GDPR Data Rights

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access (Art. 15) — Request a copy of all personal data we hold about you. Registered users can export their data from Settings > Data & Privacy.
• Right to Rectification (Art. 16) — Correct inaccurate or incomplete data via your profile settings.
• Right to Erasure (Art. 17) — Request deletion of your personal data. Registered users can delete their account from Settings. Guests can use the form below.
• Right to Restrict Processing (Art. 18) — Request that we limit how we process your data in certain circumstances.
• Right to Data Portability (Art. 20) — Receive your data in a structured, machine-readable format (JSON/CSV export available in Settings).
• Right to Object (Art. 21) — Object to processing based on legitimate interests. We will cease processing unless we have compelling legitimate grounds.
• Right to Withdraw Consent (Art. 7) — Withdraw consent for analytics cookies at any time via the “Manage Cookies” link in the footer. Disconnect calendar integrations from Settings.
• Right to Lodge a Complaint — You may file a complaint with your local data protection authority. Our supervisory authority is ANSPDCP (Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucuresti, Romania. www.dataprotection.ro

How We Handle Requests

We respond to all data rights requests within 30 days of receipt, as required by GDPR Art. 12(3). If a request is complex or we receive a high volume, we may extend this by an additional 60 days with notice to you. All requests are processed free of charge unless they are manifestly unfounded or excessive.

To verify your identity, we may ask you to confirm the email address associated with your data. Guest deletion requests require email verification via a confirmation link.

Guest Data Deletion Request

If you have booked a meeting through PickASlot and would like your personal data removed, enter your email address below. We will send a verification link to confirm the deletion.

Upon confirmation, your booking records will be anonymized: your name, email, and timezone will be replaced with placeholder values. The meeting host will no longer see your personal information. Meeting records are retained in anonymized form for the host's financial records.

For Registered Users

If you have a PickASlot account, you can exercise your rights directly:

• Export your data — Settings > Data & Privacy > Download (JSON or CSV)
• Edit your profile — Settings > Profile
• Delete your account — Settings > Delete Account (immediate permanent deletion)
• Manage cookie consent — Click “Manage Cookies” in the page footer

Data Controller

PickASlot is operated by CMD CYBERSPACE SOFTWARE SOLUTIONS SRL, CUI 46891247, registered in Romania. For any data protection inquiries, contact us at privacy@pickaslot.io.

For full details on how we collect, use, and protect your data, please read our Privacy Policy.