Your GDPR Rights

Understanding your data protection rights

Last Updated: January 5, 2026

1. About This Page

The General Data Protection Regulation (GDPR) is a European Union law that protects personal data. Even though we are based in Canada, we respect these rights for all our users.

This page explains your rights under GDPR and how to use them.

2. Data Controller

The data controller for cinerovia.com is:

  • Company: cinerovia.com
  • Address: 31 Maple Street, Ottawa, ON K1A 0A1, Canada
  • Email: support@cinerovia.com

As the data controller, we decide how and why your personal data is processed. We are responsible for keeping your data safe.

3. Your Rights Under GDPR

GDPR gives you several rights over your personal data. Here is a detailed look at each one:

3.1 Right of Access

You have the right to know if we process your personal data. You can also ask for a copy of that data.

When you make an access request, we will tell you:

  • What data we have about you
  • Why we process it
  • Who we share it with
  • How long we keep it
  • Where we got it from
  • If we use automated decision-making

We will give you a copy of your data in a common electronic format. The first copy is free. We may charge a small fee for extra copies.

3.2 Right to Correction

You have the right to have wrong or incomplete data corrected. If we shared the wrong data with others, we will tell them about the correction.

To request a correction:

  1. Tell us what data is wrong
  2. Provide the correct information
  3. Give us proof if we ask for it

We will make the correction within 30 days.

3.3 Right to Deletion (Right to be Forgotten)

You can ask us to delete your personal data. We must do this if:

  • We no longer need the data
  • You withdraw your consent
  • You object to the processing and we have no valid reason to continue
  • We processed the data unlawfully
  • The law requires us to delete it

We may not be able to delete your data if:

  • We need it to comply with the law
  • We need it for legal claims
  • There is a public interest reason to keep it

If we delete your data, we will also tell others who received it.

3.4 Right to Restriction

You can ask us to limit how we use your data. We must do this if:

  • You dispute the accuracy of the data (while we check it)
  • The processing is unlawful but you want restriction instead of deletion
  • We no longer need the data but you need it for legal claims
  • You have objected to processing (while we consider your objection)

When data is restricted, we can only store it. We cannot use it for other purposes without your consent.

3.5 Right to Data Portability

You have the right to get your data in a format that is:

  • Structured
  • Commonly used
  • Machine-readable

This right applies to data that:

  • You gave us
  • We process based on your consent or a contract
  • We process by automated means

You can ask us to send your data directly to another company if it is technically possible.

3.6 Right to Object

You can object to us processing your data if we do it based on:

  • Our legitimate interests
  • A task in the public interest
  • Direct marketing

If you object to direct marketing, we will stop right away. For other objections, we will stop unless we have compelling reasons to continue.

3.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing if they significantly affect you.

If we make automated decisions about you, you can:

  • Ask for human involvement
  • Express your point of view
  • Challenge the decision

Currently, we do not use automated decision-making that significantly affects users.

4. How to Exercise Your Rights

To use any of these rights, contact us at:

In your request, please include:

  • Your full name
  • Your email address (the one linked to your account)
  • Which right you want to use
  • Any details that help us find your data

We may ask for proof of identity before we act on your request. This protects your data from unauthorized access.

5. Response Times

We will respond to your request within 30 days. If your request is complex or we have many requests, we may take up to 90 days. We will tell you if we need more time.

Most requests are free. We may charge a fee if:

  • Your request is clearly unfounded or excessive
  • You ask for extra copies of your data

We will tell you about any fee before we act.

6. Withdrawing Consent

If we process your data based on consent, you can withdraw that consent at any time.

To withdraw consent:

  • For cookies: Clear your browser cookies and make new choices when you visit our site
  • For newsletters: Click the unsubscribe link in any email
  • For other processing: Email us at support@cinerovia.com

Withdrawing consent does not affect processing we did before you withdrew.

7. Managing Cookies

Cookies are small files stored on your device. You can control them in several ways:

7.1 Our Cookie Banner

When you first visit our site, you see a cookie banner. You can:

  • Accept all cookies
  • Accept only essential cookies
  • Choose which types to allow

7.2 Browser Settings

You can also manage cookies in your browser. Here is how for common browsers:

  • Chrome: Settings, Privacy and security, Cookies
  • Firefox: Settings, Privacy and Security, Cookies
  • Safari: Preferences, Privacy, Cookies
  • Edge: Settings, Cookies and site permissions

7.3 Changing Your Choices

To change your cookie choices on our site:

  1. Clear your browser cookies for our site
  2. Refresh the page
  3. Make new choices in the cookie banner

8. Data We Process

Here is a summary of the personal data we may process:

8.1 Account Data

  • Username
  • Email address
  • Password (encrypted)
  • Account creation date

8.2 Game Data

  • Game progress
  • Scores and achievements
  • In-game purchases
  • Game settings

8.3 Technical Data

  • IP address
  • Browser type
  • Device type
  • Operating system

8.4 Usage Data

  • Pages visited
  • Time spent on pages
  • Click patterns
  • Referral source

9. Legal Basis for Processing

We process your data based on these legal grounds:

  • Consent: When you agree to cookies or sign up for newsletters
  • Contract: When we need to provide our service to you
  • Legitimate Interest: When we improve our service or prevent fraud
  • Legal Obligation: When the law requires us to keep records

10. International Data Transfers

We are based in Canada. If you are in the EU/EEA, your data may be transferred to Canada.

Canada has been recognized by the European Commission as providing adequate data protection. This means transfers to Canada are allowed under GDPR.

If we transfer data to other countries, we use:

  • Standard contractual clauses
  • Adequacy decisions
  • Other lawful transfer mechanisms

11. Data Security

We protect your data with:

  • Encryption in transit (HTTPS)
  • Secure server infrastructure
  • Access controls
  • Regular security audits
  • Staff training

If a data breach occurs that risks your rights, we will notify you and the relevant authorities as required by law.

12. Complaints

If you are unhappy with how we handle your data, please contact us first. We will try to resolve your concern.

You also have the right to complain to a supervisory authority. In the EU, you can contact the data protection authority in your country. A list is available on the European Data Protection Board website.

In Canada, you can contact the Office of the Privacy Commissioner of Canada.

13. Updates to This Page

We may update this page to reflect changes in law or our practices. We will change the date at the top when we do.

Check back from time to time to stay informed about your rights.

14. Contact Us

For any questions about your GDPR rights or data protection:

We aim to respond to all inquiries within 48 hours on business days.