Your GDPR Rights
The General Data Protection Regulation (GDPR) gives you specific rights over your personal data. Below is a plain English explanation of each right and how to exercise it with RapidLaunch.
You can exercise most rights online using our Data Request Form. We will respond to all requests within 30 days as required by law.
1. Right of Access (Article 15)
What it means: You have the right to know whether we hold personal data about you and to request a copy of that data.
What you get: A full report containing all personal data we hold, the purposes of processing, categories of data, any third parties with whom it has been shared, and retention periods.
How to exercise: Submit an Access Request
2. Right to Rectification (Article 16)
What it means: If the data we hold about you is inaccurate or incomplete, you can ask us to correct it.
Examples: Wrong name, outdated email address, incorrect phone number.
How to exercise: Email dpo@rapidlaunch.ie with subject "Rectification Request" and specify the data to be corrected. We will update our records within 30 days and confirm the changes.
3. Right to Erasure — "Right to Be Forgotten" (Article 17)
What it means: You can request that we delete all personal data we hold about you.
When it applies: The data is no longer needed; you withdraw consent; you object and there are no overriding legitimate grounds; the data was unlawfully processed; or we have a legal obligation to erase it.
Exceptions: We may retain data where required by law (e.g., billing records for 7 years) or for legal claims.
How to exercise: Submit an Erasure Request
4. Right to Restrict Processing (Article 18)
What it means: You can ask us to limit how we use your data without deleting it.
When it applies: You contest the accuracy of the data; the processing is unlawful but you oppose erasure; we no longer need the data but you need it for a legal claim; or you have objected to processing pending verification.
What happens: Your data is marked restricted and can only be stored (not further processed) without your consent.
How to exercise: Email dpo@rapidlaunch.ie with subject "Restriction Request" and specify the data and grounds for restriction.
5. Right to Data Portability (Article 20)
What it means: You can request a copy of your data in a structured, commonly used, machine-readable format and have it transmitted to another controller.
Format: We will provide your data as a JSON or CSV export.
How to exercise: Submit a Portability Request
6. Right to Object (Article 21)
What it means: You can object to processing based on legitimate interests, including direct marketing.
What happens: We will stop processing your data for the specified purpose unless we demonstrate compelling legitimate grounds that override your interests.
Marketing: You can object to direct marketing at any time. We will stop immediately.
How to exercise: Email dpo@rapidlaunch.ie with subject "Objection Request" or manage marketing preferences via Consent Preferences.
7. Right to Withdraw Consent (Article 7)
What it means: Where processing is based on your consent, you can withdraw that consent at any time.
What happens: Withdrawal does not affect the lawfulness of processing before withdrawal. After withdrawal, we will stop processing your data for the consented purpose.
How to exercise: Manage Consent Preferences
Filing a Complaint
If you are not satisfied with how we have handled your data or responded to your request, you have the right to lodge a complaint with the Irish Data Protection Commission:
- Website: www.dataprotection.ie
- Address: Data Protection Commission, 21 Fitzwilliam Square, Dublin 2, D02 RD28, Ireland
- Phone: +353 57 868 4800
- Email: info@dataprotection.ie
We ask that you contact us first so we can resolve any issues directly. You can reach our Data Protection Officer at dpo@rapidlaunch.ie.