GDPR & your rights

1. Your rights at a glance

• Access — get a copy of the data we hold about you.
• Rectification — fix incorrect or incomplete data.
• Erasure ("right to be forgotten") — ask us to delete your data.
• Restriction — limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest, including profiling.
• Withdraw consent — at any time, where processing is based on consent.

2. How to make a request

Email privacy@rentshield.eu from the address on your account. We respond within 30 days (extendable by 60 days for complex requests, with notice). Requests are free of charge except for manifestly unfounded or excessive cases.

3. Data we process

See our Privacy Policy for the full list — including account data, rental evidence, billing records and technical telemetry.

4. Legal basis

• Contract (Art. 6(1)(b)) — to deliver the service you purchased.
• Legitimate interest (Art. 6(1)(f)) — fraud prevention, security, product analytics.
• Legal obligation (Art. 6(1)(c)) — accounting and tax records.
• Consent (Art. 6(1)(a)) — marketing emails and non-essential cookies.

5. International transfers

All personal data is processed and stored in the European Union. Where a sub-processor operates outside the EU/EEA, transfers are protected by Standard Contractual Clauses and adequate technical measures.

6. Data Protection Officer

Our Data Protection contact: dpo@rentshield.eu.

7. Supervisory authority

If you believe we have not handled your data properly, you have the right to lodge a complaint with the data protection authority in your EU country of residence.

8. Breach notification

In the unlikely event of a personal data breach that poses a high risk to your rights, we will notify both the supervisory authority within 72 hours and affected users without undue delay.