GDPR - Your Data Protection Rights

Last Updated: January 15, 2026

This page explains your rights under the General Data Protection Regulation (GDPR) and how orbitvortex.com protects your personal data. We are committed to ensuring your privacy and giving you control over your information.

1. Data Controller Information

The data controller responsible for your personal data is:

As the data controller, we decide how and why your personal data is processed. We are responsible for ensuring your data is handled lawfully and securely.

2. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

2.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This includes:

  • What data we have collected
  • Why we process your data
  • Who we share your data with
  • How long we keep your data
  • Where your data came from

We will provide this information free of charge within 30 days of your request.

2.2 Right to Correction (Rectification)

You have the right to ask us to correct any inaccurate or incomplete personal data. This includes:

  • Updating your email address
  • Correcting your name or other details
  • Completing any missing information

We will make corrections within 30 days of your request.

2.3 Right to Deletion (Right to be Forgotten)

You can ask us to delete your personal data when:

  • The data is no longer needed for its original purpose
  • You withdraw your consent
  • You object to the processing
  • The data was processed unlawfully
  • Deletion is required by law

Note: We may need to keep some data for legal or legitimate business reasons.

2.4 Right to Restrict Processing

You can ask us to limit how we use your data when:

  • You dispute the accuracy of your data
  • The processing is unlawful but you don't want deletion
  • We no longer need the data but you need it for legal claims
  • You have objected to processing and we are verifying our grounds

When processing is restricted, we will only store your data and not use it for other purposes.

2.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format. You can also ask us to transfer your data directly to another service provider where technically feasible.

This right applies to data you provided to us and that we process based on your consent or a contract.

2.6 Right to Object

You have the right to object to the processing of your personal data when:

  • Processing is based on legitimate interests
  • Processing is for direct marketing purposes
  • Processing is for research or statistical purposes

If you object to direct marketing, we will stop processing your data for that purpose immediately.

2.7 Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. This includes profiling. You can request human intervention, express your point of view, and contest such decisions.

3. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

When making a request, please provide:

  • Your full name
  • Your email address (the one you used with our services)
  • A clear description of your request
  • Any relevant account information

We may need to verify your identity before processing your request. We will respond within 30 days.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Consent: You have given clear consent for us to process your data for a specific purpose
  • Contract: Processing is necessary to fulfill a contract with you
  • Legal Obligation: Processing is necessary to comply with the law
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided these don't override your rights

5. Consent Management

5.1 How to Give Consent

We ask for your consent through:

  • Our cookie consent banner when you first visit the site
  • Checkboxes on forms (e.g., newsletter signup, contact form)
  • In-app consent screens in the game

5.2 How to Withdraw Consent

You can withdraw your consent at any time by:

  • Clicking "Cookie Settings" in our cookie banner
  • Using the unsubscribe link in our emails
  • Contacting us at support@orbitvortex.com
  • Adjusting settings in the game app

Withdrawing consent does not affect the lawfulness of processing done before the withdrawal.

6. Cookie Management

We use cookies and similar technologies on our website. You can manage your cookie preferences through:

  • Our cookie consent banner (appears on first visit)
  • The "Cookie Settings" button in the cookie banner
  • Your browser settings

6.1 Types of Cookies We Use

  • Essential Cookies: Required for the website to function. Cannot be disabled.
  • Analytics Cookies: Help us understand how visitors use our site. Can be disabled.
  • Marketing Cookies: Used to show relevant advertisements. Can be disabled.

6.2 Browser Cookie Settings

You can also control cookies through your browser settings. Most browsers allow you to:

  • View what cookies are stored
  • Delete individual or all cookies
  • Block third-party cookies
  • Block all cookies

Note: Blocking all cookies may affect your experience on our website.

7. Data Transfers

Your data may be transferred to countries outside the European Economic Area (EEA). When this happens, we ensure your data is protected by:

  • Using Standard Contractual Clauses approved by the European Commission
  • Transferring to countries with adequate data protection laws
  • Implementing appropriate technical and organizational measures

8. Data Security

We implement appropriate security measures to protect your data, including:

  • Encryption of data in transit (SSL/TLS)
  • Secure storage with access controls
  • Regular security assessments
  • Staff training on data protection
  • Incident response procedures

9. Data Retention

We keep your personal data only as long as necessary. Our retention periods are:

  • Account Data: Until account deletion plus 30 days
  • Contact Form Messages: Up to 2 years
  • Newsletter Subscribers: Until you unsubscribe
  • Analytics Data: Up to 26 months
  • Payment Records: 7 years (legal requirement)

10. Children's Data

Our services are intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us immediately at support@orbitvortex.com.

11. Data Breach Notification

In the event of a data breach that poses a high risk to your rights, we will:

  • Notify the relevant supervisory authority within 72 hours
  • Inform affected individuals without undue delay
  • Describe the nature of the breach and its likely consequences
  • Explain the measures taken or proposed to address the breach

12. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with a supervisory authority. For EU residents, you can contact your local data protection authority. For Canadian residents, you can contact the Office of the Privacy Commissioner of Canada.

13. Changes to This Page

We may update this GDPR information from time to time. We will notify you of significant changes by updating the "Last Updated" date and, where appropriate, by other means.

14. Contact Us

For any questions about your GDPR rights or our data practices, please contact:

We are committed to protecting your privacy and will work with you to address any concerns.