GDPR Compliance

**Access and Portability:** Request a copy/export of your personal data.

**Rectification:** Correct inaccurate or incomplete data.

**Erasure:** Request account deletion, subject to legal retention duties.

**Restriction/Objection:** Limit or object to certain processing activities.

**Consent Withdrawal:** Withdraw consent at any time for consent-based processing.

Use in-app privacy/security controls where available (data export, deletion request, consent settings), or contact privacy@onlydeal.ro.

Standard response period is one month, extendable where legally permitted for complex requests.

We may request additional reasonable information to confirm identity and properly scope the request.

You have the right to lodge a complaint with your local data protection authority, including the authority in the EU member state of your habitual residence or workplace.

If you are in Romania, you may also contact the competent national data protection authority.

The exercise of certain rights may be limited where necessary to comply with legal obligations, prevent fraud, defend our rights or those of others, preserve transaction records, or resolve disputes.

Where we cannot fully comply with a request, we will explain the reasons to the extent required by law.