Your Data Rights (GDPR)
Last updated: February 27, 2026Version: 1.0
Summary
This page explains your rights regarding personal data under the GDPR, including the right to access, correct, delete, restrict, and port your data. It also covers how to withdraw consent, object to processing, and lodge complaints with a supervisory authority.
This page explains your rights regarding the personal data we hold about you, as guaranteed by the General Data Protection Regulation (EU) 2016/679 ("GDPR"). This is a practical, plain-language guide — for the full legal details, please see our Privacy Policy.
Data Controller: MB Bubba, MB (mažoji bendrija), Žirmūnų g. 57-50, LT-09110 Vilnius, Lithuania. Privacy Contact: privacy@bubba.pet
- Right of Access (Art. 15)
What it means: You have the right to obtain a copy of all personal data we process about you, along with information about how and why we process it.
How to exercise:
- In the app: Go to Settings → Privacy and tap "Download My Data". We will prepare a downloadable JSON export containing your account data, pet information, bookings, reviews, consent records, and other personal data.
- By email: Send a request to privacy@bubba.pet.
What you receive: A machine-readable JSON file with your complete personal data held on the platform. You will be notified when the export is ready for download.
- Right to Rectification (Art. 16)
What it means: You have the right to have inaccurate personal data corrected without undue delay. You also have the right to have incomplete data completed.
How to exercise:
- In the app: Edit your profile, pet information, or other personal details directly through the relevant app screens (Profile, Pet Management, etc.).
- By email: If you cannot correct data yourself, contact us at privacy@bubba.pet with the specific data that needs correction.
- Right to Erasure — "Right to Be Forgotten" (Art. 17)
What it means: You have the right to request the deletion of your personal data. This right is not absolute — we may retain certain data where required by law.
How to exercise:
- In the app: Go to Settings → Privacy and tap "Erase My Account". You will be asked to confirm your decision.
How it works:
- Your request is submitted and reviewed by our team.
- Upon approval, your personal data is anonymized across all platform records:
- All personally identifiable information (name, email, phone, etc.) is replaced with
[REDACTED]. - Your user identifier is replaced with a non-reversible
DELETED_USERplaceholder. - This anonymization covers your user profile, pets, orders, reviews, chat sessions, consent records, device tokens, and other related data (16 entity types in total).
- Device tokens and any export file blobs are permanently deleted.
- All personally identifiable information (name, email, phone, etc.) is replaced with
- Anonymized records are retained solely for reporting integrity (e.g., aggregate statistics) and legal compliance (e.g., tax records) as permitted by GDPR Art. 17(3)(e).
Why anonymization instead of deletion? Hard-deleting records would break referential integrity in shared data (e.g., orders involve both consumers and providers). Anonymization removes all PII while preserving the structural links needed for the other party's records and legal reporting obligations.
When we may refuse: We may decline an erasure request if the data is required for compliance with a legal obligation, establishment/exercise/defence of legal claims, or for public health reasons.
- Right to Restrict Processing (Art. 18)
What it means: You can request that we limit how your data is processed rather than deleting it entirely. This may apply when:
- You contest the accuracy of your data (restriction during verification).
- Processing is unlawful and you prefer restriction over erasure.
- We no longer need the data but you need it for legal claims.
- You have objected to processing (restriction pending our assessment).
How to exercise: Contact us at privacy@bubba.pet with your request and the reason for restriction.
- Right to Data Portability (Art. 20)
What it means: You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format (JSON), and to transmit that data to another service provider.
How to exercise:
- In the app: Use the "Download My Data" feature in Settings → Privacy. The exported data is in JSON format.
- By email: Request a portable data export at privacy@bubba.pet.
This right applies to data processed on the basis of your consent or contract performance and that is processed by automated means.
- Right to Object (Art. 21)
What it means: You can object to the processing of your personal data when we rely on legitimate interest (Art. 6(1)(f)) as the legal basis.
Data processed under legitimate interest on Bubba:
- Review data (marketplace trust and transparency).
- Search ranking data (platform functionality).
How to exercise: Email privacy@bubba.pet with your objection. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.
- Right to Withdraw Consent (Art. 7(3))
What it means: Where we process your data based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Consent-based processing on Bubba includes:
| Category | How to withdraw |
|---|---|
| Analytics cookies (PostHog) | Cookie banner (website) or Settings → Privacy (app) |
| Marketing cookies | Cookie banner (website) or Settings → Privacy (app) |
| Third-party data sharing | Cookie banner (website) or Settings → Privacy (app) |
How to exercise:
- On the website: Click the "Cookie Settings" link in the footer, or visit the Cookie Settings page.
- In the app: Go to Settings → Privacy and toggle the relevant consent categories.
When you withdraw analytics consent, PostHog immediately stops collecting data and any existing cookies are cleared on your next visit.
- Right Not to Be Subject to Automated Decisions (Art. 22)
What it means: You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal effects or similarly significantly affect you.
How this applies to Bubba:
- Search ranking of service providers is automated but is informational only — it does not produce legal effects or significantly affect you as a consumer.
- AI chat responses are generated by AI for informational purposes only and do not constitute decisions with legal or significant effects.
- We do not make any automated decisions about your account, access to services, or rights that would trigger Art. 22.
- Supervisory Authority
If you believe we are processing your personal data unlawfully or have not adequately responded to your request, you have the right to lodge a complaint with a data protection supervisory authority.
Lead supervisory authority for Bubba:
Valstybinė duomenų apsaugos inspekcija (VDAI) (State Data Protection Inspectorate) L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania Website: https://www.ada.lt
You may also lodge a complaint with the supervisory authority in your EU/EEA member state of habitual residence, place of work, or place of the alleged infringement.
- Response Timelines and Costs
| Response time | Within one month of receiving your request. |
| Extension | If your request is complex or we have received multiple requests, we may extend this period by up to two additional months. We will inform you of any extension within the first month. |
| Cost | Exercising your rights is free of charge. We may charge a reasonable fee or refuse to act if requests are manifestly unfounded or excessive (e.g., repetitive). |
| Identification | We may ask you to verify your identity before acting on your request to prevent unauthorized disclosure of personal data. |
- How to Contact Us
For any questions about your data rights or to submit a request:
| privacy@bubba.pet | |
| Post | MB Bubba, Žirmūnų g. 57-50, LT-09110 Vilnius, Lithuania |
| In-app | Settings → Privacy |
| Website | Cookie Settings (for consent management) |
- Related Documents
- Privacy Policy — Full details on data collection, processing, and legal bases.
- Cookie Policy — Information about cookies and tracking technologies.
- Pet Owner Terms & Conditions — Your rights and obligations as a platform user.