GDPR - Your Rights and Our Commitment
Last Updated: October 1, 2025
This page provides specific information for residents of the European Union (EU), the European Economic Area (EEA), and the UK regarding their rights under the General Data Protection Regulation (GDPR). At RedleafSpin, we are fully committed to the principles of data protection and transparency.
This information supplements our main Privacy Policy.
1. Data Controller
RedleafSpin is the data controller for the personal information we collect through our Service. This means we are responsible for deciding how and why your personal data is processed. You can contact us at any time at support@redleafspin.com.
2. Legal Basis for Processing Your Data
We only process your personal data when we have a valid legal basis to do so. Our legal bases include:
- Performance of a Contract: Most of our processing is necessary to provide the Service you have requested. When you create an account, you enter into an agreement with us, and we need to process your information (like your email and username) to fulfill that agreement, such as by managing your account and providing access to our games.
- Legitimate Interests: We process some data for our legitimate interests, provided these interests are not overridden by your rights and freedoms. This includes using technical data for security purposes, fraud prevention, and to ensure the stability of our Service.
- Legal Obligation: We may be required to process your data to comply with applicable laws or legally binding requests from public authorities.
We do not rely on consent as a legal basis for processing your data for marketing or advertising, as we do not engage in these activities.
3. Your Rights Under the GDPR
If you are a resident of the EEA, you have the following data protection rights. We are committed to helping you exercise them.
A. The Right to Be Informed
You have the right to be provided with clear, transparent, and easily understandable information about how we use your information and your rights. This is why we are providing you with the information in this policy.
B. The Right of Access
You have the right to request access to the personal data we hold about you. Upon request, we will provide a copy of your data in an electronic format.
C. The Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
D. The Right to Erasure (The "Right to be Forgotten")
You have the right to request the deletion of your personal data when it is no longer necessary for the purpose it was collected, or if there is no other legal ground for us to continue processing it. This includes deleting your account entirely.
E. The Right to Restrict Processing
You have the right to request that we temporarily halt the processing of your personal data, for example, while we verify its accuracy or our legitimate grounds for processing it.
F. The Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another data controller where technically feasible.
G. The Right to Object
You have the right to object to our processing of your personal data where we are processing it based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
H. Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you. RedleafSpin does not engage in such automated decision-making or profiling.
4. International Data Transfers
Our Service is hosted in Canada. If you are accessing the Service from the EEA, your information will be transferred to, stored, and processed in Canada. Canada is recognized by the European Commission as providing an adequate level of data protection. This ensures that your data is protected by standards equivalent to those in the EU.
5. How to Exercise Your Rights
To exercise any of the rights described above, please submit a verifiable request to us by emailing our Data Protection contact at support@redleafspin.com. Please specify which right you wish to exercise and provide sufficient information to allow us to verify your identity.
6. Right to Lodge a Complaint
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with your local data protection authority. You can find contact information for your country's authority on the European Data Protection Board's website.