Your GDPR Rights
Under the General Data Protection Regulation, you have powerful rights over your personal data. This page explains those rights clearly and tells you how to exercise each one.
Last updated: 1 April 2026
Your Rights Under GDPR
The GDPR grants you the following rights. Click the action button on each right to exercise it.
Right to Access
Article 15Know what data we hold about you
You have the right to obtain confirmation that we are processing your personal data, and to receive a copy of that data along with information about how and why we process it. We will respond to access requests within 30 days.
Right to Rectification
Article 16Correct inaccurate information
If we hold inaccurate or incomplete personal data about you, you have the right to have it corrected without undue delay. For most data (name, email, address), you can update this directly in your Arbicle account settings.
Update Your ProfileRight to Erasure
Article 17Right to be Forgotten
You can request that we delete your personal data where it is no longer necessary for the purpose it was collected, you withdraw consent, or you object to processing and there are no legitimate grounds for continuing. Note that some data may be retained for legal compliance (e.g., financial records for Revenue).
Request Account DeletionRight to Restrict Processing
Article 18Pause how we use your data
If you contest the accuracy of your data, object to our processing, or believe processing is unlawful but don't want it deleted, you can request that we restrict processing. We will only store the data and not process it further until the restriction is lifted.
Request RestrictionRight to Data Portability
Article 20Take your data with you
Where we process your data by automated means with your consent or on the basis of a contract, you have the right to receive your data in a structured, commonly used, and machine-readable format (JSON or CSV), and to transmit it to another controller.
Right to Object
Article 21Object to certain types of processing
You have the right to object to processing based on legitimate interests, and to object to direct marketing at any time. If you object to direct marketing, we will stop immediately. For other processing, we will stop unless we can demonstrate compelling legitimate grounds.
Opt Out of MarketingRights Related to Automated Decision Making
Article 22Human review of automated decisions
Where we make decisions about you solely by automated means (including profiling) that have a significant effect on you, you have the right not to be subject to that decision. You can request human review of any automated decision made about you by Arbicle.
Request Human ReviewData Retention Periods
We only keep your data for as long as necessary. Here is how long we retain different categories of personal data and why.
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account data (name, email, phone) | Duration of account + 12 months after closure | Contract |
| Listing and booking history | 6 years after tenancy ends | Legal obligation (Revenue) |
| Payment transaction records | 7 years | Legal obligation (Companies Act) |
| Identity verification documents | 5 years after account closure | Legal obligation (AML regulations) |
| Support and communication records | 3 years after last contact | Legitimate interests |
| Marketing preferences and history | Until you opt out + 12 months | Consent |
| Analytics data (anonymised) | 26 months | Legitimate interests |
| CCTV (if applicable) | 30 days | Legitimate interests (security) |
Contact Our Data Protection Officer
To exercise any of your GDPR rights, or if you have any questions about how we handle your personal data, contact our Data Protection Officer (DPO):
Supervisory Authority
Data Protection Commission
dataprotection.ieIreland's national data protection authority.
How to Make a Complaint
If you are not satisfied with how we have handled your personal data or responded to a rights request, you have the right to lodge a complaint with the Data Protection Commission (DPC) Ireland. The DPC is the lead supervisory authority for data protection in Ireland.
Step 1: Contact us first at hello@arbicle.com — we aim to resolve all concerns within 30 days.
Step 2: If unresolved, file a complaint with the DPC at dataprotection.ie or call 01 765 0100.
For the full details of how we collect, use, and protect your personal data, please read our Privacy Policy.