Your Data Rights
Your Data Rights Under GDPR
Last updated: August 29, 2025
Under the European Union's General Data Protection Regulation (GDPR), you have specific rights regarding your personal data. This page explains these rights and how to exercise them.
1. Your Rights Under GDPR
Right to Access
You have the right to request a copy of the personal data we hold about you, along with information about how we process it.
Right to Rectification
You can request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure (Right to be Forgotten)
You can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You can request that we limit how we use your personal data in certain situations.
Right to Data Portability
You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You can object to our processing of your personal data in certain circumstances, particularly for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that significantly affects you.
2. How to Exercise Your Rights
To exercise any of these rights, please contact us using one of the following methods:
Email: privacy@riderw.in
Postal Address: RiderWin Labs OÜ, Tööstuse 75-71, Tallinn, Estonia
What We Need from You
When making a request, please provide:
- Your full name and contact information
- A description of the right you want to exercise
- Any relevant details about your request
- Proof of your identity (to protect your data)
Response Time
We will respond to your request within 30 days of receiving it. If we need more time, we will notify you and explain why.
3. Data Processing Information
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data
- Contract: Processing is necessary for the performance of a contract
- Legal Obligation: Processing is necessary for compliance with a legal obligation
- Legitimate Interest: Processing is necessary for our legitimate interests
Data Retention
We retain your personal data only for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
4. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Binding Corporate Rules (BCRs)
5. Supervisory Authority
If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate:
Estonian Data Protection Inspectorate
Tatari 39, 10134 Tallinn, Estonia
Email: info@aki.ee
Website: www.aki.ee
You also have the right to contact your local data protection authority if you are located in another EU member state.
6. Data Protection Officer
For complex data protection inquiries, you can contact our Data Protection Officer:
Email: dpo@riderw.in
7. Updates to This Page
We may update this page from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes.
This page is compliant with EU GDPR requirements and Estonian data protection laws.