GDPR Compliance

Your data protection rights under the General Data Protection Regulation

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that gives you control over your personal data. It applies to all EU citizens and companies processing their data.

Key Principles:

  • • Lawfulness, fairness, and transparency
  • • Purpose limitation
  • • Data minimization
  • • Accuracy
  • • Storage limitation
  • • Integrity and confidentiality

Your GDPR Rights

Right to Access

You have the right to request a copy of all personal data we hold about you.

What you'll receive:

  • • All personal data we process
  • • Purpose of processing
  • • Categories of data
  • • Recipients of your data
  • • Data retention periods

Right to Data Portability

You can request your data in a structured, machine-readable format.

Available formats:

  • • JSON format
  • • CSV format
  • • XML format
  • • Direct transfer to another service

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

How to update:

  • • Update your profile in dashboard
  • • Contact us for manual updates
  • • We'll process within 30 days

Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances.

When applicable:

  • • Data no longer necessary
  • • Consent withdrawn
  • • Unlawful processing
  • • Legal obligation fulfilled

Right to Restrict Processing

You can limit how we process your data in certain situations.

When you can restrict:

  • • Contesting data accuracy
  • • Unlawful processing
  • • No longer need data but required for legal claims
  • • Objection to processing

How to Exercise Your Rights

Contact Information:

Email:

gdpr@bookrapidly.com

For all GDPR-related requests

Response Time:

Within 30 days

We may extend to 60 days if complex

Required Information:

  • • Your full name and email address
  • • Specific right you want to exercise
  • • Description of your request
  • • Any relevant account information

Data Processing Information

Legal Basis:

  • • Contract performance
  • • Legitimate interests
  • • Consent (for marketing)
  • • Legal obligations

Data Retention:

  • • Account data: Until deletion
  • • Booking data: 7 years
  • • Analytics: 2 years
  • • Marketing: Until consent withdrawn

Data Protection Officer

While not legally required for our size, we have appointed a Data Protection Officer to ensure compliance with GDPR requirements.

Contact DPO:

dpo@bookrapidly.com

For complex data protection matters

Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority.

EU Data Protection Authorities:

Find your local authority at: edpb.europa.eu

© 2025 BookRapidly. All rights reserved.