GDPR and Your Personal Data

Your Rights Under the GDPR

If the GDPR applies to the processing of your personal information, you may have a number of rights. Depending on the circumstances and the legal basis for processing, these may include the right to:

• receive information about how your personal information is processed;
• access the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information;
• request restriction of the processing of your personal information;
• object to certain processing of your personal information;
• receive certain personal information in a portable format where applicable;
• withdraw your consent at any time where processing is based on consent.

These rights are not absolute and may not apply in every situation. Whether a particular right applies depends on factors including the purpose and legal basis of the processing.

Accessing or Deleting Your Information

You can manage much of the information associated with your Risingshadow account directly through your account settings. You can also delete your account using the account management features provided by the Service.

When your account is deleted, personal information associated with the account will be deleted or anonymized where there is no other lawful basis for retaining it.

Discussion posts, book reviews, and other published content may, in certain circumstances, remain after account deletion in order to preserve the integrity and continuity of discussions, reviews, and database content.

For more information about account deletion and data retention, please see our Privacy Policy.

Requesting Your Personal Data

If you would like to access the personal information we hold about you, request a correction or deletion, or exercise another applicable privacy right, please contact the Risingshadow administration.

We may need to verify your identity before completing a request in order to protect your account and personal information from unauthorized access.

Right to Lodge a Complaint

If you believe that your personal information has been processed in violation of applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.

Risingshadow is based in Finland, where the supervisory authority is the Office of the Data Protection Ombudsman.

Depending on where you live, you may also have the right to contact the data protection authority in your country of residence.

About Risingshadow and the GDPR

Risingshadow is based in Finland and is therefore subject to applicable Finnish and European Union data protection legislation, including the GDPR.

Our own server environment is located in Finland. Some third-party service providers used to operate the Service may process information outside Finland or outside the European Economic Area (EEA). More information about service providers and international data transfers is available in our Privacy Policy.

More Information

Our Privacy Policy provides detailed information about:

• what personal information we collect;
• why and on what legal basis we process personal information;
• cookies and analytics;
• third-party service providers;
• international data transfers;
• how long information is retained;
• how we protect personal information;
• your privacy rights.