1.1 GENERAL INFORMATION
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you play our games. The term „personal data” comprises all data that can be used to personally identify you directly or indirectly.
1.2 DATA RECORDING
HOW DO WE COLLECT YOUR DATA?
On the one hand, your data is collected by you communicating it to us. This may be data that you enter in a contact form or registering to one of our services, for example. Other data is automatically collected when you download and use our games.
WHAT ARE THE PURPOSES WE USE YOUR DATA FOR and what are the legal bases?
We use your data to provide our games to you, including for the purposes of optimization, preventing fraud, customizing in-game offers, and verifying purchases. Furthermore, we gather information of how you use our services or play our games for statistical and analytical purposes. We may also use your personal data for our marketing and advertising purposes. Our marketing and advertising activities may consist in: sending or displaying targeted marketing (in order to reach you with content that is more relevant to you), any other information that we think may appear interesting to you, as well as offers and newsletters.
Pursuant to the GDPR (and other relevant laws), in general, your personal data is processed by us on the following legal bases:
2.2. INFORMATION ABOUT THE RESPONSIBLE PARTY
The responsible party (referred to as the „controller” in the GDPR) is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).
The controller of your personal data is:
Pixel Storm sp z .o.o.
ul. Piękna 7/1a
50-505 Wrocław – Poland
If you have any questions or suggestions about data protection or regarding exercise of your rights, you can send us an email to email@example.com.
You do not need to register in order to play our games. You can however voluntarily connect your game with your Facebook account in order to participate in the Social Events inside the games.
If you connect your Facebook account with our game, the following data is shared with us:
Please note: If you participate in the Social Events, your friends can also see that you play our game and you will also be displayed in the Highscore of your friends. In addition, when your Facebook account is connected, a list of your friends who also participate in Social Event and who have connected their Facebook account with their game is shared.
You can cancel the connection with your Facebook account at any time by logging into Facebook and selecting the “Settings” option. The connection between Facebook and the app can be deleted under “Apps and Websites.”
We collect this data in order to provide our app to you and to be able to connect your account if desired, Article 6(1)(b) GDPR.
To the extent that we, as described above, process your data for the purposes of providing the functions of our app, you are contractually required to provide us with this data. Without this data, we are not able to provide these functions to you.
You are not required to provide the above voluntary information. Without this data, however, we are not able to provide these functions of our app to you.
3.2. SUPPORT REQUESTS
If you send support requests to us by email, via chat within the game, or via messages within social media platforms, we collect and process the data from your request in order to be able to provide a response. For this purpose, it may also be necessary for you to provide us with information about your end device so that we can process the request and resolve any technical problems that may exist.
We collect this data in order to provide our app to you and to be able to process your request, Article 6(1)(b) GDPR.
You are not required to provide the above voluntary information. In particular, you are free to send the request to us under a pseudonym, without giving your real name.
Our apps use the following permissions:
Network connection display
Google Play billing service (Android)
Full access to the network
Search & Siri suggestions (iOS)
Notifications (symbols, tones, banners, control of vibration)
Access to local storage
We use the following advertising networks in order to be able to integrate advertising within our free-of-charge apps. These collect the data described below for the purpose of providing personalized advertising:
Type of data
Google Corporation, 1600 Amphitheatre Parkway in Mountain View, California, United States
AdColony Inc. 1888 Century Park East, Suite 1450, Century City, CA 90067
Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
Device attributes (operating system, hardware, software versions, etc.), processes on the device, identifiers (unique identifiers, device IDs, and other identifiers), device signal (Bluetooth, WLAN, etc.), device settings data (GPS, camera, photos), network and connections (mobile radio or Internet provider, language, time zone, IP address, etc.), cookie data.
Unity Technologies ApS, Vendersgade 28, Sal 1, Kobenhavn, 1363, Denmark
IronSource Ltd., 28 Lilienblum, Tel Aviv, 6513307, Israel
Tapjoy Inc, 353 Sacramento Street, San Francisco CA 94111, USA
You can object to the use of personalized advertising by making the following settings depending on your device type: On iPhone or iPad, first open “Settings,” tap on “Privacy,” and open “Advertising.” Here you can enable “Limit Ad Tracking.” If you use devices with Android and Google Play Services, first open “Google Settings,” tap on “Advertising,” then open “Disable interest-related ads,” then tap on “OK.”
Use of the aforementioned advertising networks and the transmission of the data mentioned is based on our legitimate interest consisting in recouping our investments for the operation of our app through advertising(Article 6(1)(f) GDPR).
You may be able to login through to our Services or connect certain third-party accounts (hereinunder „Third-Party Account”)—such as Steam, Twitch, Xbox Live, PSN — to your account in one of the Controller’s Services, or to interact with it and other users on game forums and communities on third-party platforms. Please note, that these Third-Party Accounts and platforms are operated and managed by third parties (hereinunder „Third-Party Platform”), and are subject to their respective terms and conditions. When you link a Third-Party Account to use our Services, you may be able to connect and interact with and share game information with your friends and network from that Third-Party Account, and, in some cases, you may be able to make purchases through or earn rewards (subject to applicable program terms) from that Third-Party Account. When you access, play or use our Services through a Third-Party Platform or website, the Controller may collect or receive your identifier(s) such as XUID, PUID, IP address, MAC address, as well as other device identifiers, registered email address and other information you authorize such entities to provide them to the Controller. In addition, the Controller may allow you to login to certain Services through Third-Party Accounts. The information collection and sharing practices of these third parties are subject to their respective terms and conditions and privacy policies (e.g. , in case of Steam – https://store.steampowered.com/privacy_agreement/ in case of Google/Stadia – https://stadia.google.com/privacy). If you choose to login this way, you are asked to share certain information with us (which may include name, email, friends and public profile information); the specific information and whether it is required or optional is stated on the permissions page when you first log in with or connect the Third-Party Account. If you play or purchase our Service on your mobile device, we receive information about you from the app stores and other mobile platform providers, including your username and/or device ID.
Third-party tools: We also may use third-party tools to help us manage and analyze our social media presence, and report on comments, mentions and other content that is posted about us on Third-Party Platforms and other social media sites, other public channels and forums. The information collection and sharing practices of these third parties are subject to their respective terms and conditions and privacy policies.
In the event of further processing for purposes other than those for which the data was originally collected, we will notify you regarding those other purposes before further processing, and we will provide you with all other information relevant to this.
As a matter of principle, your personal data will not be disclosed to others without your explicit prior consent, except in the following circumstances:
We will delete or anonymize your personal information as soon as it is no longer needed for the purposes for which we collected or used it in accordance with the preceding paragraphs. As a rule, we store your personal data as long as you use the site or for the term of any applicable contract, unless the data must be kept longer for legal reasons, for a criminal prosecution, or to secure, assert, or enforce legal claims, or it is required to satisfy our legitimate interests, or until you successfully object to such processing.
To use our services you must confirm full legal capacity or, in case of restricted legal capacity, obtain the consent of your legal guardian. We do not knowingly collect or ask for personal information from children. In case you can’t confirm full legal capacity, please do not send us any personal data, including name, address, or email address. If we learn that we have collected personal data of a child, we will delete these as soon as possible. If you think that we might have data from a child, please contact us at firstname.lastname@example.org.
12.1. RIGHT TO INFORMATION
You are entitled at any time, upon request, to obtain information from us about your personal data within the scope of Article 15 GDPR. To request such information you may submit an application by mail or by email to the address given above.
12.2. RIGHT TO RECTIFICATION OF INACCURATE DATA
You have the right to demand that we correct forthwith any inaccurate personal data concerning you. For this purpose, please use the contact addresses listed above.
12.3. RIGHT TO DELETION
12.4. RIGHT TO RESTRICTION OF PROCESSING
You have the right to demand that we restrict processing in accordance with Article 18 GDPR.In case you exercise this right, the Controller ceases the performance of operations on the personal data- except for operations consented to by the data subject – and their storage, in accordance with the adopted retention rules or until the reasons of the proessing restriction no longer exist (e.g. a supervisory authority decision is issued that allows further data processing).
12.5. RIGHT TO DATA PORTABILITY
On this basis, within the scope of data processed by automated means in connection with concluded contract or given consent – the Controller issues the data provided by you in a format which can be read by a computer. It is also possible to request the data to be sent to another entity, provided however, that there is technical capacity in this regard on the part of both the Controller and the designated entity.
12.6 RIGHT TO OBJECT
Pursuant to Article 21 GDPR,you may at any time object to the processing of personal data, on the grounds relating to your particular situation, which is carried out on the basis of the legitimate interest of the Controller (e.g. for analytical or statistical purposes or for reasons relating to the protection of property); the objection in this respect should include a justification.
Moreover, you may at any time object to the processing of personal data for marketing purposes, without the need to justify such objection..
12.7. RIGHT TO COMPLAIN
You also have the to lodge a complaint with the competent data protection authority – in particular in your EU Member State habitual residence, workplace or place of perpetration of an alleged violation The competent supervisory authority in Poland is:
Urząd Ochrony Danych Osobowych
12.8. RIGHT TO withdraw consent
In case personal data processing is based on a given consent, the data subject has the right to withdraw it at any time, nonetheless this does not affect the lawfulness of the processing carried out prior to the withdrawal of consent.
Any requests regarding the exercise of the abovementioned data subjects’ rights shall be submitted:
The request should, as far as possible, indicate precisely what is requested, i.e. in particular:
If the Controller is unable to identify the person submitting a request based solely on the request submitted, the Controller will ask this person for additional information. The provision of such data is not obligatory, but failure to provide such data will result in a refusal to fulfill the request.
A reply to the request shall be given within one month of its receipt. If it is necessary to extend this deadline, the Controller shall inform the person making the request of the reasons for such extension.
The period of data processing by the Controller depends on the type of provided service and the purpose of given processing. In principle, data are processed for the entire period of providing the service or fulfilling a purchase order until the moment of withdrawing consent or an effective objection to the data processing in cases where the legal basis for the processing is the Controller’s legitimate interest.
The data processing period may be extended if processing is necessary to determine and pursue possible claims or to defend against claims and, after that time, only when and to the extent required by law. After the elapse of the processing period, the data are irreversibly deleted and anonymized.
Providing the Controller with personal data is voluntary, in general. If you decide, however, to use certain our services or games the provision of personal data is mandatory. Without data provision, some services may not be available to you, as well as the Controller may not be able to fully address your inquiry.