Privacy Policy

1. Data controller

2. Data we collect

When you join the DNA NEMESIS list, we collect your name, email address, consent version and the date and time of registration. For security and abuse prevention, the server may temporarily process a pseudonymous technical identifier derived from your IP address; the raw IP is not stored in the registration database.

3. Why we use your data

• To manage your registration and send DNA NEMESIS news.
• To invite you to closed betas and exclusive pre-launch playtests.
• To prevent automated abuse and protect the registration service.

4. Legal basis

News and testing invitations are sent on the basis of your freely given, specific, informed and unambiguous consent under Article 6(1)(a) GDPR. Security and abuse-prevention processing is based on our legitimate interest in protecting the service under Article 6(1)(f) GDPR.

5. Retention

Registration data is kept while you remain subscribed or until you withdraw consent. After withdrawal, only the minimum information needed to evidence compliance or address legal claims may be blocked for the applicable limitation period. Temporary rate-limit records are automatically deleted after approximately 48 hours.

6. Recipients and international transfers

We do not sell your personal data. It may be processed by hosting, database, security and email-delivery providers acting on our instructions. If a provider processes data outside the European Economic Area, an adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, will be used where required.

7. Your rights

You may request access, correction, deletion, restriction, portability or objection, and withdraw consent at any time without affecting earlier lawful processing. Contact privacy@dnanemesis.com. You may also lodge a complaint with Malta's Information and Data Protection Commissioner (IDPC) or the supervisory authority in your country of residence.

8. Email preferences

Every promotional email must provide a simple and free way to unsubscribe. You can also withdraw consent by contacting the privacy email shown above.

9. Children

This registration service is not directed at children under 13. A parent or legal guardian must provide consent where required by the law applicable to the child, including where another country sets a higher digital-consent age.

10. Security and changes

We apply proportionate technical and organisational measures to protect registrations. This policy may be updated when the service, providers or legal requirements change; the current version and date will always be published here.