Legal
Your GDPR Rights
Last updated: 25 March 2026
Your data, your control
TryShotgun is committed to protecting your personal data under the General Data Protection Regulation (GDPR). As a Danish company operating within the EU, we fully comply with GDPR requirements.
This page explains your rights and how to exercise them.
Right to access (Article 15)
You have the right to request a copy of all personal data we hold about you. This includes your profile information, CV data, campaign history, cover letters generated, and application outcomes.
We will respond to access requests within 30 days.
Right to rectification (Article 16)
If any of your personal data is inaccurate or incomplete, you have the right to have it corrected. You can update most information directly in your dashboard, or contact us for changes you cannot make yourself.
Right to erasure (Article 17)
You have the right to request deletion of your personal data ("right to be forgotten"). When you request deletion, we will:
- Delete your account and profile
- Delete your uploaded CV and parsed CV data
- Delete your personal bio and preferences
- Delete all generated cover letters
- Delete campaign and application records
- Remove your data from all third-party processors
Exceptions: We may retain certain data where required by law (e.g., payment records for tax compliance, retained for up to 5 years under Danish bookkeeping law). Anonymised, aggregated data that cannot identify you is also retained.
Deletion is completed within 30 days of your request.
Right to data portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON). This includes:
- Your profile information
- Your CV data (both original file and parsed data)
- Your campaign history and application records
- All generated cover letters
- Reply data and interview invites
We will provide your data export within 30 days.
Right to restrict processing (Article 18)
You can request that we temporarily stop processing your data while a concern is being resolved — for example, if you believe your data is inaccurate or you have objected to processing.
Right to object (Article 21)
You can object to processing based on legitimate interest at any time. If you object, we will stop processing unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent (Article 7)
Where processing is based on consent (e.g., marketing emails), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
How to exercise your rights
To exercise any of your GDPR rights, contact us:
- Email: privacy@tryshotgun.com
- Subject line: "GDPR Request — [Your Right]" (e.g., "GDPR Request — Data Deletion")
We will verify your identity before processing any request. All requests are handled free of charge and completed within 30 days.
Complaints
If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Danish Data Protection Agency:
- Datatilsynet
- Carl Jacobsens Vej 35, 2500 Valby, Denmark
- Email: dt@datatilsynet.dk