GDPR Rights and Data Protection

Last updated: January 1, 2025

Introduction

Under the General Data Protection Regulation (GDPR), you have specific rights regarding your personal data. This page explains your rights and how to exercise them when using Highway Overtake - Car Racing services.

Data Controller Information

Data Controller: ParamonosPlay
Address: 2 Bergstrasse, Berlin, Germany
Email: support@paramonosplay.com
Website: paramonosplay.com

Your GDPR Rights

1. Right of Access (Article 15)

You have the right to know:

  • What personal data we process about you
  • Why we process your data
  • Who we share your data with
  • How long we keep your data
  • Where your data came from

How to exercise: Send a request to support@paramonosplay.com with the subject "Data Access Request" and include proof of identity.

2. Right to Rectification (Article 16)

You can request correction of:

  • Inaccurate personal data
  • Incomplete personal data
  • Outdated information

How to exercise: Contact us with details of the incorrect information and the correct version.

3. Right to Erasure (Article 17) - "Right to be Forgotten"

You can request deletion of your data when:

  • Data is no longer necessary for the original purpose
  • You withdraw consent and no other legal ground exists
  • Data has been unlawfully processed
  • You object to processing and no overriding legitimate grounds exist

How to exercise: Submit a deletion request specifying what data you want removed and the reason.

4. Right to Restriction of Processing (Article 18)

You can request we limit processing when:

  • You contest the accuracy of data (during verification)
  • Processing is unlawful but you prefer restriction over deletion
  • We no longer need the data but you need it for legal claims
  • You object to processing (pending verification of overriding grounds)

5. Right to Data Portability (Article 20)

You can request:

  • Your data in a structured, machine-readable format
  • Transfer of your data to another controller
  • Direct transmission where technically feasible

This applies to data you provided based on consent or contract performance.

6. Right to Object (Article 21)

You can object to processing based on:

  • Legitimate interests (including profiling)
  • Direct marketing purposes
  • Scientific, historical, or statistical research

Direct Marketing: You can object at any time, and we will stop processing immediately.

7. Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to automated decision-making, including profiling, that produces legal effects or significantly affects you.

How to Exercise Your Rights

Contact Methods

Request Requirements

When submitting a request, please include:

  • Clear identification of which right you want to exercise
  • Specific details about your request
  • Proof of identity (to prevent unauthorized access)
  • Any relevant account information or identifiers

Response Timeline

We will respond to your request:

  • Standard: Within 1 month of receipt
  • Complex requests: Up to 3 months (with explanation)
  • Acknowledgment: Within 72 hours of receipt

Legal Bases for Processing

We process your personal data based on:

Consent (Article 6(1)(a))

  • Newsletter subscriptions
  • Marketing communications
  • Optional cookies and tracking

Legitimate Interests (Article 6(1)(f))

  • Website security and fraud prevention
  • Service improvement and analytics
  • Customer support and communication

Legal Obligation (Article 6(1)(c))

  • Tax and accounting records
  • Compliance with applicable laws

Cookie Management

Cookie Categories

  • Strictly Necessary: Cannot be disabled (essential for website function)
  • Analytics: Can be disabled through cookie settings
  • Marketing: Can be disabled through cookie settings
  • Functional: Can be disabled through cookie settings

How to Manage Cookies

  1. Use our cookie banner when first visiting the site
  2. Adjust browser settings to block or delete cookies
  3. Contact us to update your cookie preferences
  4. Use browser privacy/incognito mode

Data Transfers

When we transfer data outside the EU, we ensure adequate protection through:

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules (where applicable)
  • Certification schemes and codes of conduct

Data Breach Notification

In case of a data breach affecting your rights and freedoms, we will:

  • Notify supervisory authorities within 72 hours
  • Inform affected individuals without undue delay
  • Provide clear information about the breach
  • Offer guidance on protective measures

Children's Data Protection

We do not knowingly process data of children under 16. If you believe we have inadvertently collected such data:

  • Contact us immediately
  • We will delete the data promptly
  • We will investigate how the data was collected
  • We will improve our age verification measures

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

German Supervisory Authority:
Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Graurheindorfer Str. 153
53117 Bonn, Germany
Website: www.bfdi.bund.de

Updates to This Information

We may update this GDPR information to reflect:

  • Changes in data protection laws
  • New processing activities
  • Guidance from supervisory authorities
  • Improvements to our data protection practices

Additional Resources

Contact for GDPR Matters

For all GDPR-related inquiries, requests, or complaints:

Email: support@paramonosplay.com
Subject Line: "GDPR Request - [Type of Request]"
Response Time: We aim to respond within 72 hours
Resolution Time: Most requests resolved within 30 days

We are committed to protecting your privacy and ensuring compliance with GDPR requirements. If you have any questions about your rights or our data protection practices, please do not hesitate to contact us.