Data Act)Third party authorised by the end user (DMA)
  • how long it lasts

We can't do anything that isn't written in it. You can read it online at any time, and you can stop itFor lawyers, this usually corresponds to:Revocation of the mandate (civil law)Withdrawal of consent, without effect on processing already done (GDPR)Tools to give and withdraw consent (Data Governance Act).

Link to this answer
Does it cost me anything?

No. You pay nothing, now or later. Datajoy focuses only on cases where companies can't charge you. It's free under EU lawFor lawyers, this usually corresponds to:Free of charge for the data subject (GDPR)Free of charge for the user (Data Act).

Link to this answer
Then how does Datajoy make money?

From the service, never from your data.

Datajoy is a trusted EU Recognised Data IntermediaryFor lawyers, this usually corresponds to:Label "data intermediation services provider recognised in the Union" and the common logo (Data Governance Act; Implementing Regulation (EU) 2023/1622). That label comes with strict rules, and the main one is this: we can't use your data for anything elseFor lawyers, this usually corresponds to:Ban on using intermediated data for other purposes (Data Governance Act)Purpose limitation (GDPR). Not to sell it, not to profile you, not to build other products. A public authority checks that we follow them.

So the only way we earn money is the service itself. A business that wants to receive your dataFor lawyers, this usually corresponds to:Recipient, which becomes a data controller in its own right (GDPR)Data user (Data Governance Act)Data recipient (Data Act)Third party authorised by the end user (DMA) with your permission pays a fee for each mandate. For example, a broker who needs your current insurance contracts to find you a cheaper one.

Link to this answer
If the company receiving my data pays you, whose side are you on?

We're neutral. But when a data intermediary serves individuals, it must act in their best interestFor lawyers, this usually corresponds to:Fiduciary duty to act in the data subjects' best interest (Data Governance Act). That's a legal duty, not a slogan. In practice:

  • We send only what your mandate lists. A paying company can't ask us for more.
  • You can stop your mandateFor lawyers, this usually corresponds to:Revocation of the mandate (civil law)Withdrawal of consent, without effect on processing already done (GDPR)Tools to give and withdraw consent (Data Governance Act) at any time without asking anyone.
  • We're paid for the boring legal and admin work of moving data around, not to collect data or sell it. Our mandate even says in writing that we can't sell it. And we favour technical and legal approaches where we never see your data at all.
Link to this answer
Is Datajoy regulated?

Yes. Datajoy is an EU Recognised Data IntermediaryFor lawyers, this usually corresponds to:Label "data intermediation services provider recognised in the Union" and the common logo (Data Governance Act; Implementing Regulation (EU) 2023/1622). The EU created this label and its logo so that people can spot trusted data intermediariesFor lawyers, this usually corresponds to:Data intermediation services provider (Data Governance Act). Only a service that follows the EU's rules may use them, and a public authority checks that it does.

Those rules: we stay neutralFor lawyers, this usually corresponds to:Neutrality and structural separation through a separate legal person (Data Governance Act), we use your data only to carry out your mandateFor lawyers, this usually corresponds to:Ban on using intermediated data for other purposes (Data Governance Act)Purpose limitation (GDPR), and we keep a record of everything we do with itFor lawyers, this usually corresponds to:Logging of data intermediation activity (Data Governance Act)Accountability (GDPR).

You can check us yourself: Datajoy is listed under BelgiumFor lawyers, this usually corresponds to:Notification to the competent authority; entry in the Union register of data intermediation services (Data Governance Act) in the European Commission's public register of data intermediaries.

Datajoy, Belgian company no. 1022271122, 7 rue Sainte-Gertrude, 1040 Brussels.

EU Recognised Data Intermediary
Link to this answer
Is Datajoy ready to use?

Anyone can use it today. But it's early, and it changes on most days. Bugs are very likely.

That's why, for now, a person at Datajoy checks every request before a mandate is sent to a companyFor lawyers, this usually corresponds to:Human review; no decision based solely on automated processing (GDPR). If something breaks, it's always been caught before causing any harm.

Right now we mostly want feedback. Above all from lawyers, privacy experts and security experts, and from anyone curious who's happy to use something that is still being built. If something looks wrong or unclear, tell us at hello@datajoy.eu or call us at +32497864248.

Link to this answer
What do I have to do?

It takes a few minutes:

  1. Pick the companies that have your dataFor lawyers, this usually corresponds to:Data controller (GDPR)Data holder (Data Act and Data Governance Act)Gatekeeper (DMA), for designated platforms such as Google (up to 10).
  2. Pick who should receive itFor lawyers, this usually corresponds to:Recipient, which becomes a data controller in its own right (GDPR)Data user (Data Governance Act)Data recipient (Data Act)Third party authorised by the end user (DMA), and which data each one gets (up to 10).
  3. Enter your phone number and email addresses.
  4. Read the terms and sign the mandate with your digital IDFor lawyers, this usually corresponds to:Qualified electronic signature, QES (eIDAS).
  5. Prove that the email addresses and phone are yoursFor lawyers, this usually corresponds to:Verification of the data subject's identity by the controller (GDPR).

Then we take over.

We're working hard so that in the future, you won't always need to give your email, phone, create a mandate, nor prove you own an email or phone number.

Link to this answer
Why do I sign with my digital ID?

Because companies must be sure the request really comes from youFor lawyers, this usually corresponds to:Verification of the data subject's identity by the controller (GDPR). Otherwise anyone could ask for your data.

The signature you make with your digital IDFor lawyers, this usually corresponds to:Qualified electronic signature, QES (eIDAS) has the same legal force as your handwritten one, everywhere in the EU. So a company can't brush the mandate aside as unsigned.

Link to this answer
Why do you need my email addresses and phone number?

Because that's how companiesFor lawyers, this usually corresponds to:Data controller (GDPR)Data holder (Data Act and Data Governance Act)Gatekeeper (DMA), for designated platforms such as Google find you in their systems. Your name alone doesn't tell them which customer you are.

So we ask for the addresses and number you use with them, and you prove they're yoursFor lawyers, this usually corresponds to:Verification of the data subject's identity by the controller (GDPR). You send a short email to verify@datajoy.eu from each address, and you scan a QR code with your phone. This stops someone else from using your email to get your data.

Link to this answer
How long does it take?

Companies must send your data as soon as they canFor lawyers, this usually corresponds to:Without undue delay (GDPR; Data Act), and at the latest within one monthFor lawyers, this usually corresponds to:Time limit to act on a data subject request, extendable by two months (GDPR). A month is the limit, not the target: if they can do it faster, they mustFor lawyers, this usually corresponds to:Where the information can be provided in less than one month, the controller should do so (EDPB Guidelines 01/2022 on the right of access).

Only for a complex requestFor lawyers, this usually corresponds to:Extension of the time limit by two further months, taking into account the complexity and number of requests (GDPR) may a company take two more months, and it must tell you why within the first month. Having a lot of work isn't enough to make a request complex.

For some data the law asks for more: data from connected productsFor lawyers, this usually corresponds to:Connected product and related service (Data Act) and from the biggest platformsFor lawyers, this usually corresponds to:Gatekeeper (DMA)Data holder (Data Act); note: a gatekeeper cannot be a data recipient under the Data ActData controller (GDPR), like Google, should be available continuously and in real timeFor lawyers, this usually corresponds to:Continuous and real-time access (Data Act, where technically feasible; DMA).

We track the deadline and follow up.

Link to this answer
What if a company ignores the request, refuses, or doesn't answer completely within a week?

By default, we then ask the data to be sent to Datajoy who will pass the data on to the recipient(s) you selected. You can of course choose that your data never passes through Datajoy and only goes to the recipient directly. That's how we started out, but we found that doesn't work much in practice.

Link to this answer
Does my data pass through Datajoy?

We prefer not. We prefer the company that has your dataFor lawyers, this usually corresponds to:Data controller (GDPR)Data holder (Data Act and Data Governance Act)Gatekeeper (DMA), for designated platforms such as Google to send it straight to the company you choseFor lawyers, this usually corresponds to:Recipient, which becomes a data controller in its own right (GDPR)Data user (Data Governance Act)Data recipient (Data Act)Third party authorised by the end user (DMA).

We receive it only in two cases:

  • the company holding it refuses or can't send it to the recipient directly.
  • the company misses the legal deadlineFor lawyers, this usually corresponds to:Time limit to act on a data subject request, extendable by two months (GDPR) or doesn't send it completely.

Then we pass it on and delete our copy within 30 daysFor lawyers, this usually corresponds to:Storage limitation (GDPR).

Link to this answer
How does it work with Google?

Google is Datajoy's first direct integration. As one of the biggest platformsFor lawyers, this usually corresponds to:Gatekeeper (DMA)Data holder (Data Act); note: a gatekeeper cannot be a data recipient under the Data ActData controller (GDPR), it hands over your data faster to services you authoriseFor lawyers, this usually corresponds to:Third party authorised by the end user (DMA)Data intermediation service (Data Governance Act).

So when you pick Google, you sign in to Google and choose what to share, for example your YouTube history or Maps. Datajoy downloads it, sends it to your recipients, and deletes its copy within 30 daysFor lawyers, this usually corresponds to:Storage limitation (GDPR). You can withdraw Google accessFor lawyers, this usually corresponds to:Revocation of the mandate (civil law)Withdrawal of consent, without effect on processing already done (GDPR)Tools to give and withdraw consent (Data Governance Act) at any time, and we then delete what we hold from it.

Link to this answer
Who can see my mandate?

Your mandate has its own web page. The link and a QR code are on the signed PDF.

Anyone with the link sees only its outlineFor lawyers, this usually corresponds to:Data minimisation; data protection by design and by default (GDPR): which companies, which kinds of data, and whether it's active. Your name, emails and phone are mostly hidden (****).

A company named in your mandateFor lawyers, this usually corresponds to:Data controller (GDPR)Data holder (Data Act and Data Governance Act)Gatekeeper (DMA), for designated platforms such as Google sees your details only after one of its contacts we have on file signs in through a one-time link. We record every piece of data they request while checking your request.

Link to this answer
Will the companies in my mandate see each other?

Yes, within one mandate. Every company named in itFor lawyers, this usually corresponds to:Data controller (GDPR)Data holder (Data Act and Data Governance Act)Gatekeeper (DMA), for designated platforms such as Google can see the other companies and what each one receives.

If that bothers you, create separate mandates, one per company. For example, if you don't want your insurer to know which shop you go to. It does take longer.

Link to this answer
How long does my mandate last?

At least one month. If you chose to share data for longerFor lawyers, this usually corresponds to:Scope of the mandate (civil law)A specified transfer from a controller to a recipient (GDPR), for example 6 months, it lasts that long.

If a company doesn't answer completely within the legal deadlineFor lawyers, this usually corresponds to:Time limit to act on a data subject request, extendable by two months (GDPR), your mandate is extended by 18 monthsFor lawyers, this usually corresponds to:Extension of the term of the mandate under its expiry clause (civil law). That gives us time to keep chasing that company. Your online mandate page shows the dates.

Link to this answer
Can I stop or change my mandate?

Yes. Sign in on your mandate page and revoke itFor lawyers, this usually corresponds to:Revocation of the mandate (civil law)Withdrawal of consent, without effect on processing already done (GDPR)Tools to give and withdraw consent (Data Governance Act). It stops at once for the future. You can also shorten it there.

Stopping doesn't undo transfers already made. To have data deleted at a company that received itFor lawyers, this usually corresponds to:Recipient, which becomes a data controller in its own right (GDPR)Data user (Data Governance Act)Data recipient (Data Act)Third party authorised by the end user (DMA), ask that company, or ask us to ask for youFor lawyers, this usually corresponds to:Right to erasure, "right to be forgotten" (GDPR).

Link to this answer
What about sensitive data, like health?

Some data is especially sensitiveFor lawyers, this usually corresponds to:Special categories of personal data (GDPR): health, religion, sexual life, and a few others. If you choose to send it, we ask you to confirm that separatelyFor lawyers, this usually corresponds to:Explicit consent (GDPR), and we record that you did.

Link to this answer
What does Datajoy keep about me, and for how long?

What we need to prove what you authorised: the signed mandate, your name and date of birth from your digital ID, your email addresses and phone number, the proof that they're yours, and a log of every action on your mandate.

We don't keep passwords or payment details.

We keep the signed mandate as long as it could be needed as evidenceFor lawyers, this usually corresponds to:Retention for the establishment, exercise or defence of legal claims (GDPR). The rest is deleted soonerFor lawyers, this usually corresponds to:Storage limitation (GDPR). The exact periods are in our privacy policy.

Link to this answer
How do I see, correct or delete what Datajoy holds about me?

To see, correct or delete itFor lawyers, this usually corresponds to:Rights of access, rectification and erasure (GDPR), write to privacy@datajoy.eu. We answer within one monthFor lawyers, this usually corresponds to:Time limit to act on a data subject request, extendable by two months (GDPR) and often within the same day. You can also see your mandate and its history on your mandate page at any time.

Link to this answer
Can I use Datajoy from any EU country?

Yes. The GDPR gives you the same rights in every EU country, and the mandate works across the EU.

Our list of companies covers Belgium, France and Italy for now.

Link to this answer
Do I have to be 18?

Yes. A mandate signed by someone under 18 isn't validFor lawyers, this usually corresponds to:Lack of legal capacity of a minor (national civil law), and we send nothing.

Link to this answer
Do the brands on your site work with you?

No. Datajoy is independent. We show logos so you can find the companies that hold your data. It doesn't mean they work with us or endorse usFor lawyers, this usually corresponds to:No affiliation; referential use of a trade mark (EU Trade Mark Regulation).

Link to this answer

Didn't find your answer? Write to hello@datajoy.eu or call +32 497 86 42 48.

Book a 15-minute demo