GDPR Rights and Data Protection

Last Updated: January 2025

At mirrordestiny.com, we respect your privacy and are committed to protecting your personal data. This page explains your rights under the General Data Protection Regulation (GDPR) and how we handle your information.

1. Data Controller Information

The data controller responsible for your personal information is:

2. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

2.1 Right to Access

You have the right to know what personal data we hold about you. This includes:

You can request a copy of your data at any time. We will provide this within 30 days at no cost.

2.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. If you find errors in your information, we will update it promptly. You can:

2.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in these situations:

Note that some data may need to be retained for legal or security reasons.

2.4 Right to Restriction of Processing

You can ask us to limit how we use your data when:

During restriction, we will only store your data and process it with your consent or for legal purposes.

2.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format. You can:

This right applies to data you provided based on consent or contract.

2.6 Right to Object

You can object to processing of your personal data when:

We will stop processing unless we can show compelling legitimate grounds.

2.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time. This does not affect:

You can withdraw consent through your account settings or by contacting us.

2.8 Right to Lodge a Complaint

If you believe we have not handled your data properly, you can:

3. How to Exercise Your Rights

3.1 Making a Request

To exercise any of your rights, contact us at:

Please include:

3.2 Response Time

We will respond to your request:

3.3 Verification Process

To protect your privacy, we may need to verify your identity before processing requests. We may ask for:

4. Data We Collect

4.1 Personal Data

We collect and process:

4.2 Special Categories of Data

We do not intentionally collect sensitive personal data such as:

5. Legal Basis for Processing

We process your data based on:

6. Data Sharing and Transfers

6.1 Who We Share With

We may share data with:

6.2 International Transfers

Some data may be transferred outside the EEA. We ensure protection through:

7. Data Retention

We keep your data for as long as:

After account deletion:

8. Data Security Measures

We protect your data using:

9. Automated Decision Making

We may use automated processing for:

You have the right to:

10. Cookies and Tracking

We use cookies for:

You can manage cookies through:

11. Children's Data

For users under 16:

12. Data Breach Notification

In case of a data breach, we will:

13. Third-Party Rights

When exercising your rights, we consider:

14. Updates to This Policy

We may update this GDPR policy to reflect:

We will notify you of significant changes through email or in-game notifications.

15. Contact and Complaints

15.1 Contact Us

For any GDPR-related questions or requests:

15.2 Supervisory Authority

If you are not satisfied with our response, you can contact your local data protection authority. For EEA residents, find your authority at edpb.europa.eu.

16. Additional Resources

For more information about your privacy:

We are committed to protecting your data and respecting your rights. Your privacy is important to us, and we work hard to maintain your trust.