GDPR & data rights

Last updated — 3 June 2026

This notice supplements our Privacy Notice for visitors in the EEA and the UK, under the GDPR and UK GDPR.

1. Controller

The controller of your personal data is the operator of playomni.org. Contact: [email protected].

2. Lawful bases

• Consent (Art. 6(1)(a)) — for notices and browser push. Given by ticking the box and accepting the browser prompt; withdrawable at any time.
• Legitimate interests (Art. 6(1)(f)) — security, abuse prevention and aggregate analytics.
• Legal obligation (Art. 6(1)(c)) — where the law requires retention or disclosure.

3. Your rights

• Access, rectification and erasure.
• Restriction and portability.
• Objection to processing based on legitimate interests.
• Withdraw consent at any time, without affecting prior lawful processing.

4. Stopping push

Block notifications for this site in your browser settings, or email us to be removed from all notice lists.

5. Processors & transfers

We use a small number of processors (push provider OneSignal, hosting). Where data leaves the EEA/UK it is protected by appropriate safeguards such as Standard Contractual Clauses.

6. Retention & complaints

We keep data only as long as necessary and delete it within 30 days of a valid request. You may complain to your local supervisory authority, though we would welcome the chance to help first.

7. Contact

[email protected] — we respond within one month.