GDPR Information

Last Updated: January 2025

1. Introduction to GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that gives individuals control over their personal data. At Ombryna Social Casino, we are committed to protecting your privacy rights under GDPR.

This page explains your rights under GDPR and how we handle your personal information.

2. Data Controller Information

3. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

3.1 Right to Access

You have the right to request access to your personal data. This includes:

• Confirmation of whether we process your personal data
• Access to your personal data
• Information about how we use your data
• Information about data retention periods
• Information about your other GDPR rights

To request access to your data, email us at support@ombryna.com with the subject line "GDPR Access Request".

3.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. If you believe any information we hold about you is incorrect, you can request that we update or correct it.

Contact us at support@ombryna.com to request corrections.

3.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

To request deletion of your data, email support@ombryna.com with the subject line "GDPR Erasure Request".

3.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain situations:

• You contest the accuracy of the data
• Processing is unlawful but you oppose erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification

Contact support@ombryna.com to request restriction of processing.

3.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another service provider where technically feasible.

This right applies when:

• Processing is based on consent or contract
• Processing is carried out by automated means

To request data portability, email support@ombryna.com with the subject line "GDPR Portability Request".

3.6 Right to Object

You have the right to object to processing of your personal data in certain circumstances:

• Processing based on legitimate interests
• Processing for direct marketing purposes
• Processing for scientific or historical research

To object to processing, contact support@ombryna.com with the subject line "GDPR Objection".

3.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

You can manage your cookie consent through our cookie settings tool or by contacting support@ombryna.com.

3.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights. In New Zealand, you can contact the Privacy Commissioner.

4. How We Process Your Data

4.1 Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Legitimate Interests: When processing is necessary for our legitimate business interests
• Legal Obligation: When processing is required to comply with legal requirements
• Vital Interests: When processing is necessary to protect vital interests

4.2 Data We Collect

We collect and process the following categories of personal data:

• Contact information (email addresses)
• Technical data (IP address, browser type, device information)
• Usage data (pages visited, time spent, game statistics)
• Cookie data (preferences, analytics)

4.3 Purpose of Processing

We process your data for the following purposes:

• To provide and maintain our social casino services
• To respond to your enquiries and support requests
• To improve our website and user experience
• To ensure compliance with age restrictions
• To detect and prevent fraud or abuse
• To comply with legal obligations

5. Data Sharing and Transfers

5.1 Third-Party Sharing

We may share your data with trusted third parties:

• Analytics providers to understand website usage
• Hosting providers for website infrastructure
• Email service providers for communications

All third parties are contractually obligated to protect your data and comply with GDPR requirements.

5.2 International Transfers

Your data is primarily processed in New Zealand. If we transfer data internationally, we ensure adequate safeguards are in place through:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally valid transfer mechanisms

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Access controls and authentication
• Regular security assessments
• Employee training on data protection
• Incident response procedures

7. Data Retention

We retain your personal data only as long as necessary:

• Age verification data: Stored locally on your device only
• Contact form submissions: Retained for 2 years
• Analytics data: Anonymized after 14 months
• Game statistics: Stored locally on your device

After the retention period, we securely delete or anonymize your data.

8. Cookie Management

8.1 Types of Cookies

We use the following types of cookies:

• Necessary Cookies: Essential for website functionality (always active)
• Analytics Cookies: Help us understand user behavior (requires consent)

8.2 Managing Cookie Preferences

You can manage your cookie preferences through:

• Our cookie consent tool (appears on first visit)
• Your browser settings
• Contacting us at support@ombryna.com

9. How to Exercise Your Rights

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately at support@ombryna.com.

12. Changes to This Policy

We may update this GDPR information from time to time. We will notify you of significant changes by posting the updated policy on this page with a new effective date.

13. Contact Information

For any questions about GDPR or to exercise your rights:

• Email: support@ombryna.com (24/7 support)
• Data Protection Officer: info@ombryna.com
• General Enquiries: contact@ombryna.com
• Address: 185 Fitzgerald Avenue, Xanadu, New Zealand

14. Additional Resources

For more information about GDPR and your rights:

• New Zealand Privacy Commissioner: privacy.org.nz
• European Commission GDPR Portal: ec.europa.eu

15. Commitment to Privacy

At Ombryna, we are committed to transparency and protecting your privacy rights. We regularly review and update our data protection practices to ensure compliance with GDPR and other applicable laws.

If you have any concerns about how we handle your personal data, please contact us. We take all privacy concerns seriously and will work to resolve any issues promptly.