SCOPE OF APPLICATION
Personal data of persons using Company websites (“Users”) are processed in accordance with the applicable regulations on personal data protection. The Company is a controller of personal data of Users as defined in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”).
Company uses third parties for various services related to the Online Services, including customer support, technical support, contest data collection, and email fulfilment. When User enters a contest or sign up to receive a newsletter, Company may share User’s personal information as necessary for third parties to provide services on Company’s behalf. These third parties are not permitted to use such information for their own marketing purposes.
COLLECTION OF PERSONAL DATA THROUGH THE WEBSITES
Personal data of the User may be collected and processed in connection with the provision of services offered by the Website, testing games, sending marketing offers, newsletters, providing technical support for Users, answering questions and complaints, participating in competitions organized by the Company, filling in questionnaires concerning the Website and making other functionalities of the Website available.
In order to receive newsletter, marketing offers, test games or participate in competitions, the User provides some personal data, i.e. e-mail address. While using the Website, other data concerning the history of use, use of the account functionalities, etc. may also be processed. In this case, personal data of the User is processed in order to provide services offered by the Company in accordance with the Regulations, such as sending marketing offers and newsletters, downloading and searching for content, enabling testing of games, using communication tools. The processing of data for the above purposes is lawful, because it is necessary to perform the contract concluded with the User, i.e. to provide the above-mentioned services (legal basis – Article 6(1)(b) of the GDPR).
Providing personal data is voluntary, however, failure to provide data which are necessary to use a given service of the Website may prevent the User from using this service, e.g. prevent receiving the newsletter and marketing information, prevent the provision of answers to inquiries and complaints, or prevent participation in competitions.
Personal information is information that identifies the User and that may be used to contact the User online or offline. The Company collects personal information from User on a voluntary basis. When User submits personal information to the Company, it will usually take the form of:
Subscribing to newsletters or alerts;
Registration for Online Services, websites, products, contests, and special events;
Using “tell a friend,” “email this page,” or other E-Card features;
Requesting technical support;
Downloading demos, programs, or other software;
Participating in polls, surveys, and questionnaires; or
Otherwise through use of our software, including console products, mobile products, and personal computer products, and through the use of our online products or Online Services where personal information is required for use and/or participation.
The types of information collected in connection with the activities listed above will vary depending on the activity. The information Company collects may include personal information such as your first and/or last name, e-mail address, mailing address or geolocation. In addition, Company may collect User’s age, gender, date of birth, zip code, hardware configuration, console ID, software products played, survey data, purchases, IP address and the systems User has played on. Company may combine the information with User’s personal information and across other computers or devices that User may use. Prize winners may be required to provide additional information for prize fulfilment.
If User uses or registers for an Online Service through a third-party service such as a gaming console’s network service, an internet based gaming service, or a social network website, or request that Company associates a Company account with a third-party service account, then limited user account personal information may be transferred to the Company as part of the registration process and Company may be able to collect information about User’s use of the Online Services.
When User plays certain software products published by the Company, information about User’s gameplay may be collected and transmitted to the Company through network services or any other internet connection method used by the hardware on which User plays such games.
COMPLAINTS, QUESTIONS AND TECHNICAL SUPPORT
When contacting for technical support, other questions or complaints, the User indicates their details, such as e-mail address, in order to be able to obtain answers to their questions or complaints. This data is processed for the purpose of providing information regarding questions and complaints. The data processing is lawful because it is necessary for the purposes resulting from the legitimate interests pursued by the Company (legal basis – Article 6(1)(f) of the GDPR). The legitimate interest of the Company consists in the necessity to respond to inquiries of Users and to process complaints.
If the Company announces a competition on its website, the User may be asked to provide the personal data indicated in the relevant competition form in connection with entering such a competition. The data of the User participating in the competition are processed for the purposes of carrying out the competition, including the purpose of providing the results of the competition and prizes. The processing of data for the above purpose is lawful, because it is necessary for the Company to carry out the competition, i.e. to fulfil its obligations resulting from the organization of the competition (legal basis – Article 6(1)(b) of the GDPR).
Through the Website, the User may consent to direct marketing, i.e. receiving marketing information by electronic means, including e-mail applications. In such a case, the basis for data processing will be the User’s consent (legal basis – Article 6(1)(b) of the GDPR). The marketing information provided in this manner may include, but is not limited to, information about the Company’s services and products, questionnaires, newsletters, etc. This consent is entirely voluntary and is not a prerequisite for the use of the Websites. The User can opt out of receiving marketing information via electronic means at any time, e.g. by clicking on the link included in the received e-mail containing marketing content.
ANALYSIS AND RESEARCH
In the event of data collection for using technical support, submitting complaints and inquiries, participating in competitions, sending marketing information via electronic means, the Company may process User data for statistical and marketing analyses, developing marketing strategies and improving the quality of its services and products as well as the performance of the Websites. For this purpose, the Company may also use anonymous and non-anonymous questionnaires filled in by Users directly with the use of forms available on the Website or sent by Users via e-mail or in any other way. The data processing for the above purposes is lawful because it is necessary for the purposes resulting from the legitimate interests pursued by the Company (legal basis – Article 6(1)(f) of the GDPR). The legitimate interest of the Company consists in processing the data of the Client and the User in order to improve the quality of services and marketing of the Company’s services and products.
CONSENT FOR PERSONAL DATA PROCESSING
If the Company asks the User to consent to the processing of personal data, e.g. in connection with the electronic transmission of marketing information or in connection with the participation in new projects or initiatives of the Company, and the User has given such consent, the User has the right to withdraw his consent at any time, which will not affect the lawful processing of data until the consent is withdrawn.
Subject to applicable law, the User is entitled to demand access to and receive information about personal data processed by the Company, to update and rectify incorrect personal data, to exercise the right to limit the processing of personal data or to object to the processing of personal data, the right to delete data or, if applicable, the right to data portability. In some cases, the requirements of the law may limit the User’s rights. In addition to the above rights, the User is always entitled to file a complaint with the supervisory authority, which is the President of the Office for the Protection of Personal Data.
DATA SECURITY AND STORAGE
The Company declares that the data stored and processed by it are secured in a necessary manner in accordance with applicable legal regulations. The Company maintains appropriate technical and organizational security measures. Access to the User’s personal data is granted only to employees who need the data in order to provide services and operate the Websites. Personal data of the User will be stored for as long as it is necessary to provide services, participate in a competition and provide technical support, prepare an answer to an inquiry or complaint, and no longer than for the period specified in the law or for the period of the statute of limitations of claims. Where the Company processes data for the direct marketing of its products and services, the data will cease to be processed for this purpose as soon as the User objects to the processing of their data. The User may also withdraw their consent to the sending of marketing information by electronic means at any time, and the information will no longer be sent after the withdrawal of consent.
Company may share User’s personal and other information with third parties in connection with an investigation of fraud, intellectual property infringements, or other activity that is illegal or may expose User or Company to legal liability, including as required by law enforcement or other government officials. Company also may share User’s personal and other information with third parties when we have reason to believe that a disclosure is necessary to address potential or actual injury or interference with our rights, property, operations, users, or others who may be harmed or may suffer loss or damage, or when Company believes that disclosure is necessary to protect Company’s rights, investigate, or enforce the policies, terms, and conditions, combat fraud and/or comply with a judicial proceeding, court order, or legal process served on the Company. In addition, User’s personal and other information may be disclosed to a potential or actual successor or assign in connection with a proposed or consummated merger, acquisition, reorganization, bankruptcy, or other similar event involving all or a portion of the Company, the Company’s customer information may be transferred to our successor or assign.
Information collected or received by the Company in connection with the Online Services is collected in, processed in, or transferred to other countries that may not have equivalent data protection laws to the country where you reside. While User’s information is in another jurisdiction, it may be accessed by the courts, law enforcement, and national security authorities pursuant to the laws of those jurisdictions. If User is a consumer residing in the European Union, the Company relies on Standard Contractual Clauses and/or consent of the individual to transfer personal information from the European Economic Area (EEA) to non-EEA countries. By using Company’s services, User expressly consents to such collection, transfer, and processing. User may request a copy of such Standard Contractual Clauses, if applicable, by contacting firstname.lastname@example.org. Backup data, matchmaking data, and administrative data may also be stored on media or servers located in Poland and other countries.
REDIRECTING TO THIRD PARTY WEBSITES
In the event that Users are redirected to websites of entities other than the Company (e.g. in order to purchase a selected product), the Company does not provide such entities with any personal data of the Users. To the extent that the functions or related websites visited by the User is not Company Website, the Company is not responsible for the processing of personal data related to the use of these websites. In order to understand the principles of data processing on these websites, the User should refer to the privacy policies made available on these websites.
To protect User’s personal information, the Company follows generally accepted industry standards and maintains reasonable safeguards to attempt to ensure the security, integrity, and privacy of the information User has provided. The Company has security measures in place designed to protect against the loss, misuse, and alteration of the information under our control. Personal information collected by the Company is stored in secure operating environments that are not available to the public (e.g., locked rooms). To prevent unauthorized electronic access to personal information, the Company maintains information collected online behind a firewall-protected server. However, no system can be 100% secure and human errors occur, so there is the possibility that there could be unauthorized access to User’s information. By using Company’s services, User assume this risk.
Cookies used in the Website collect anonymous statistical data, store information about participation in polls (without information about the outcome of a poll) and identify active sessions.
Contact details of the Company: Crunching Koalas sp. z o.o., ul. Gwiaździsta 7C, 01-651 Warsaw, Poland, email@example.com
User may be able to sign up for or access the Online Services through third-party platforms such as gaming consoles, mobile devices, other websites and social networking services. When User submits personal information to the Company via a third-party platform, User’s use of that platform is also governed by its terms of service, privacy policies and/or code of conduct. Please review each company’s governing policies before using their services.