Privacy Policy

Last modification: October 20, 2022

This Privacy Policy applies to all web pages and domains "duel.plus" owned by GALVIN TECNOLOGICA SL; from now on, Duel.

Duel, a Spanish company with registered office in Avda. de Madrid, 197 - 36214, Vigo , CIF: B-27.835.305 Company registered in the Commercial Registry of Pontevedra. Duel is committed to protecting your privacy and values the importance of the confidentiality of your data on the Internet. This privacy policy (from now on, the «Privacy Policy») applies to all services offered to people who use or visit (from now on, the «Users», the «User», «You» or «Yours») the Internet website https://www.galvintec.com/ (from now on, «Website»).

The purpose of this Privacy Policy is to inform you how your personal data collected when using the services available on the Website are processed.

If you access another website through a link or URL available on the Website, this Privacy Policy will no longer have effect. The Company reserves the right to modify this Privacy Policy at any time and to inform you by any means. This Privacy Policy was last modified on the date indicated above.

Likewise, this Privacy Policy is subject to the European General Data Protection Regulation of October 27, 2016.

What is Personal Data?

In this Privacy Policy, personal data means any information relating to identified or identifiable Users, who can be identified, directly or indirectly, specifically by reference to their name, their email address and their IP address (from now on, «Personal Data»). Personal Data does not include anonymous information that has been adequately processed so that it is not identifiable, with the precise objective of irreversibly preventing its identification.

When do we collect Personal Data and what data do we collect?

We may collect Personal Data when you use the services available on the Website, such as:

  • Visit the Website

  • Create and manage an account on the Website

  • Sign up for a newsletter

  • Register and participate, directly or indirectly, in any available tournament

  • Contact our services

(from now on, «Services» )

For any of the Services you use, we only collect the data strictly necessary (i) to offer those Services, (ii) to ensure compliance with a contract to which you are a party, (iii) for the processing of which you have given your consent or (iv) for compliance with the legal obligations to which you are subject.

Personal Data collected, therefore, differs from one User to another, depending on the number of Services used by each one.

Personal Data that we may collect during the use of our Services are, for example, your IP address, name, email, age, date of birth, address, social security number etc.

When you visit the Website or use some Services, we may install and store cookies on your equipment (your computer, mobile...). A cookie is a small text file of limited size that is saved on your computer when you visit an Internet website.

Cookies are usually used to improve the user's visit (for example, to temporarily remember your session so that you do not have to fill in your credentials every time you visit the Website or go from one page to another). Other cookies are used to generate statistics or to remember your preferences.

If you want to know more about cookies, see the cookies page.

What is the purpose of collecting your Personal Data?

Your personal data may be collected for the following purposes, depending on the Services you use:

We may collect Personal Data when you use the services available on the Website, such as:

  • To provide you with Services or information you request

  • For the operation of the technical or administrative options of the Website

  • To manage your User account and associated preferences

  • To provide you with an instant messaging service

  • To monitor and analyze the use of Services by Users

  • To count the Website visitors

  • To send commercial offers by email adjusted to your preferences

  • To share information with the organizers of the tournaments in which you are going to participate

  • To respond to requests from administrative or judicial authorities in compliance with current law

Personal Data collected for you to use the Services is necessary to provide you with access to the Services.

Indirect collection of Personal Data. For team tournaments, one member of each team can register all team members. It is not necessary for all team members to have a Duel account at the time of registering for a tournament. All team members will receive an email to inform them of their registration in said tournament. If you do not agree with us storing your Personal Data, please contact us by email by writing to [email protected]

Newsletters and commercial offers. Before engaging you in direct marketing or commercial operations (for example, sending you newsletters and commercial offers), we will ask for your consent, either when creating your account on the Website or later, indicating your choice in your account settings. You can withdraw your consent at any time by directly clicking on the unsubscribe link available in each email you receive, by modifying your account settings, or by contacting us at the following email address: [email protected]

What are your rights and how can you exercise them?

Your rights. As of May 25, 2018, and in compliance with the General Data Protection Regulation 2016/679 of April 27, 2016, you can exercise your right to restrict the processing of, to completely delete (right to be forgotten) and to receive your Personal Data in a format compatible with machine reading (right to data portability), as well as not to be subject to automated individual decision-making.

Your rights from May 25, 2018. As of May 25, 2018, and in compliance with the General Data Protection Regulation 2016/679 of April 27, 2016, you can exercise your right to limit processing, completely delete (right to be forgotten) and receive your Data Personal. Data in a format compatible with automatic reading (right to data portability), as well as not to be subject to automated individual decision-making.

Right to object. To the extent permitted by law, and except in cases where there are indisputable and legitimate reasons for the processing of your Personal Data, you can, at any time, express your disagreement with said procedure, specifically with regard to processed data for direct marketing or commercial purposes.

Right to restrict processing. You can ask us to restrict the processing of your Personal Data to cases where one of the following situations applies, or in any other case stipulated by applicable law:

  • You object to the deletion of your Personal Data and request the restriction of its use instead of its deletion in the event that the processing is unlawful (for example, in the event that someone has created an account in bad faith with information related to with you, such as your email or other personal information)

  • You dispute the accuracy of the Personal Data, during a period in which we will verify the veracity of the data collected

  • The Personal Data is no longer necessary for the purposes of the processing, but you request that we store it for the establishment, exercise or defense of legal claims

In the event that processing is restricted, your Personal Data, apart from its storage, will only be processed with your consent or for the establishment, exercise or defense of legal claims, as well as for the protection of the rights of another natural person or legal, or for reasons of important public interest.

If the restriction on such processing is lifted, we will inform you by the most appropriate means (for example, by email or postal mail).

Right to data portability. We grant you the possibility of receiving your Personal Data in a structured, commonly used and machine-readable format. You can exercise this right on your account page or contact us at the address indicated below.

Right to deletion. You can exercise your right to delete your Personal Data from your accounts page, in the "Delete" panel. The deletion of your Personal Data applies to all the data you have provided, with the exception of the alias used in tournaments in which you have registered or in which you have already participated. Alias storage is intended to preserve the integrity of the tournament results, and is done for historical and archival purposes.

In case you want to delete your alias, you must contact us by email before deleting your account. We will send you a response within one month of receiving your request. This period could be extended by two more months if necessary, taking into account the complexity and number of requests.

Exercise of your rights. You can exercise your rights by contacting us by postal mail by writing to the following address:

GALVINTEC - Privacy

Avda. de Madrid, 197 - 36214, Vigo

[email protected]

To guarantee the confidentiality and protection of personal data, the request must include an identity document.

To the extent permitted by applicable legislation, when a subject's requests regarding their data are manifestly unfounded or excessive, specifically given their repetitive nature, we may refuse to comply with such requests or establish a reasonable fee for the procedure, taking into account the administrative costs of providing the requested information.

Storage time of your data?

Your Personal Data is stored in a secure technical environment.

Depending on the processing of your Personal Data, these may be subject to different storage periods.

Most of your Personal Data is stored for three (3) years from your last use of the Website or a Service.

However, the IP address we collect during your visit is stored for only one year.

At the end of the storage period, the Personal Data is purged and deleted from our database.

Recipients of your data?

We may transmit to our processing agents and partners the processing of your Personal Data, according to our instructions. Additionally, when you register for a tournament available on Duel, you agree that the tournament organizer will have access to the data you entered during registration.

The recipients of your data are:

  • Tournament organizers

  • The Website moderation service

  • Law enforcement authorities within the framework of judicial requirements regarding fraud or other legal reasons

  • The administrative and judicial authorities competent in requests relating to the investigation or identification of a person, in strict compliance with current legislation

  • The companies, subsidiaries and affiliates, of the group

We will not sell your Personal Data to any advertisers or third parties. We use your Personal Data to show you relevant ads, based on your preferences. We prepare reports related to advertising campaigns, specifically statistics, without using references or information related to the Personal Data of visitors or Users of the Website. You can also block advertising cookies on the page dedicated to them.

What can tournament organizers do with the data collected from participants?

Registration and participation in tournaments. The Duel's available Services allow tournament organizers to collect and process the Personal Data of participants who have registered for the tournament. The organizers of each tournament will be responsible for the processing of Personal Data collected for their event.

As a tournament organizer, you can choose to define the purposes and means of the processing implemented for the operation of your tournament, in compliance with this Privacy Policy and the stipulations relating to the General Data Protection Regulation of April 27, 2016. Duel would in such case act as processing agent on behalf of the organizer, who is responsible for the processing carried out.

In the event that the organizer of a tournament collects Personal Data that does not comply with what is stipulated in this Privacy Policy or in the General Data Protection Regulation of April 27, 2016, Duel reserves the right to close the tournament's organizer account (1) notifying it in writing unless, within thirty (30) days, the organizer cures the breach incurred; or (2) immediately, in the event of a serious or repeated breach of such provisions.

Data collected by organizers. Tournament organizers are authorized to collect participant data that is strictly necessary for the operation of their events. For example, such data may correspond to personal data necessary to verify tournament eligibility conditions, such as age, address or any other relevant information. In addition, the organizer may request proof from participants to verify the accuracy of such data.

However, tournament organizers are not authorized, through the use of the Services, to ask participants for personal data that is sensitive or that may pose a risk (for example, political or religious opinions, passport or identification number, credit cards or social security number).

Data security. Tournament organizers are authorized to collect participant data that is strictly necessary for the operation of their events. For example, such data may correspond to personal data necessary to verify tournament eligibility conditions, such as age, address or any other relevant information. In addition, the organizer may request proof from participants to verify the accuracy of such data.

User Rights. Tournament organizers undertake to respect the rights of Users as defined in the Privacy Policy. Report abuse. If you believe that a tournament organizer is not acting in accordance with this Privacy Policy, you may notify us by email at [email protected]

Who is a data protection officer?

Duel has appointed a data protection officer in charge of assisting the controller in compliance with the General Data Protection Regulation. For any questions related to Duel's privacy policy, you can contact the data protection officer by email by writing to [email protected]

How do we protect your Personal Data?

We take various measures to ensure the security of your Personal Data from possible loss, unauthorized access, modification, disclosure or destruction, and specifically:

  • User passwords are encrypted in the database

  • We use the TLD (top level domain) protocol for forms containing Personal Data, so the information is encrypted on the network

  • Access to Personal Data is strictly reserved for authorized persons to fulfill their missions

  • In accordance with the European General Data Protection Regulation of April 27, 2016, Duel has ensured that processing agents are committed to respecting the security and confidentiality of data

  • All Duel employees working on the Website are aware of the importance of protecting Personal Data in training, newsletters and team meetings

Modification

We reserve the right to make changes to this Privacy Policy. If a substantial modification is implemented, such as the inclusion of a new purpose, we will inform you in advance. In this way, we guarantee that you have a reasonable margin of time to exercise your right in accordance with applicable laws and regulations.

In any case, we encourage you to review this Privacy Policy from time to time to take into consideration how to protect your Personal Data.