GDPR Rights

Your data protection rights under the General Data Protection Regulation

Last Updated: January 15, 2025

1. Introduction

The General Data Protection Regulation (GDPR) gives individuals in the European Union and European Economic Area strong rights over their personal data. Even though ludexario.com is based in Canada, we respect these rights for all our users.

This page explains your GDPR rights and how to exercise them when using Pool Tour.

2. Data Controller

The data controller responsible for your personal information is:

  • Company: ludexario.com
  • Address: 175 Northview Street, Burlington, ON L7R 3V2, Canada
  • Email: support@ludexario.com

The data controller decides how and why your personal data is processed.

3. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

3.1 Right of Access (Article 15)

You have the right to:

  • Know whether we process your personal data
  • Request a copy of your personal data
  • Know the purposes of processing
  • Know the categories of data we hold
  • Know who receives your data
  • Know how long we keep your data
  • Know the source of data (if not collected from you)

We will provide this information free of charge within 30 days of your request.

3.2 Right to Rectification (Article 16)

You have the right to:

  • Have inaccurate personal data corrected
  • Have incomplete data completed

If we have shared incorrect data with third parties, we will inform them of the correction.

3.3 Right to Erasure (Article 17)

Also known as the "right to be forgotten," you can request deletion of your data when:

  • The data is no longer needed for its original purpose
  • You withdraw consent (and no other legal basis applies)
  • You object to processing and we have no overriding interest
  • The data was unlawfully processed
  • Deletion is required by law

Note: We may not be able to delete data if we have a legal obligation to keep it or need it for legal claims.

3.4 Right to Restriction (Article 18)

You can ask us to limit how we use your data when:

  • You contest the accuracy of the data (while we verify)
  • Processing is unlawful but you prefer restriction over deletion
  • We no longer need the data but you need it for legal claims
  • You have objected to processing (while we consider your objection)

When processing is restricted, we will only store the data and not use it without your consent.

3.5 Right to Data Portability (Article 20)

You have the right to:

  • Receive your personal data in a structured, common format (like JSON or CSV)
  • Transfer that data to another controller
  • Have us transfer the data directly to another controller (where technically possible)

This right applies to data you provided to us, processed by automated means, based on consent or contract.

3.6 Right to Object (Article 21)

You can object to processing of your personal data when:

  • Processing is based on legitimate interests or public interest
  • Data is used for direct marketing (we will always honor this)
  • Data is used for research or statistics

If you object, we must stop processing unless we have compelling legitimate grounds that override your interests.

3.7 Rights Related to Automated Decision-Making (Article 22)

You have the right to:

  • Not be subject to decisions based solely on automated processing that significantly affect you
  • Request human intervention in automated decisions
  • Express your point of view
  • Contest automated decisions

Pool Tour does not currently make significant automated decisions about users.

4. How to Exercise Your Rights

To exercise any of your GDPR rights, contact us using one of these methods:

Please include:

  • Your full name
  • Your email address (the one used with our service)
  • Which right you want to exercise
  • Any details that help us identify your data

We may need to verify your identity before processing your request. We will respond within 30 days.

5. Consent Management

5.1 How to Withdraw Consent

If you have given consent for data processing, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

To withdraw consent:

  • Cookies: Click the cookie settings button in our cookie banner or clear your browser cookies
  • Marketing emails: Click the unsubscribe link in any email we send
  • Account data: Email us at support@ludexario.com

5.2 Managing Cookie Preferences

You can manage your cookie preferences at any time:

  1. Look for the cookie consent banner at the bottom of any page
  2. Click "Settings" to open the cookie preferences panel
  3. Toggle cookies on or off based on your preferences
  4. Click "Save Preferences" to apply your choices

You can also manage cookies through your browser settings. Note that blocking all cookies may affect how our site works.

6. Legal Basis for Processing

We process your personal data based on these legal grounds:

  • Consent (Article 6(1)(a)): When you agree to cookies, newsletters, or optional features
  • Contract (Article 6(1)(b)): To provide services you have requested
  • Legal Obligation (Article 6(1)(c)): When required by law
  • Legitimate Interests (Article 6(1)(f)): To improve our services, prevent fraud, and ensure security

7. Data Transfers Outside the EU

As we are based in Canada, your data is transferred outside the European Economic Area. Canada has an adequacy decision from the European Commission, meaning it provides adequate data protection.

For transfers to other countries, we use:

  • Standard Contractual Clauses approved by the EU
  • Binding Corporate Rules where applicable
  • Other approved transfer mechanisms

8. Data Protection Officer

For GDPR-related questions, you can contact our data protection team:

We aim to respond to all inquiries within 48 hours.

9. Right to Lodge a Complaint

If you believe we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority. This is the data protection authority in your country of residence, place of work, or where the alleged infringement occurred.

For Canada, you can contact:

  • Office of the Privacy Commissioner of Canada
  • Website: www.priv.gc.ca

For EU residents, contact your local Data Protection Authority.

10. Data We Collect

For transparency, here is the personal data we may collect:

  • Identity Data: Username, display name
  • Contact Data: Email address
  • Technical Data: IP address, browser type, device information
  • Usage Data: Pages visited, game statistics, preferences
  • Marketing Data: Newsletter preferences, communication history

11. Data Retention Periods

We keep your data for these periods:

  • Account data: Until account deletion plus 30 days
  • Game data: Duration of account plus 90 days
  • Support tickets: 2 years after resolution
  • Analytics: 26 months
  • Legal records: As required by law

12. Security Measures

We protect your data with:

  • Encryption in transit (SSL/TLS)
  • Secure server infrastructure
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection

13. Updates to This Page

We may update this GDPR information as regulations change or as we update our practices. The "Last Updated" date at the top shows when the most recent changes were made.

14. Contact Us

For any questions about your GDPR rights or this page:

We are committed to protecting your privacy and will respond to all requests promptly and thoroughly.