Understanding your privacy rights under GDPR and how NoMondays protects your personal information
The General Data Protection Regulation (GDPR) gives you powerful rights over your personal data. Here's what you can do and how to do it.
You have the right to request a copy of all personal data we hold about you. We'll provide it in a clear, structured format.
Email us at privacy@nomondays.io with "Data Access Request" in the subject line
If any of your personal information is inaccurate or incomplete, you can request that we correct or complete it.
Update your profile directly or email privacy@nomondays.io with the corrections
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances.
Email privacy@nomondays.io with "Delete My Data" in the subject line
You can ask us to limit how we use your data while we verify its accuracy or assess your objection to processing.
Contact privacy@nomondays.io explaining why you want processing restricted
Request your data in a machine-readable format so you can move it to another service provider if you choose.
Email privacy@nomondays.io requesting a data export in JSON or CSV format
You can object to processing of your data for direct marketing purposes or when we process it based on legitimate interests.
Email privacy@nomondays.io stating your objection and the reason
We collect:
For full details, see our Privacy Policy.
Account data: Retained as long as your account is active, plus 30 days after deletion
Application history: Kept for 2 years for service improvement
Technical/cookie data: Varies by type (session cookies to 2 years)
Marketing data: Until you unsubscribe or object
You can request earlier deletion by exercising your Right to Erasure.
We share data only when necessary:
We never sell your personal data to third parties.
You can withdraw consent at any time:
Withdrawing consent doesn't affect the lawfulness of processing before withdrawal.
We aim to respond to all GDPR requests within 30 days of receiving your request.
In complex cases, we may extend this by an additional 60 days, but we'll let you know if that's necessary.
For urgent requests (e.g., security concerns), contact us at privacy@nomondays.io and mark it "URGENT."
You have the right to lodge a complaint with a supervisory authority:
We encourage you to contact us first at privacy@nomondays.io so we can try to resolve any issues.
Send your GDPR request to privacy@nomondays.io. Include your registered email address so we can verify your identity.
We verify your identity to protect your data. This may involve confirming account details or asking security questions.
Our privacy team reviews and processes your request in accordance with GDPR requirements.
We respond within 30 days with the requested information, confirmation of action taken, or an explanation if we can't fulfill the request.
Ready to take control of your personal data? Whether you want to access, update, delete, or export your information, we're here to help you exercise your GDPR rights.
Data Protection Officer: privacy@nomondays.io
Last Updated: September 11, 2026 |
Legal Notice |
Cookie Policy