GDPR Data Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent local legislation. This page explains those rights and how to exercise them.

Data we hold about you

O2O Blog holds minimal personal data. Depending on how you have interacted with the site, this may include: your email address (if you subscribed to the newsletter or submitted a contact form); your IP address and browser metadata (retained in server logs for a maximum of 30 days); and cookie preference state (stored locally in your browser, not on our servers).

The interactive tools on this site do not collect or transmit any data. All tool calculations occur in your browser.

Your rights under GDPR

Right of access. You can request a copy of any personal data we hold about you. We will respond within 30 days.

Right to rectification. If any data we hold about you is inaccurate or incomplete, you can ask us to correct it.

Right to erasure. You can ask us to delete your personal data. We will comply unless we have a legal obligation to retain it.

Right to restrict processing. You can ask us to stop processing your data while retaining it — for example, while a dispute about accuracy is resolved.

Right to data portability. Where processing is based on consent or contract, you can ask for your data in a structured, machine-readable format.

Right to object. You can object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds.

Right to withdraw consent. Where processing is based on consent (e.g. newsletter subscription), you can withdraw consent at any time without affecting the lawfulness of prior processing.

How to exercise your rights

Send requests to [email protected]. We will respond within 30 days. We may ask for verification of your identity before processing the request.

To unsubscribe from the newsletter, use the unsubscribe link in any newsletter email — you do not need to contact us separately.

Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the relevant supervisory authority in your country of residence. In the EU, this is the data protection authority of your member state. In the UK, this is the Information Commissioner's Office (ICO).

Legal basis for processing

Newsletter subscriptions: consent (Article 6(1)(a)). Contact form submissions: legitimate interest in responding to enquiries (Article 6(1)(f)). Server logs: legitimate interest in site security and performance monitoring (Article 6(1)(f)).