Your Rights Under GDPR
Last Updated: October 1, 2025
This page serves as a supplement to our main Privacy Policy and is specifically for residents of the European Union (EU) and European Economic Area (EEA). GreatLakes1Play ("we," "us," or "our") is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection.
1. Data Controller
GreatLakes1Play is the data controller for the personal information collected via the greatlakes1play.com website. This means we are responsible for deciding how we hold and use personal information about you.
If you have any questions about this GDPR notice, please contact our Data Protection representative at privacy@greatlakes1play.com.
2. Legal Basis for Processing Your Personal Data
We only process your personal data when we have a valid legal basis to do so. The legal bases we rely on include:
- Consent: We process your personal data when you provide it to us through our contact form or when creating an account, based on your explicit consent to do so for the specific purposes we have communicated to you.
- Legitimate Interest: We may process your information where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes activities like improving our Service, ensuring platform security, and preventing fraud.
3. Your Data Protection Rights Under GDPR
If you are a resident of the EEA, you have the following data protection rights:
- The right to access: You have the right to request copies of your personal data from us.
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete any information you believe is incomplete.
- The right to erasure (the ‘right to be forgotten’): You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions, particularly where we process your data based on legitimate interest.
- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, in a structured, commonly used, machine-readable format.
Automated Decision-Making and Profiling: We do not use your personal data for automated decision-making or profiling that would have a legal or similarly significant effect on you.
4. How to Exercise Your Rights
If you wish to make a request to exercise any of your rights under the GDPR, please contact us at:
Email: privacy@greatlakes1play.com
We will respond to your request within one month. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).
5. International Data Transfers
GreatLakes1Play is based in Canada. The European Commission has recognized Canada as providing an "adequate" level of data protection, which means that data transfers to Canada are considered secure under GDPR standards.
When we share data with third-party service providers who may be located outside the EEA, we ensure that appropriate safeguards are in place to protect your data, such as the use of Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Right to Lodge a Complaint
If you have a concern about our use of your information, you have the right to lodge a complaint with the data protection supervisory authority in your EU member state of residence, place of work, or place of the alleged infringement.