2 COMPOSITION OF PROCESSED PERSONAL DATA AND PURPOSE OF THEIR PROCESSING
2.1 Personal Data that the Users provide when using the Application:
Every User who decides to use the Application has to create an account in order to participate in the experience of the Application. When a User creates an account, We will ask the User to choose a unique username and password. We require this information so that the User can log into the account and participate in the features of the Application. We do not use usernames to identify individual users outside of their activities on the Application and services related to it.
We will also ask you for the User’s date of birth, gender, telephone number, country the User lives in and which language he / she speaks. The User may share his / her password with his / her parent(s) or legal guardian, but never share it with anyone else, not even his / her friends. An email address can be also added to the User’s account in case a User cannot remember the set password and need to reset it.
Users may be asked to provide or may choose to add an email address to their account for added verification and/or to enable certain features. The primary purpose for this email address is to provide account security, since this is the only way for the Operator to check the authenticity of an account owner. In this circumstance, children are asked to provide a parent email address. Users may change the email address associated with their account at any time; however, a notification will be sent to the previously provided email address upon making that change.
When an adult User submits any Personal Data relating to a child User in connection with the Application, the adult User represents that they have the authority to do so and agree to Us using the Personal Data in accordance with this Policy.
2.2 Why does the Operator (Data Controller) processes Users’ data and on what basis?
When a User uses the Application, we process his / her data in ways that enable us to provide the services related to the Application to the User (for example, saving the Users’ game progress).
The data of the Users also enables us to provide related services (for example, account services and support), to maintain our services related to the Application (for example, by troubleshooting issues Users encounter or moderating our games), and to improve the services we provide (for example, by running surveys to get Users’ feedback).
2.3 What data does the Operator process?
When Users access and use the Application, we may collect information Users submit to us or through the Application, for example when creating an account or contacting us for support. We may also automatically collect information about your use of the Application and the device you use to access the Application. When Users see our ads outside of the Application, we may collect information about Users’ interactions with those ads. We may use the data we collect to infer other data, for example about Users’ content preferences.
2.4 Where does the Operator collect Users’ data from?
Primarily, we collect data directly from the Users or the Users’ device when a User uses the Application. However, we may also receive data about a User from other companies, for example third-party login providers if a User chooses to use them or advertising partners involved in delivering our ads to Users outside of the Application.
2.5 Actions Performed By The Operator With Users’ Personal Data
A User grants the Operator the right to perform the following actions (operations) with Personal Data:
● collection, recording, systematization, accumulation;
● to manage the User's account, support and provide information;
● to monitor the effectiveness of visiting the Application;
● storage on the territory of the Republic Cyprus until the loss of legal grounds for processing and during the storage periods established by regulatory documents;
● clarification (update, change);
● depersonalization, destruction, removal;
● fraud detection;
● transfer (provision, access) to third parties in accordance with the conditions and purposes specified in this Policy and the current legislation of the Republic of Cyprus;
● other actions solely for the purpose of fulfilling the User Agreement and providing access to the Application.
The transfer of data to third parties is carried out only for the purposes of using the functionality of the Application by the User. Users hereby give their full consent to the transfer of their Personal Data to third parties for the purposes of the functioning of the Application.
The Operator processes Personal Data for the period necessary to achieve the goals defined by the Operator in this Policy.
We guarantee to our Users child safety while using the Application. This means that accounts of Users will never include any pop-up ads or other advertisements directed to children. In addition, Child Users are blocked from accessing external links. External links will only be available if an Adult User enters his or her password.
We will never sell or rent the Personal Data of any User to a third party, except as described in this Policy in the context of a sale of the Operator (the company).
Where we intend to process Users’ Personal Data for a purpose other than that for which it was originally collected, We will provide Users with information on that other purpose and any relevant further information prior to such processing.
2.6 Who does the Operator share Users’ data with?
Users’ data is likely to be transferred to and/or processed in countries other than their home country when they access or use the Application. Where allowed by applicable laws and regulations, a User consents to the transfer of his / her data outside of his / her home country by using the Application. The Operator routinely shares data within its internal group and to our service providers and partners who we work with to provide the services related to the Application. By design, some information (such as a Users’ in-game alias or chat messages) may also be visible to other users of the Application. More rarely, the Operator may need to share data when making changes to its corporate structure, when required by applicable law or regulation, or when necessary for the Operator’s legal rights or someone’s vital interests.
The Operator may share Users’ data with third parties to achieve the purposes described in this Privacy Policy. This may include sharing data with the following types of recipients:
● other companies in the internal group of the Operator, for example where they help the Operator develop or operate the Application or other games;
● persons or companies outside of the Operator’s group that provide services to the Operator and process data on the Operator’s behalf when providing those services (for example, providers of hosting services, analytics services, services that add functionality to the Application, or other services that help the Operator develop and operate the Application;
● other partners the Operator works with while providing the services related to the Application (who may process Users’ data independently of the Operator), including advertising partners;
● prospective or actual buyers (including their agents or advisors) in the context of a planned or actual acquisition, merger, or other business restructuring;
● competent courts of law or other government authorities where the Operator believes disclosure is necessary as a matter of applicable law or regulation;
● any person or entity where We believe disclosure is necessary to exercise, establish or defend our legal rights or to protect Users’ or another person’s vital interests; or
● with any other person or entity with the Users’ consent.
The Operator may transfer Users’ data outside of the European Union (EU) and the European Economic Area (EEA). For example, a number of servers We may use for hosting data may not be located in the EU or the EEA, and some of our group companies or the service providers we use to provide the services related to the Application may be located outside of the EU and the EEA. These countries may have data protection laws that differ from the laws of a User’s home country. In these cases, the Operator will provide appropriate safeguards to protect a User’s Personal Data. This may include applying the standard contractual clauses approved by the European Commission for transfers of Personal Data or other safeguards recognized by applicable laws and regulations. Upon request, the Operator can provide Users with a copy of the European Commission’s standard contractual clauses and further details on the applicable safeguards.
2.7 How does the Operator keep Users’ data secure?
The Operator has adopted measures to provide Users’ data a level of security appropriate for the degree of risk involved with the processing activities described in this Policy. These measures are designed to protect Users’ data against accidental or unlawful destruction, loss, or alteration as well as unauthorized disclosure or access. The specific measures we employ vary, but typically include, for example, encryption in transit, pseudonymization of identifying data where feasible, controls to limit access to services or systems that contain Personal Data, and maintaining procedures to handle any suspected security incidents. Please consider that, despite our efforts to secure your data, the internet is an inherently insecure environment and we cannot guarantee absolute security for your data.
2.8 Retention Time
Information belonging to Users is kept for as long as necessary to provide our services through the Application, or as needed to fulfil the purposes outlined in this Policy. Prior to destruction the Operator is required by Law to extend the retention period. In some cases records may be reviewed when child protection / safeguarding interventions have occurred or where the Operator has been involved in multi-agency investigations.
Upon Account cancellation, User anonymised data may nonetheless persist internally in Our archive files or similar databases and may still be used, on an anonymous basis, for our internal support, administrative, and record-keeping purposes including, but not limited to, allowing us to improve the services We provide through research, evaluation, and analytics as permissible by applicable data protection and privacy laws.
Following a request to delete information or a User’s account as provided under section 7 of this Policy, information including Personal Data may remain in backup or archive records, and We may retain certain data if required by applicable laws, relevant to preventing fraud or future abuse, or for legitimate business purposes, such as account recovery and customer support, and all subject to Our internal records retention periods. All retained data will continue to be subject to the privacy policy in effect at that time and applicable law.