Your GDPR Rights

Last Updated: January 1, 2025

Introduction to GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018, across the European Union. It grants you specific rights regarding your personal data and requires organizations to handle your information responsibly and transparently.

At BrainArt Studio, we are fully committed to upholding your GDPR rights. This page explains your rights in detail and provides clear instructions on how to exercise them.

Who This Applies To

These rights apply to you if:

• You are located in the European Economic Area (EEA)
• You are a citizen of an EU member state
• You are currently in the EU when using our services
• Your personal data is processed by us within the EU

Data Controller Information

The data controller responsible for your personal information is:

BrainArt Studio
183 Lindenhof Street
Vienna, Austria
1010

Contact Email: support@gamenexusquest.com
Alternative Email: info@gamenexusquest.com

Your GDPR Rights Explained

1. Right to Be Informed

You have the right to know how we collect, use, and store your personal data. This includes information about:

• What personal data we collect
• Why we collect it and the legal basis for processing
• How long we retain your data
• Who we share your data with
• Your rights and how to exercise them
• How to file a complaint with supervisory authorities

We provide this information through our Privacy Policy and this GDPR Rights page. We ensure all information is clear, concise, and easily accessible.

2. Right of Access

You have the right to request access to your personal data. This right allows you to receive:

• Confirmation of whether we process your personal data
• A copy of your personal data we hold
• Information about how we use your data
• Details about data recipients
• Information about data retention periods
• Details about your rights
• Information about automated decision-making (if applicable)

How to Exercise This Right:

Send an email to support@gamenexusquest.com with the subject line "GDPR Access Request" and include:

• Your full name
• Email address associated with our services
• Proof of identity (if required)
• Specific information you want to access (optional)

We will respond within one month. If your request is complex, we may extend this period by two additional months, and we will inform you of the extension.

The first copy of your data is free. We may charge a reasonable fee for additional copies.

3. Right to Rectification

You have the right to correct inaccurate or incomplete personal data we hold about you. This ensures your information remains accurate and up to date.

How to Exercise This Right:

Contact us at support@gamenexusquest.com with:

• The incorrect information
• The correct information
• Any supporting documentation

We will update your information within one month and notify any third parties with whom we shared your data (unless impossible or requires disproportionate effort).

4. Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• Your data has been processed unlawfully
• Deletion is required to comply with a legal obligation
• The data was collected from a child without proper consent

Important Exceptions:

We may refuse erasure if we need to keep your data for:

• Compliance with legal obligations
• Exercise or defense of legal claims
• Public interest or official authority tasks
• Archiving purposes in the public interest

How to Exercise This Right:

Email support@gamenexusquest.com with the subject line "GDPR Erasure Request" and specify:

• Which data you want deleted
• The reason for your request
• Your identity verification

5. Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain situations:

• You contest the accuracy of your data (restriction applies while we verify accuracy)
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing (restriction applies while we verify legitimate grounds)

When processing is restricted, we can still store your data but cannot use it without:

• Your consent
• Legal claims purposes
• Protection of another person's rights
• Important public interest reasons

How to Exercise This Right:

Contact support@gamenexusquest.com with:

• Subject line: "GDPR Restriction Request"
• Reason for restriction
• Specific data to be restricted

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transmit this data directly to another service provider where technically feasible.

This right applies when:

• Processing is based on consent or contract
• Processing is carried out by automated means

What You Will Receive:

• Your personal data in CSV, JSON, or XML format
• Data you provided to us directly
• Data generated through your use of our services

How to Exercise This Right:

Email support@gamenexusquest.com with:

• Subject line: "GDPR Portability Request"
• Preferred format (if any)
• Whether you want us to transfer data to another provider

7. Right to Object

You have the right to object to processing of your personal data in certain circumstances:

Objection to Processing Based on Legitimate Interests

You can object to processing based on our legitimate interests. We must stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for legal claims.

Objection to Direct Marketing

You have an absolute right to object to processing for direct marketing purposes. When you object, we must stop processing your data for marketing immediately.

Objection to Automated Decision-Making

You can object to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects.

How to Exercise This Right:

Contact support@gamenexusquest.com with:

• Subject line: "GDPR Objection"
• Type of processing you object to
• Reasons for your objection

For marketing objections, simply click "unsubscribe" in any marketing email or contact us directly.

8. Rights Related to Automated Decision-Making and Profiling

You have the right not to be subject to decisions based solely on automated processing that significantly affects you, unless:

• It is necessary for entering into or performing a contract
• It is authorized by law
• You have given explicit consent

Currently, we do not use automated decision-making or profiling that produces legal or similarly significant effects. If this changes, we will:

• Inform you clearly
• Obtain your explicit consent where required
• Provide information about the logic involved
• Explain the significance and consequences
• Allow you to request human intervention

How to Exercise Your Rights

Making a Request

To exercise any of your GDPR rights:

1. Send an email to support@gamenexusquest.com
2. Clearly state which right you wish to exercise
3. Provide sufficient information to identify you
4. Include any supporting documentation

Identity Verification

To protect your data, we may need to verify your identity before processing your request. We may ask for:

• Copy of identification document
• Additional information to confirm your identity
• Answers to security questions

We will only use this information for verification purposes and will delete it after verification is complete.

Response Times

We will respond to your request within one month of receipt. If your request is complex or we receive multiple requests, we may extend this period by two months. We will inform you of any extension within one month of receiving your request.

Free of Charge

We do not charge a fee for exercising your rights, except:

• Additional copies of your data (reasonable fee may apply)
• Manifestly unfounded or excessive requests (we may charge a reasonable fee or refuse to act)

Right to Refuse

We may refuse your request if it is:

• Manifestly unfounded
• Excessive or repetitive
• Impossible to fulfill
• Would adversely affect others' rights
• Prohibited by law

If we refuse your request, we will explain why and inform you of your right to complain to a supervisory authority.

Cookie Management

Cookies are subject to GDPR. You have the right to:

• Know what cookies we use
• Understand the purpose of each cookie
• Accept or reject non-essential cookies
• Withdraw cookie consent at any time

How to Manage Cookies

You can manage cookies through:

• Our cookie banner (appears on first visit)
• Cookie settings button (available on all pages)
• Your browser settings

Types of Cookies We Use

Essential Cookies (Always Active):

• Required for website functionality
• Cannot be disabled
• Include session cookies and security cookies

Analytics Cookies (Optional):

• Help us understand website usage
• Improve user experience
• Can be disabled through cookie settings

Marketing Cookies (Optional):

• Deliver relevant advertisements
• Track advertising effectiveness
• Can be disabled through cookie settings

Withdrawing Cookie Consent

To withdraw your cookie consent:

1. Access our cookie settings
2. Deselect the cookie categories you want to disable
3. Save your preferences
4. Clear existing cookies from your browser

Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. The notification will include:

• Nature of the breach
• Categories and approximate number of individuals affected
• Likely consequences
• Measures taken or proposed to address the breach
• Contact point for more information

Children's Data

We recognize that children's data requires special protection under GDPR. For children under 16 (or younger depending on member state law):

• We require parental consent for data processing
• Parents can exercise rights on behalf of their children
• We take extra measures to ensure data is processed lawfully
• We make privacy information easily understandable for children

International Data Transfers

If we transfer your data outside the EEA, we ensure appropriate safeguards are in place:

• European Commission adequacy decisions
• Standard contractual clauses
• Binding corporate rules
• Approved certification mechanisms

You can request information about specific safeguards by contacting us.

Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe we have violated your GDPR rights.

Austrian Data Protection Authority

Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

Other EU Supervisory Authorities

If you are located in another EU country, you can contact your local supervisory authority. A complete list is available at: https://edpb.europa.eu/about-edpb/board/members_en

Data Protection Officer

While we are not currently required to appoint a Data Protection Officer (DPO), you can contact our data protection team at:

Email: support@gamenexusquest.com
Subject Line: "Data Protection Inquiry"

Updates to This Page

We may update this GDPR Rights page to reflect changes in law or our practices. We will notify you of significant changes through:

• Website notification
• Email notification (if you have subscribed)
• Update to the "Last Updated" date

Additional Resources

For more information about GDPR and your rights:

• European Commission: https://ec.europa.eu/info/law/law-topic/data-protection_en
• European Data Protection Board: https://edpb.europa.eu/
• Your local data protection authority

Contact Us

If you have questions about your GDPR rights or how we process your data:

Email: support@gamenexusquest.com
Alternative Email: info@gamenexusquest.com

Postal Address:
BrainArt Studio
Krugerstraße 4
1010 Wien, Austria

We are committed to protecting your privacy and ensuring you can exercise your GDPR rights easily and effectively. Your trust is important to us.