Your rights under the EU General Data Protection Regulation (GDPR)
The GDPR 2018 regulation gives you individual rights in relation to your personal information. Not all the rights are absolute and for instance, the right of erasure applies only in certain circumstances. (Often you will be able to control how we use your personal data by changing your account preferences. See changing your e-mail preferences and cancelling your account for details of how limit emails, unsubscribe to newsletters or close your account.)
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision making and profiling.
You can follow up these rights with us in a number of ways, including in writing, via a contact form, or via email and we have set out more information in How to contact us, below.
Your right of access
You have a right to see the personal data relating to you that we hold. Mostly, this information is already available to you via your online account or on the publicly available pages of the website, but if you need more, we ask you to specify the information the request relates to. We will respond within 28 days. See how to contact us, below.
Your right to rectification (correcting errors)
You have the right to have incorrect information we hold about you corrected. Let us know, and we will investigate the problem and if the information is incorrect, change it. See how to contact us, below.
Your right to erasure
Under GDPR law, you have the right to have personal data erased. But this is not an absolute right and doesn’t apply in all circumstances. We will remove the data we hold by virtue of your “consent” if you ask us to so (though this may mean you can no longer join a future round or play in a current round you have joined).
We will remove your personal data if we are using that data for the purpose of marketing and you ask us to do so.
If the personal data is held because of a conract between us, through a legitimate interest or the exercise of the right of freedom of expression and information, or is necessary for scientific or historical research, in some circumstances we have an overriding interest and will not be able to remove it. For example, we can not remove records of matches played in publicly archived rounds.
We will respond to any requests to erase data in 28 days. See how to contact us, below.
Your right to restrict processing
You have a right to restrict us processing (using) your personal data in certain circumstances. You will need to tell us the particular, legally-based, reason for wanting the restriction. It could be that the information is wrong or that you believe we have processed it unlawfully. We will investigate and decide on the accuracy of the data and whether our legitimate grounds override the restriction. See how to contact us, below.
Your right to data portability
You have the right to a copy of the data you have supplied to us by consent or because of a contract that exists between us, or that we store in our IT system. We will respond to requests within 28 days. See how to contact us, below.
Your right to object
You have the right to object in certain circumstances to the processing of your personal data. You can object to how we use of your data in pursuance of our legitimate interests or the performance of a task in the public interest or its use in direct marketing or for its use in scientific or historical research and statistical analysis.
• If you object to the use of personal data for purposes of direct marketing, we will stop doing so and discuss your objection with you.
• If you wish to object to the use of your data that is processed based on our legitimate interests, you must state the grounds relating to your particular situation.
• If you wish to object to the use of your data for research purposes, you must state the grounds relating to your particular situation.
To make an objection, see how to contact us, below.
Your rights to automated decision making and profiling
As the creation of groups of players, rounds and leagues is far from an automated process (decisions solely by automated means without any human involvement) your data is not subject to this part of the current regulations.
Where we do automate aspects of the process, it is in order to fulfil the contract we have with you to find you the best matches we can.