GDPR & Your Rights
A plain-language guide to your data-protection rights and how to use them.
This page is a plain-language companion to our Privacy Policy, focused on the rights the GDPR gives you and exactly how to exercise them.
1. Who controls your data In short Otto & Best Limited, based in Ireland. Contact [email protected].
The data controller is Otto & Best Limited, registered in Ireland under company number 680594. For any data-protection request, contact [email protected].
2. Why we process your data In short To provide the service (contract), keep it safe and improve it (legitimate interests), run consent-based analytics, and meet legal obligations.
We process personal data on the bases set out in section 4 of the Privacy Policy: performance of our contract with you, our legitimate interests, your consent, and legal obligations.
3. Your rights in detail In short You can access, correct, delete, restrict, port, and object to processing of your data, and withdraw consent. You can do this at any time, for free.
- Access: get a copy of the personal data we hold about you. Settings → Your data → Download my data gives you a file immediately, covering your profile, your alerts and their history, your notification history, your devices, your searches, your feedback and your account activity. It does not cover our product-usage analytics, push-delivery and app-update telemetry, or billing records. Email [email protected] and we will send you those too.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: have your data deleted ("right to be forgotten"). You can delete your account in the app. The record is erased 30 days later, and you can cancel from inside the app at any point in those 30 days.
- Restriction: ask us to pause processing while a concern is resolved.
- Portability: receive your data in a portable format. The in-app download is machine-readable JSON. We can also send it to another provider where that is technically feasible.
- Objection: object to processing based on legitimate interests, including any profiling.
- Withdraw consent: where we rely on consent (such as analytics), withdraw it at any time without affecting past processing.
4. How to exercise them In short Email [email protected]. We respond within one month, free of charge.
Email [email protected] and tell us which right you want to use. We will respond within one month (extendable by two months for complex requests, which we'll tell you about). There's no charge unless a request is clearly unfounded or excessive. We may need to verify your identity first.
5. Automated decisions In short We don't make decisions with legal or similarly significant effects about you by automated means. Matching events to your filters isn't that.
We do not make decisions that produce legal or similarly significant effects about you solely by automated means. Matching incoming events to the filters you set up is an ordinary part of the service you request, not automated decision-making of that kind.
6. Complaints In short You can complain to your local data-protection authority.
If you're unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to lodge a complaint with Ireland's Data Protection Commission (DPC), or the authority in the EU country where you live or work.
7. International transfers In short Data is stored in the United Kingdom under the UK adequacy decision. Where a processor is outside the EEA, Standard Contractual Clauses protect it.
See section 7 of the Privacy Policy: our servers are in the United Kingdom, and any processing outside the EEA is protected by Standard Contractual Clauses or an adequacy decision.
Last updated 2026年9月13日. See all our legal pages.