Your data rights
The rights the GDPR gives you over your personal data and how to exercise them with Gapfy.
Last updated: 14 June 2026
1. Your rights
If the GDPR applies to the processing of your personal data, you have the following rights, subject to the conditions and exceptions in the Regulation:
- Access - obtain confirmation of whether we process your data and a copy of it.
- Rectification - have inaccurate or incomplete data corrected.
- Erasure - have your data deleted where there is no overriding reason to keep it.
- Restriction - limit how we use your data in certain circumstances.
- Portability - receive data you provided in a structured, commonly used, machine-readable format, or have it transmitted to another controller.
- Objection - object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent - where processing is based on consent, withdraw it at any time without affecting prior processing.
- Automated decisions - not be subject to a decision based solely on automated processing that produces legal or similarly significant effects; we do not carry out such processing.
2. How to make a request
Send your request to privacy@gapfy.io and tell us which right you want to exercise. We may need to verify your identity before acting. We respond within one month; for complex or numerous requests we may extend this by up to two further months and will tell you if we do. Exercising your rights is free unless a request is manifestly unfounded or excessive.
3. If your data is held inside an organisation's workspace
When you use our products through an employer or another organisation, that organisation is the controller of the data in its workspace and Gapfy acts as its processor. In that case we will refer your request to the organisation and assist it in responding. Contact the organisation directly, or write to us and we will route your request.
4. Complaints
If you believe we have not handled your data correctly, please contact us first so we can put it right. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissao Nacional de Proteccao de Dados (CNPD, www.cnpd.pt), or with the data-protection authority in your country of residence or work.
5. Contact
Our data-protection contact point is privacy@gapfy.io. For more detail on what we process and why, see our Privacy policy.
This English-language version is the authoritative, legally binding version of this document. Translations are provided for convenience only.