GDPR

Last updated: September 26, 2024

At Son of a Bit Games, we are committed to protecting the privacy and rights of our users. This statement outlines our compliance with the General Data Protection Regulation (GDPR) of the European Union.

1. Data Collection and Processing
   • We only collect and process personal data when we have a lawful basis to do so.
   • We clearly inform users about what data we collect and how we use it in our Privacy Policy.
2. Consent
   • We obtain explicit consent for collecting and processing personal data where required.
   • Users can withdraw their consent at any time.
3. Data Subject Rights We respect and uphold the rights of our users under GDPR, including:
   • Right to access their personal data
   • Right to rectification of inaccurate data
   • Right to erasure (‘right to be forgotten’)
   • Right to restrict processing
   • Right to data portability
   • Right to object to processing
4. Data Protection Measures
   • We implement appropriate technical and organizational measures to ensure data security.
   • We conduct regular security assessments and updates.
5. Data Breach Notification
   • We have procedures in place to detect, report, and investigate personal data breaches.
   • We will notify the relevant supervisory authority and affected individuals within 72 hours of becoming aware of a breach, where feasible.
6. Data Protection Officer (DPO)
   • [If applicable] We have appointed a DPO to oversee our GDPR compliance.
   • [If not applicable] Given the nature of our operations, we have not appointed a DPO, but we have a designated point of contact for data protection matters.
7. International Data Transfers
   • We ensure that any transfer of personal data outside the EU/EEA complies with GDPR requirements.
8. Privacy by Design and Default
   • We implement data protection principles from the onset of product or service development.
   • We ensure that, by default, only necessary personal data is collected and processed.
9. Record Keeping
   • We maintain records of our data processing activities as required by GDPR.
10. Continuous Compliance
    • We regularly review and update our practices to ensure ongoing GDPR compliance.

For any GDPR-related inquiries or to exercise your rights, please contact us at [email protected].

This statement demonstrates our commitment to GDPR compliance. For more detailed information about how we handle personal data, please refer to our Privacy Policy.