GDPR Compliance Policy
European General Data Protection Regulation (EU 2016/679)
1. Your Data Protection Rights Under GDPR
If you are a resident of the European Economic Area (EEA) or United Kingdom, you have specific data protection rights under the General Data Protection Regulation (GDPR):
- Right to Access: Request copies of your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete details.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer required for regulatory fulfillment.
- Right to Restrict Processing: Request restrictions on how we process your information.
- Right to Data Portability: Request transfer of your data to another organization or directly to you.
2. Legal Basis for Processing Data
We process your data to fulfill contractual obligations (issuing promotional sweepstakes tickets and delivering rewards), comply with legal requirements, and pursue legitimate business interests (fraud prevention and secure payment verification).
3. Financial Non-Refundability Terms
Exercising your GDPR rights (such as data deletion requests) does not nullify our Strict Non-Refundable Policy. Entry pass fees ($25 USD) paid for completed ticket issuances remain non-refundable under all conditions.
4. Sub-Processors & Security
We utilize verified GDPR-compliant third-party services:
- Encrypted Payment Infrastructure: PCI-DSS certified payment processing.
- Transactional Email Services: Encrypted transactional email dispatch.
5. Exercise Your GDPR Rights
To submit a Data Subject Access Request (DSAR) or exercise your data rights, email support@fortune24.com.