GDPR Data Protection Rights in Finland

Last Updated: January 7, 2025

Effective Date: January 7, 2025

1. Introduction to GDPR in Finland

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies throughout the European Union, including Finland. As a Finnish resident, you have specific rights regarding how your personal data is collected, processed, and stored by organizations like Black Ninja Social Slots.

2. Your Data Protection Rights

Under GDPR, you have the following fundamental rights regarding your personal data:

2.1 Right of Access (Article 15)

You have the right to:

• Know whether we process your personal data
• Access your personal data
• Receive information about how we process your data
• Get a copy of your personal data in a commonly used format

2.2 Right to Rectification (Article 16)

You have the right to:

• Have inaccurate personal data corrected
• Have incomplete personal data completed
• Request updates to outdated information

2.3 Right to Erasure - "Right to be Forgotten" (Article 17)

You have the right to have your personal data deleted when:

• The data is no longer necessary for the original purpose
• You withdraw consent and there's no other legal basis
• The data has been unlawfully processed
• Deletion is required for legal compliance

2.4 Right to Restrict Processing (Article 18)

You can request that we limit the processing of your data when:

• You contest the accuracy of the data
• Processing is unlawful but you don't want deletion
• We no longer need the data but you need it for legal claims
• You've objected to processing pending verification

2.5 Right to Data Portability (Article 20)

You have the right to:

• Receive your data in a structured, commonly used format
• Transmit your data to another service provider
• Have your data transmitted directly when technically feasible

2.6 Right to Object (Article 21)

You can object to processing based on:

• Legitimate interests (including profiling)
• Direct marketing purposes
• Scientific, historical research, or statistical purposes

2.7 Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produces legal effects or significantly affects you.

3. How to Exercise Your Rights

To exercise any of your GDPR rights, you can contact us through the following methods:

3.1 Contact Information

3.2 Request Process

When making a request:

• Clearly state which right you wish to exercise
• Provide sufficient information to identify you
• Include any relevant details about your request
• We may request additional information to verify your identity

3.3 Response Timeline

We will respond to your request:

• Within 1 month of receiving your request
• Extended to 3 months for complex requests (with notification)
• Free of charge for reasonable requests
• May charge a fee for excessive or repetitive requests

4. Data Processing at Black Ninja Social Slots

4.1 Legal Basis for Processing

We process your personal data based on:

• Consent: Marketing communications, optional cookies
• Contract: Providing social gaming services
• Legal Obligation: Age verification, compliance requirements
• Legitimate Interest: Website functionality, security, analytics

4.2 Data Categories We Process

• Contact information (name, email, phone)
• Technical data (IP address, browser, device info)
• Usage data (website interactions, game activity)
• Communication data (support requests, feedback)

4.3 Data Retention Periods

• Contact Data: 3 years after last interaction
• Technical Data: 26 months (anonymized after 14 months)
• Support Communications: 2 years
• Age Verification: 30 days (browser storage only)

5. Finnish Data Protection Authority

If you're not satisfied with how we handle your data protection request, you have the right to lodge a complaint with the Finnish Data Protection Authority (Tietosuojavaltuutetun toimisto):

6. International Data Transfers

When we transfer your data outside the EU/EEA, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Certification schemes and codes of conduct

7. Data Breach Notification

In case of a data breach that may result in high risk to your rights and freedoms:

• We will notify the Finnish Data Protection Authority within 72 hours
• We will inform affected individuals without undue delay
• We will provide clear information about the breach and recommended actions

8. Children's Data Protection

Special protections for minors under GDPR:

• Our services are only for adults 18 years and older
• We do not knowingly process data of children under 16
• Any data of minors discovered will be deleted immediately
• Parents/guardians can exercise rights on behalf of children

9. Automated Decision-Making and Profiling

Regarding automated processing at Black Ninja Social Slots:

• We do not use automated decision-making that significantly affects users
• Any profiling is limited to improving user experience
• You can opt-out of profiling for marketing purposes
• No automated decisions affect your access to services

10. Updates to This Information

This GDPR information page will be updated to reflect:

• Changes in data protection laws
• Updates to our data processing practices
• New guidance from Finnish or EU authorities
• Improvements to our data protection procedures

11. Additional Resources

For more information about GDPR and your rights:

• Finnish Data Protection Authority
• European Data Protection Board Guidelines
• European Commission - Data Protection
• Our Privacy Policy