GDPR Rights and Data Protection

At Dynirra Limited, we are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page explains your rights and how to exercise them.

1. Data Controller Information

2. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

3. Right to Access (Subject Access Request)

When you make an access request, we will provide you with:

• Confirmation of whether we process your personal data
• A copy of your personal data
• Information about the purposes of processing
• Categories of personal data concerned
• Recipients or categories of recipients
• Retention periods
• Your rights regarding the data
• Information about the source of the data

Response Time: We will respond within 30 days of receiving your request.

Cost: The first copy is provided free of charge. Additional copies may incur a reasonable fee.

4. Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you can request correction. We will:

• Verify the accuracy of the data
• Update or correct inaccurate information
• Complete incomplete data
• Notify third parties of corrections where applicable

5. Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data when:

• The data is no longer necessary for its original purpose
• You withdraw consent and there is no other legal basis
• You object to processing and there are no overriding grounds
• The data has been unlawfully processed
• Deletion is required for legal compliance

Note: This right is not absolute. We may need to retain certain data for legal obligations or legitimate interests.

6. Right to Restriction of Processing

You can request restriction when:

• You contest the accuracy of the data
• Processing is unlawful but you prefer restriction to erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification

During restriction, we will store the data but not process it further without your consent.

7. Right to Data Portability

You can request your data in a portable format when:

• Processing is based on consent or contract
• Processing is carried out by automated means

We will provide data in a commonly used format such as CSV or JSON.

8. Right to Object

You can object to processing based on:

• Legitimate interests (including profiling)
• Direct marketing purposes
• Scientific or historical research
• Statistical purposes

We will stop processing unless we can demonstrate compelling legitimate grounds.

9. Automated Decision-Making and Profiling

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects.

Our Practice: We do not engage in automated decision-making that significantly affects your rights. Game outcomes are based on random number generation for entertainment purposes only.

10. How to Exercise Your Rights

To exercise any of your GDPR rights, you can:

Email Us

Send your request to: support@dynirra.com

Include:

• Your full name
• Email address associated with your use of our services
• Specific right you wish to exercise
• Any relevant details or documentation

Written Request

Send a letter to:

Dynirra Limited
184 Durham Street
Riccarton, Christchurch 8011
New Zealand

11. Identity Verification

To protect your privacy, we may need to verify your identity before processing requests. We may ask for:

• Proof of identity (government-issued ID)
• Verification of email address
• Additional information to confirm your identity

We will delete verification documents after processing your request.

12. Response Timeframes

• Standard Response: Within 30 days
• Complex Requests: Up to 60 days (we will inform you if extension is needed)
• Urgent Matters: We prioritize based on urgency and legal requirements

13. Withdrawing Consent

Where processing is based on consent, you can withdraw it at any time by:

• Adjusting cookie settings on our website
• Emailing support@dynirra.com
• Following opt-out instructions in communications

Withdrawal does not affect the lawfulness of processing before withdrawal.

14. Managing Cookie Preferences

You can manage cookies through:

• Our cookie consent tool on the website
• Your browser settings
• Third-party opt-out tools

Note that disabling essential cookies may affect website functionality.

15. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately at support@dynirra.com.

16. International Data Transfers

Your data may be transferred outside New Zealand. We ensure appropriate safeguards through:

• Standard contractual clauses approved by authorities
• Adequacy decisions by relevant authorities
• Your explicit consent where required
• Binding corporate rules

17. Data Breach Notification

In the event of a data breach that may affect your rights, we will:

• Notify relevant authorities within 72 hours
• Inform affected individuals without undue delay
• Provide information about the breach and our response
• Advise on protective measures you can take

18. Complaints and Supervisory Authority

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with a supervisory authority.

New Zealand Privacy Commissioner

Website: www.privacy.org.nz

Email: enquiries@privacy.org.nz

European Data Protection Authorities

If you are in the EU, you can contact your local data protection authority. Find your authority at: edpb.europa.eu

19. Updates to This Information

We may update this GDPR information from time to time to reflect changes in law or our practices. Check this page regularly for updates.

20. Additional Resources

For more information about data protection:

• Privacy Policy: View our Privacy Policy
• Terms of Use: View our Terms of Use
• GDPR Official Site: gdpr.eu

21. Contact Information

We are committed to protecting your privacy and respecting your rights. If you have any questions or concerns about how we handle your personal data, please do not hesitate to contact us.