GDPR Rights and Data Protection

Your rights under the General Data Protection Regulation

1. Introduction

At Frozen Pounamu, we take your privacy seriously. Under the General Data Protection Regulation (GDPR), you have specific rights regarding your personal data.

This page explains your rights and how to exercise them.

Our commitment to data protection applies to all users, regardless of location.

2. Data Controller Information

Data Controller: veridixel.com

Registered Address: Ponsonby Road, Ponsonby, Auckland 1011, New Zealand

Data Protection Contact: support@veridixel.com

General Enquiries: info@veridixel.com

Additional Contact: contact@veridixel.com

3. Your GDPR Rights

3.1 Right to Access

You have the right to request a copy of the personal data we hold about you.

This is known as a "data subject access request."

What you receive:

  • Confirmation that we process your data
  • A copy of your personal data
  • Information about how we use your data
  • Details of who we share your data with
  • How long we keep your data
  • Information about your rights

How to request: Email support@veridixel.com with "Data Access Request" in the subject line.

Response time: We will respond within 30 days.

3.2 Right to Rectification

You have the right to have inaccurate personal data corrected.

You can also request that incomplete data be completed.

When to use this right:

  • Your contact information is incorrect
  • We have outdated information about you
  • Any personal data we hold is inaccurate

How to request: Email support@veridixel.com with details of the corrections needed.

Response time: We will make corrections within 30 days.

3.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data.

When this applies:

  • Your data is no longer needed for its original purpose
  • You withdraw consent for data processing
  • You object to processing and there are no overriding legitimate grounds
  • Your data has been unlawfully processed
  • Data must be erased to comply with legal obligations

Limitations: We may need to retain some data to comply with legal obligations or establish legal claims.

How to request: Email support@veridixel.com with "Data Erasure Request" in the subject line.

Response time: We will process your request within 30 days.

3.4 Right to Restriction of Processing

You can request that we limit how we use your data.

When this applies:

  • You contest the accuracy of your data
  • Processing is unlawful but you don't want erasure
  • We no longer need the data but you need it for legal claims
  • You have objected to processing pending verification

What this means: We can store your data but not use it without your consent.

How to request: Email support@veridixel.com explaining why you want restriction.

3.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

You can also request that we transfer your data directly to another organization.

What you receive:

  • Your data in CSV or JSON format
  • Data that you provided to us
  • Data processed based on consent or contract

How to request: Email support@veridixel.com with "Data Portability Request" in the subject line.

3.6 Right to Object

You have the right to object to certain types of processing.

Processing you can object to:

  • Processing based on legitimate interests
  • Direct marketing
  • Processing for scientific or historical research

Direct marketing: You can object at any time, and we will stop immediately.

Other processing: We will stop unless we have compelling legitimate grounds.

How to request: Email support@veridixel.com stating your objection.

3.7 Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing.

Our practice: We do not use automated decision making or profiling that produces legal or similarly significant effects.

If this changes, we will inform you and provide opt-out options.

3.8 Right to Withdraw Consent

Where we process your data based on consent, you can withdraw that consent at any time.

How to withdraw consent:

  • For cookies: Use our cookie settings tool on the website
  • For other processing: Email support@veridixel.com

Effect: Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

4. How to Exercise Your Rights

4.1 Making a Request

To exercise any of your rights, contact us:

Primary Contact: support@veridixel.com

Alternative Contacts: info@veridixel.com or contact@veridixel.com

Postal Address: Ponsonby Road, Ponsonby, Auckland 1011, New Zealand

4.2 Information We Need

To process your request, please provide:

  • Your full name
  • Your email address
  • Description of your request
  • Proof of identity (if required)

4.3 Verification

We may need to verify your identity before processing requests.

This protects your data from unauthorized access.

We will only ask for information necessary to confirm your identity.

4.4 Response Time

We will respond to your request within 30 days.

If your request is complex, we may extend this by 60 days and will inform you.

We will explain any delays and keep you updated.

4.5 Fees

We do not charge fees for most requests.

We may charge a reasonable fee if:

  • Your request is clearly unfounded or excessive
  • You request multiple copies of the same information

We will inform you of any fees before processing your request.

5. Managing Your Cookie Preferences

5.1 Cookie Settings

You can manage your cookie preferences at any time using our cookie settings tool on the website.

Types of cookies you can control:

  • Analytics cookies
  • Preference cookies

Essential cookies cannot be disabled as they are necessary for website functionality.

5.2 Browser Settings

You can also manage cookies through your browser settings.

Most browsers allow you to:

  • View cookies stored on your device
  • Delete specific cookies
  • Block cookies from specific websites
  • Block all cookies

Note that blocking essential cookies may affect website functionality.

6. Data We Collect

6.1 Personal Data

We may collect the following personal data:

  • Name (when you contact us)
  • Email address (when you contact us)
  • Message content (when you contact us)
  • Browser and device information
  • IP address
  • Usage data

6.2 Game Data

Game progress is stored locally on your device:

  • Virtual credit balance
  • Game preferences
  • Age verification status

This data is not transmitted to our servers.

7. Legal Basis for Processing

We process your data based on:

7.1 Consent

For analytics and preference cookies, we rely on your explicit consent.

You can withdraw consent at any time.

7.2 Legitimate Interests

We process some data based on legitimate interests:

  • Website security and fraud prevention
  • Improving our services
  • Responding to your enquiries

7.3 Legal Obligations

We process data to comply with legal requirements:

  • Age verification requirements
  • Record keeping obligations
  • Responding to legal requests

8. Data Sharing

We do not sell your personal data.

8.1 Third-Party Service Providers

We may share data with:

  • Hosting providers (for website infrastructure)
  • Analytics providers (if you consent)

All third parties are required to protect your data and use it only as instructed.

8.2 Legal Requirements

We may disclose data if required by law or to:

  • Comply with legal processes
  • Protect our rights
  • Prevent fraud or illegal activity
  • Protect user safety

9. Data Security

We implement appropriate security measures:

  • Encryption of data in transit (HTTPS)
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection
  • Incident response procedures

In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law.

10. International Data Transfers

Your data may be transferred outside New Zealand.

When we transfer data internationally, we ensure:

  • Adequate protection measures are in place
  • Compliance with GDPR requirements
  • Use of standard contractual clauses where appropriate

11. Complaints and Concerns

11.1 Contact Us First

If you have concerns about how we handle your data, please contact us:

Email: support@veridixel.com

We will investigate and respond to your concerns.

11.2 Supervisory Authority

You have the right to lodge a complaint with a supervisory authority.

In New Zealand, you can contact:

Office of the Privacy Commissioner

Website: privacy.org.nz

If you are in the EU, contact your local data protection authority.

12. Children's Privacy

Our service is only for users aged 18 and over.

We do not knowingly collect data from children under 18.

If we discover we have collected data from someone under 18, we will delete it immediately.

Parents or guardians can contact us at support@veridixel.com if they believe we have collected data from a child.

13. Updates to This Information

We may update this GDPR rights information from time to time.

Changes will be posted on this page with an updated date.

We encourage you to review this page regularly.

Significant changes will be communicated through a notice on our website.

14. Additional Resources

For more information about our data practices:

15. Contact Information

For any questions about your GDPR rights or data protection:

Primary Contact:

Email: support@veridixel.com

Available 24 hours a day

Alternative Contacts:

Business Enquiries: info@veridixel.com

General Contact: contact@veridixel.com

Postal Address:

veridixel.com

Ponsonby Road, Ponsonby

Auckland 1011

New Zealand

We aim to respond to all enquiries within 24 hours.