GDPR Data Rights

Your Rights Under GDPR

The General Data Protection Regulation (GDPR) gives you specific rights regarding your personal data. At TotalTCG, operated by TotalTCG Ltd, we are committed to helping you exercise these rights.

This page explains your rights and how to exercise them. For our full data practices, please see our Privacy Policy.

Overview of Your Rights

Detailed Explanation

1. Right of Access (Article 15)

You have the right to obtain confirmation as to whether we are processing your personal data and, if so, access to that data along with:

• The purposes of the processing
• The categories of personal data concerned
• The recipients to whom data has been disclosed
• The retention period or criteria for determining it
• Your other rights under GDPR

2. Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected without undue delay. Taking into account the purposes of processing, you also have the right to have incomplete personal data completed.

3. Right to Erasure (Article 17)

You have the right to request the deletion of your personal data when:

• The data is no longer necessary for its original purpose
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Deletion is required for legal compliance

4. Right to Restriction (Article 18)

You can request restriction of processing when:

• You contest the accuracy of the data (during verification)
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing (pending verification)

5. Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request direct transfer to another controller where technically feasible.

6. Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests.

7. Rights Related to Automated Decisions (Article 22)

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. TotalTCG does not make fully automated decisions that have legal or similarly significant effects on users.

AI Card Scanner Data Processing

Our AI-powered card scanner processes images to identify trading cards. Here is how we handle this data:

How to Exercise Your Rights

Submit a Request

To exercise any of your rights, please contact us using one of the following methods:

What We Need From You

To process your request, we may need to verify your identity. Please include:

• Your full name and email address associated with your account
• A description of the right(s) you wish to exercise
• Any relevant details to help us identify the data concerned

Response Time

We will respond to your request within one month. If your request is complex or we receive many requests, we may extend this by an additional two months, but we will inform you of any extension within the first month.

Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO):

We encourage you to contact us first so we can try to resolve your concerns directly.

Data Controller

The data controller responsible for your personal data is: