GDPR Compliance

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of all personal data we hold about you
• Right to rectification: correct inaccurate personal data
• Right to erasure: request deletion of your personal data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing of your personal data
• Right to restrict processing: request limitation of processing

Data Deletion

To request deletion of your data (including waitlist entries), email privacy@ontelya.com with the subject line “Data Deletion Request” and include the email address associated with your account or waitlist entry. We will process your request within 30 days and confirm deletion.

Data Processing Basis

We process your data on the following legal bases:

• Consent, when you join the waitlist or create an account
• Legitimate interest , for platform security, abuse prevention, and product improvement
• Contractual necessity , to provide the services you have requested

Data Location

Our analytics are EU-hosted (PostHog EU). Database infrastructure locations will be documented upon platform launch, with options for EU-only data residency for institutional customers.

Contact Our DPO

For any GDPR-related inquiries, contact our Data Protection Officer at privacy@ontelya.com.