PAL offers optional push notifications. Receiving notifications is not a condition of using PAL.
Users can separately choose whether they wish to receive game notifications, PAL News notifications and weekly inactivity reminders.
Data processed: PAL user account identifier and academy relationship, technical push subscription data and endpoint, push keys generated by the browser, technical identifiers associated with the device/subscription, the user's language preference, notification preferences, notification type and related event identifier, and timestamps and status information required for delivery and deduplication. For weekly reminders, PAL also uses the account's existing last-activity timestamp to determine whether the reminder criteria are met.
Purpose of processing: delivering PAL push notifications requested by the user, managing the selected notification categories, preventing duplicate deliveries, and operating the push service securely and reliably.
Legal basis: the legal basis for sending push notifications and processing the associated subscription data is the user's consent under Article 6(1)(a) GDPR. Limited technical logging necessary for service security, troubleshooting and prevention of duplicate deliveries is based on the controller's legitimate interests under Article 6(1)(f) GDPR.
Retention: active push subscription data is processed until the user disables notifications, withdraws consent, or the subscription becomes technically invalid. Revoked or invalid subscriptions are deleted or permanently deactivated within 30 days at the latest. Technical delivery, troubleshooting and deduplication logs are retained for no longer than 90 days. Minimum audit information necessary to demonstrate the granting and withdrawal of consent is retained for the applicable legal claims and compliance period in accordance with PAL's general retention rules.
