1. Scope
This page summarises how we handle personal data of users in the EU and EEA in line with the General Data Protection Regulation (GDPR). Our full Privacy Policy also applies. The GDPR has been in force since 25 May 2018 and is the main EU/EEA data protection law.
2. Controller
For GDPR purposes, the data controller for this site and the services described here is the entity set out in our Legal Notice (e.g. Maplelotto Canada Inc. / relevant operator). Contact: contact@maplelottocanadian.com or our Contact page.
3. Legal Basis and Purposes
We process your personal data only where we have a legal basis under the GDPR, including:
- Contract: To perform our contract with you (e.g. account, ticket facilitation).
- Legitimate interests: To run and improve the site, prevent fraud, and ensure security, where not overridden by your rights.
- Consent: Where we rely on consent (e.g. optional cookies, marketing), you may withdraw it at any time.
- Legal obligation: Where we must process data to comply with the law.
4. Your Rights (EU/EEA)
Under the GDPR you have the right to:
- Access: Obtain confirmation as to whether we process your data and a copy of that data.
- Rectification: Have inaccurate personal data corrected.
- Erasure (“right to be forgotten”): Request deletion of your data in certain cases.
- Restriction: Request that we limit processing in certain situations.
- Data portability: Receive your data in a structured, machine-readable format where applicable.
- Object: Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: Where processing is based on consent.
- Lodge a complaint: With a supervisory authority in your country (e.g. in the UK, the ICO; in Ireland, the DPC).
To use these rights, contact us at contact@maplelottocanadian.com or via the Contact page. We will reply within the timeframes required by the GDPR (generally one month).
5. Retention
We keep your data only as long as needed for the purposes it was collected for (e.g. account and legal obligations) or as required by law.
6. International Transfers
If we transfer data outside the EU/EEA, we put in place appropriate safeguards (e.g. adequacy decision, standard contractual clauses) as required by the GDPR.
7. Cookies
We use cookies as described in our Cookie Policy. Non-essential cookies are used only with your consent where required. You can update your preferences at any time.
8. Updates
We may update this GDPR page to reflect changes in law or our practices. The “Last updated” date (or equivalent) on the Privacy Policy and this page will be revised when we do. We encourage you to review these pages periodically.
9. Contact & Data Protection Enquiries
For data protection or GDPR-related requests: Contact or contact@maplelottocanadian.com.
