GDPR Information

Your data protection rights under the General Data Protection Regulation

Last Updated: January 1, 2025

1. Introduction

The General Data Protection Regulation (GDPR) provides comprehensive data protection rights for individuals in the European Union. As a data controller, DuddaPlay is committed to protecting your personal data and respecting your privacy rights under GDPR.

2. Data Controller Information

Data Controller: duddaplay.com

Contact Email: support@duddaplay.com

Address: 26 Amsterdam Street, Oxford, OX1 2AB, United Kingdom

3. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access (Article 15)

You have the right to obtain confirmation that your personal data is being processed and access to your personal data. This includes information about:

  • What personal data we process
  • Why we process it
  • Who we share it with
  • How long we keep it
  • Your rights regarding this data

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete personal data completed. You can request corrections by contacting us at support@duddaplay.com.

Right to Erasure - "Right to be Forgotten" (Article 17)

You have the right to have your personal data erased in certain circumstances, including:

  • The data is no longer necessary for the original purpose
  • You withdraw consent and there is no other legal basis
  • The data has been unlawfully processed
  • Erasure is required for compliance with legal obligations

Right to Restriction of Processing (Article 18)

You have the right to restrict processing of your personal data in certain situations:

  • You contest the accuracy of the data
  • Processing is unlawful but you prefer restriction to erasure
  • We no longer need the data but you need it for legal claims
  • You object to processing while we verify legitimate grounds

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller when:

  • Processing is based on consent or contract
  • Processing is carried out by automated means

Right to Object (Article 21)

You have the right to object to processing of your personal data in certain circumstances:

  • Processing based on legitimate interests
  • Processing for direct marketing purposes
  • Processing for scientific, historical, or statistical purposes

Rights Related to Automated Decision Making (Article 22)

You have the right not to be subject to automated decision-making, including profiling, that produces legal effects or significantly affects you, unless:

  • It is necessary for contract performance
  • It is authorized by law
  • You have given explicit consent

4. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the following methods:

  • Email: support@duddaplay.com
  • Subject Line: "GDPR Rights Request"
  • Include: Your full name, email address, and specific request details

We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

5. Identity Verification

To protect your personal data, we may need to verify your identity before processing your request. We may ask for additional information or documentation to confirm your identity.

6. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent (Article 6(1)(a))

  • Newsletter subscriptions
  • Marketing communications
  • Optional data collection

Contract Performance (Article 6(1)(b))

  • Game service delivery
  • Account management
  • Customer support

Legal Obligation (Article 6(1)(c))

  • Tax and accounting records
  • Fraud prevention
  • Regulatory compliance

Legitimate Interest (Article 6(1)(f))

  • Service improvement and analytics
  • Security and fraud prevention
  • Business development

7. Data Categories We Process

We process the following categories of personal data:

Identity Data

  • Username and display name
  • Email address
  • Account preferences

Technical Data

  • IP address
  • Device information
  • Browser type and version
  • Operating system

Usage Data

  • Game progress and statistics
  • Website navigation patterns
  • Feature usage information

Communication Data

  • Support ticket content
  • Feedback and survey responses
  • Marketing preferences

8. Data Recipients

We may share your personal data with the following categories of recipients:

  • Cloud service providers for data storage and processing
  • Analytics service providers for usage statistics
  • Customer support platforms for ticket management
  • Payment processors for transaction handling
  • Legal and regulatory authorities when required by law

9. International Data Transfers

Your personal data may be transferred to countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place:

  • EU Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules
  • Certification schemes

10. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in our Privacy Policy:

  • Account data: Until account deletion requested
  • Game progress: 3 years after last login
  • Support communications: 2 years after resolution
  • Marketing data: Until consent is withdrawn
  • Legal obligations: As required by applicable law

11. Cookie Management

You can manage your cookie preferences through:

  • Browser settings to block or delete cookies
  • Our cookie consent banner when first visiting
  • Contacting us to update preferences
  • Opting out of analytics tracking

12. Withdrawing Consent

Where we process your data based on consent, you can withdraw your consent at any time by:

  • Emailing us at support@duddaplay.com
  • Using unsubscribe links in marketing emails
  • Updating your account preferences
  • Adjusting cookie settings

Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

13. Data Protection Officer

For questions about data protection or to exercise your rights, contact our data protection team:

14. Complaints and Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

15. Updates to This Information

We may update this GDPR information from time to time. We will notify you of material changes through our website or by email. Please check this page regularly for updates.

16. Contact for Rights Requests

To exercise your GDPR rights or ask questions about data protection:

We are committed to protecting your privacy and will handle all requests promptly and professionally.