Your rights over your personal data

• Access (Art. 15) – find out what data we hold about you and why, and get a copy.
• Rectification (Art. 16) – correct or complete your data.
• Erasure (Art. 17) – ask us to delete your data, for example when it is no longer needed or you withdraw consent.
• Restriction (Art. 18) – ask us to limit processing, for example while we check the accuracy of the data.
• Portability (Art. 20) – receive your data in a structured format (JSON) and pass it to another controller.
• Objection (Art. 21) – object to processing based on our legitimate interest and, at any time, to direct marketing.
• Withdrawing consent – for statistics (cookies) and marketing messages, at any time, without affecting earlier processing.
• Complaint – you can turn to a data protection authority or to the courts (see below).

Directly from your account

• “Download my data” – download a JSON file with your account data from the account settings;
• “Delete account” – the account is deactivated immediately and personal data is anonymised and erased within 30 days; if you have a shop in your account, you delete the shop first, from its Settings;
• you can correct your profile and car details at any time from your account;
• you can switch off statistics (Google Analytics) at any time in Cookie settings.

A shop's data and any other request: by email

Write to privacy@carix.app, preferably from your account's email address. Tell us which right you want to exercise and, where relevant, which data the request concerns. If we cannot confirm your identity, we may ask you for additional information.

For data sent to a shop in a booking request, you can also contact the shop directly, as it is an independent controller for its own records.

We reply without undue delay and within one month of receiving your request. For complex or numerous requests this may be extended by two further months; in that case we tell you within the first month and explain why. Exercising your rights is free. Only for manifestly unfounded or excessive requests may we charge a reasonable fee or refuse, giving reasons.

If you are not satisfied with our reply, you can contact the lead supervisory authority for CariX, the Bulgarian Commission for Personal Data Protection (CPDP, www.cpdp.bg (ανοίγει σε νέα καρτέλα)), or the authority of the country where you live or work; in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro (ανοίγει σε νέα καρτέλα)). You can also go to court.

Data protection: privacy@carix.app.