This document specifies the selected rights and obligations of the Operator, authorized and affected persons in the processing of personal data within all games (hereinafter as “Game”) provided by the Operator in the information system via the corresponding internet domains or other platforms including, but not limited to, iOS (Apple’s App Store), Android (Google Play), Facebook social network, Amazon platform (hereinafter as “Platforms”) arising from Act no. 18/2018 coll. of Slovakia on Protection of Personal Data (hereinafter as “Data Protection Act”)
Name: POWERPLAY MANAGER, s.r.o.
Headquarters: Budatínska 57, 851 06 Bratislava, Slovak Republic
Company registration number: 36 722 405
Tax identification number: 2022302337
Phone number: +421915637243
(hereinafter as “Operator”)
Article I Preamble
Article II Definitions of basic terms
Article III Affected person
Article IV Personal data processed by the Operator
Article V Third parties
Article VI Safety and security
Article VII Cookies policy
Article VIII Deletion of personal data
Article IX Final provisions
Personal data in the information system of the provided Games are processed in good faith and exclusively in accordance with valid legal regulations and international agreements, which Slovak Republic is bound by.
We always take great care to prevent violation of the basic rights and liberties and legally protected interests of affected persons, especially their right to retain human dignity or to prevent other unlawful encroachment of their rights to protect their privacy.
DEFINITIONS OF BASIC TERMS
Address – is a set of data about the residence of a natural person which includes street name, house number, name of town or part of town, postal code, district name, country name.
Authorized person – is every natural person which comes into contact with personal data as part of their job description or on the basis of authorization and which processes personal data in an extent and in a way specified in the instructions in accordance with the Data Protection Act.
Blocking of personal data – is temporary or permanent pause in processing of personal data, during which the only operations with personal data that can be performed are those that are necessary to fulfill obligations arising from the Data Protection Act.
Consent of the affected person – is any freely given explicit and unequivocal declaration of will by which the affected person declares, on the basis of information provided, his/her consent with the processing of his/her personal data.
Cross-border transfer of personal data – is a transfer of personal data in and out of the Slovak Republic.
Deletion of personal data – is the cancellation of personal data by dissolving, deletion or physical destruction of data carriers in a way that renders the personal data impossible to reproduce.
Disclosure of personal data – is a disclosure of personal data for the purposes of access to the Game. According to the Data Protection Act in a broader context, it is also a handover of personal data for processing to other legal or natural person or a foreign subject.
Game – is information system communicating with the User (also referred to as “Affected person”) using 2D or 3D graphics and sounds for the purposes of entertainment or education.
Information system of personal data – is an information system which is used to systematically process any organized set of personal data that is available according to specified criteria for a purpose that is defined or established in advance, regardless of whether the information system is centralized, decentralized or distributed on functional or geographical basis (hereinafter as “information system”); for the purposes of the Data Protection Act, information system is also a set of personal data which are processed or perpared for processing by partially automatic or non-automatic means of processing.
Office – within this document it is the Office for Personal Data Protection of the Slovak Republic, which is the authority within the state administration with national jurisdiction and headquarters in Bratislava providing independent oversight over protection of personal data and participating in the protection of basic rights and liberties of natural persons regarding the processing of personal data.
Operator – POWERPLAY MANAGER, s.r.o.
Personal data – are data concerning an identified or identifiable natural person. This person might be identified directly or indirectly, especially based on a generally used identifier or based on one or more characteristics or features which constitute his/her physical, physiological, psychological, mental, economic, cultural or social identity.
Processing of personal data – is the performance of operations or set of operations with personal data, especially their acquisition, collecting, distribution, recording, sorting, revising or changing, searching, browsing, rearranging, combining, relocation, usage, storing, blocking, deletion, cross-border transfer, presentation, disclosure or publishing.
Publishing of personal data – is publishing or exposition of personal data in public via mass media devices, publicly accessible computer networks, public performance or display of a piece of work, public declaration, listing in a public directory, register or folder, placement in a publicly accessible place.
Purpose of processing of personal data – is a beforehand clearly defined and specified intent of processing of personal data which is connected to a certain activity.
Service provider – is everyone who processes personal data on behalf of the Operator, in an extent and under conditions agreed upon with the Operator in a written agreement according to § 8 of the Data Protection Act and in accordance with the Data Protection Act.
Third party – is everyone who is not an affected person, Operator, service provider or authorized person.
User – see Affected person.
User has the right from Operator to:
If the Operator rejects the User’s request to exercise his/her rights, the User is entitled to file a complaint at the appropriate Office.
PERSONAL DATA PROCESSED BY THE OPERATOR
The Operator processes personal data of the User which were disclosed by the User for the purposes of his/her serious intention of joining the Game. The User acknowledges the fact that without the disclosure of these data it is not technically possible to join the Game and for this purpose the User disclosed to the Operator the following personal data directly or indirectly:
By registering in the Game, the User gives the Operator consent to process also the following personal data, which the User may withdraw at any time:
The User may withdraw this consent via email where it will be clearly stated that he/she withdraws consent with the processing of concretely specified personal data. The withdrawal of consent must be sent from the email that is connected with the User’s account in the Game. The User may change this email in the Game settings at any time. For faster processing of such request, it is recommended to state the name of the Game and server of the Game in the email message.
For the purposes of the Game it is only admissible to disclose truthful and correct data. The person that disclosed the data bears sole responsibility for the truthfulness and correctness of the disclosed data.
The Operator bears no responsibility for the User's disclosure of his/her personal data to a third party, particularly during the payment process, and the Operator is not under any obligation with regard to the valid regulations on the protection of personal data in connection with such disclosure of personal data.
Personal data such as name or mailing address may be individually requested by the Operator in case the User wins a prize in a competition run by the Operator or a partner of the Operator. In case such data is requested, it is only used for the purposes of delivering the prizes to the User. The User may decline to disclose these data in such case, but it will also mean that he/she is not entitled to receive the prize won in the competition.
The Operator may, in order to increase the quality of gameplay and provided support to the Game, record the User's screen during gameplay by means of third party tools or its own tools. Since this recording cannot identify a concrete User any more clearly and it is not created for the purposes of closer identification of the User, it is not considered as processing of personal data.
The User acknowledges and agrees with the fact that the Operator utilizes services in the Game which compile and utilize the User’s advertising identifier for the purposes of providing advertising and related services (such as Google AdSense for video and AdSense for games, Apple services or Google Analytics Advertising Features). For this reason, third parties such as Google or Apple may compile these identifiers. Since the data compiled this way do not enable identification of persons, they are not considered as personal data.
If the Operator is notified by the User or the User exercises his/her right, or if the Operator finds out that the Operator has disclosed incorrect, incomplete or outdated data or that they were disclosed without a lawful basis, the Operator is obligated to inform about this fact everyone to whom the data was disclosed, without undue delay, in a demonstrable way. The Operator shall specify in this announcement which measures have been taken to correct the situation, especially if the personal data have been blocked, completed, corrected, edited, updated or deleted and which measures are required from the third party. The third party is obligated to take the measures requested by the Operator in the announcement, especially to block the personal data in the information system and complete, correct, edit, update or delete them without undue delay.
The announcement may be omitted only if it is objectively impossible and/or only possible with unreasonable effort. If the Operator refrains from sending the announcement due to objective reasons mentioned in the previous sentence, the Operator is obligated, at the request of the Office, to demonstrate that this omission was justified.
The Operator is entitled to disclose personal data of the User in the necessary extent only to those third parties with which the Operator cooperates on the basis of a contract, which also addresses the agenda of protection of personal data, and only for the purposes of fulfilling the object of such contract. This kind of disclosure of data may be e.g. disclosure to a third party that performs accounting services for the Operator, third party that provides payment methods or third party that is authorized to store data for the Operator (e.g. companies that issue credit cards, banks, PayPal, mobile services, webhosting services, statistical services, etc.), also abroad, but only for the purposes of providing support for the User or only to an extent necessary to provide sufficient support or for the necessary requirements of the Operator, always in accordance with the Data Protection Act.
The Operator obtains, processes and makes accessible to advertising companies the User's localization data obtained from GPS, Wi-Fi or telecommunication towers. These localization data are made accessible to these companies for the purposes of using the advertising systems of these companies. These data, however, are acquired by the Operator in such limited extent and in such a way that it is impossible to identify a concrete natural person from them. With regard to this, it is therefore not possible to consider them as personal data.
When registering via the Facebook social network, the username is filled out automatically according to the name of the user on the Facebook social network. The User's e-mail address connected with the Facebook account will be stored in the database of the Operator. The User may change the username and e-mail address in the account settings directly in the Game.
The service providers below may process personal data disclosed by the User:
The Operator stores personal data of Users at its service provider VSHosting s.r.o., Sodomkova 1579/5, 102 00 Prague - Hostivař, Czech Republic, Company registration number: 61505455.
The Operator utilizes the services of its service provider AppsFlyer, Ltd. (https://www.appsflyer.com) for the purposes of compiling statistics on usage of the Game.
The Operator utilizes the services of its service provider The Fyber Group (Fyber N.V., Fyber Monetization Ltd., Fyber GmbH, Fyber Media GmbH, Fyber RTB GmbH, Advertile Mobile GmbH, and Heyzap Ltd.) (https://www.fyber.com/) for the purposes of providing (displaying) video ads to Users.
The Operator utilizes the services of its service provider Chartboost, Inc. (https://answers.chartboost.com) for the purposes of providing (displaying) video ads to Users.
The Operator utilizes the services of its service provider Unity Ads, Inc. (https://unity3d.com) for the purposes of providing (displaying) video ads to Users.
The Operator utilizes the services of its service provider Facebook (https://www.facebook.com) for marketing purposes.
The Operator utilizes the services of its service provider Google (https://admob.google.com/home/) and their mediation networks (https://support.google.com/admob/answer/3245073?hl=en&ref_topic=7383089) for the purposes of providing (displaying) video ads to Users.
SAFETY AND SECURITY
The Operator is responsible for security of processing of personal data. The Operator is obligated to protect personal data from damage, destruction or loss, change, unauthorized access to them and to prevent their disclosure or publishing or making them accessible and their processing in ways other than those agreed upon. For this purpose, the Operator has taken reasonable technical, organizational and personnel measures appropriate for the way personal data are processed. The measures mentioned in the previous sentence are specified in the Security Guidelines of the Operator, which must be updated to always correspond with the changes accepted during the whole duration of processing.
The Operator processes data acquired from the Users strictly in accordance with valid regulations on protection of personal data. All persons handling personal data of Users are authorized to do so and have been instructed about their obligation to adhere to all privacy and confidentiality principles.
Cookies are small amounts of data in the form of text files which the Game stores on the User's device. Cookies allow the Operator to monitor traffic in the Game, simplify the User's visits of the Game (for example by remembering which language the User selected the last time he/she signed into the Game). A temporary cookie is also used to keep track of the User's “session”. Without that temporary cookie (which is not stored after the User quits the browser), the User would have had to log in again on each page.
The User gives the Operator his/her consent to store cookies on the User's device by allowing his/her Internet browser to install and store cookies. If the User does not wish the Game to install and store cookies on his/her device, he/she can change the settings on his/her Internet browser to reject cookies. For more information about how to reject cookies using the Internet browser settings please consult the “Help” section of your Internet browser (or alternatively visit www.aboutcookies.org). Please note that, if you do set your Internet browser to reject cookies, you may not be able to access many of the features of the Game.
The advertising companies (third parties) may use cookie files in order to display advertisements on the pages of the Operator. The cookie DART file enables these companies and their partners to display advertisements to Users based on their visits of the pages of the Operator or other internet websites. The Users may cancel using the cookie DART file by visiting the appropriate pages of the advertising companies.
DELETION OF PERSONAL DATA
Deletion of User’s account
In case of deletion of the User’s account from the Game, the Operator shall delete the personal data processed by the Operator with consent of the User and personal data necessary to play the Game. These personal data shall be deleted within 60 days since the deletion of the User’s account from the Game, unless they are subject to archivation.
Personal data processed by the Operator with consent of the User
If the User withdraws consent with processing of his/her personal data, the personal data in question (processed with consent of the User) shall be deleted, without undue delay, within 60 days since the withdrawal of consent at the latest. The User shall perform withdrawal of consent via email stating clearly that he/she withdraws consent with processing concrete personal data. The withdrawal of consent must be sent from the email that is connected with the User’s account in the Game.
Personal data processed by the Operator which are necessary to play the Game
The User may request deletion of his/her personal data which are necessary to play the Game by sending an email to the address listed on the pages of the respective Game or to support[a]powerplay.studio with the exact identification of the Game, server and User account. The message must contain a clear statement that the User requests deletion of his/her personal data necessary to play the Game. If the User requests such deletion of personal data, his/her Game account shall be deleted. If the email message does not clearly state that the User requests deletion of personal data necessary to play the Game, his/her personal data shall not be deleted. The request to delete personal data must be sent from the email that is connected with the User’s account in the Game. These personal data of the User shall be deleted within 60 days since the deletion of the User’s account from the Game, unless they are subject to archivation.
The Operator is entitled to store, if necessary, some personal data, specifically e-mail address, IP addresses, login times and country of the User even if the User requests their deletion or after the after deletion of the User's account from the Game for the purposes of fulfilling its legal obligations regarding article 58 of directive 2006/112/EC on common system of value added tax and article 24f of the Council implementing regulation (EU) No 1042/2013. In such case, the Operator will store these personal data for a period necessary to fulfill its obligations (maximum of 10 years).
The fact that the User is not playing the Game, does not constitute withdrawal of the User’s consent to process his/her personal data. The User may withdraw consent to process his/her personal data or request the deletion of his/her personal data necessary to play the Game as specified above at any time.
In Bratislava, 7 June 2019