GDPR COMPLIANCE
Duel Quest is committed to protecting the privacy and personal data of our users in compliance with the General Data Protection Regulation (GDPR) in the European Union. This section outlines how we collect, use, and protect personal data in accordance with GDPR requirements.
Lawful Basis for Processing
We only collect and process personal data when we have a lawful basis to do so. This may include the necessity of processing for the performance of a contract, compliance with legal obligations, consent from the data subject, or legitimate interests pursued by Duel Quest.
Data Subject Rights
Under the GDPR, data subjects have certain rights regarding their personal data, including the right to access, rectify, erase, restrict processing, and object to processing. Data subjects also have the right to data portability and the right to lodge a complaint with a supervisory authority.
Data Security
We implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data and to protect it against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Data Transfers
We may transfer personal data to third parties or service providers located outside the European Economic Area (EEA) for the purposes outlined in this Privacy Policy. In such cases, we ensure that appropriate safeguards are in place to protect the data in accordance with GDPR requirements.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. We regularly review our data retention practices to ensure compliance with GDPR principles.