Last Updated: July 1, 2020
The data protection laws of the United Kingdom, Switzerland and the European Economic Area (EEA) (collectively, the “EEA+”), including the General Data Protection Regulation (“GDPR”), require us, 41 Games, to provide additional and different information about our data processing practices to individuals in the EEA+.
1. SCOPE
This Statement applies to personal data we collect when you use our websites, mobile applications and other online products and services (collectively, the “Services”). This Statement does not apply to the information collected from: (1) web-based applications that are based on our mobile applications but are published by third parties, (2) mobile applications that we distribute on behalf of third parties and which are hosted and operated by such parties, or (3) the on-line submission of resumes and employment applications in connection with the Jobs section of our website.
2. LEGAL BASIS FOR PROCESSING
We will only process personal data about you in accordance with the following legal bases:
- If you enter or wish to enter into a contract with us, we process your personal data as necessary to enter into the contract with you and perform our responsibilities under our contract with you, such as to process your order and fulfill the products or services you purchase.
- We process your personal data as necessary to realize a legitimate interest based on an assessment of that interest and your privacy and other fundamental interests. In particular, we may process your personal data to realize legitimate interests in preventing fraud, engage in some marketing-related activities, protect and improve our products and services, and communicate with you about administrative or technical changes to our Services or to deliver legal documents.
- If we request your consent to a specific processing activity (such as to send you marketing emails), and you provide your consent in the manner indicated, we process your personal data in accordance with your consent.
- In some cases, we process your personal data as necessary to comply with a legal obligation, such as to respond to legal process requests, or to protect your or another individual’s vital interests.
4. INTERNATIONAL DATA TRANSFERS
We may transfer your personal data to service providers and business partners outside of the EEA. Some of these recipients are located in countries for which the European Commission has issued adequacy decisions, including but not limited to: Canada, Israel, Japan, New Zealand and Switzerland. In each case, the transfer is thereby recognized as providing an adequate level of data protection from a European data protection law perspective (GDPR Art. 45).
Some recipients of your personal data are located in countries for which the European Commission has not issued an adequacy decision in respect of the level of data protection there, including but not limited: Australia, Chile, China, India, Mexico, Philippines, and Singapore. By entering into appropriate data transfer agreements based on Standard Contractual Clauses (2010/87/EU and/or 2004/915/EC) as referred to in GDPR Art. 46(5) or other adequate means, we have established that such recipients will provide an adequate level of data protection and that appropriate technical and organizational security measures are in place to protect personal data against accidental or unlawful destruction, loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of processing.
You can ask for a copy of such appropriate data transfer agreements by contacting us using the contact details above.
5. YOUR RIGHTS AND CHOICES
Subject to the conditions set out under the GDPR, you have the following rights:
- Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, in which case such processing may be required to cease.
- Right of access: You have the right to know whether your personal data is being processed, and, where that is the case, to request access to the personal data. The access information includes, among other things, the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom your personal data have been or will be disclosed. You have the right to obtain a copy of your personal data undergoing processing.
- Right to rectification: You have the right to rectify inaccurate personal data concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Right to erasure (to be forgotten): You have the right to have your personal data erased in certain cases.
- Right to restriction of processing: You have the right to have the processing of your personal data restricted in certain cases.
- Right to data portability: You have the right to receive your personal data which you provided in a structured, commonly used and machine-readable format and you have the right to transmit the personal data to another entity.
- Right to withdraw your consent: If you declared your consent regarding certain types of processing activities, you can withdraw this consent at any time with future effect.
If you would like to exercise any of these rights, please contact us via the details listed above. Please note that these rights might be limited under applicable national data protection laws. You also have the right to lodge a complaint with the competent supervisory authority.
You are not required to provide any personal data to us, but if you do not provide any personal data to us, you may not be able to use certain features of our Services. You can use our Services without consenting to cookies that are not strictly necessary; however, this might affect the availability and functionality of our Services. You can also use our Services without consenting to receiving marketing communications from us; the only consequence is that you may not receive marketing communications that you may be interested in.
6. DATA RETENTION
We store the information we collect about you for as long as is necessary for the purposes for which we originally collected it, which depends on the personal data at issue and the purposes for which we process it. We may retain certain information for legitimate business purposes or as required by law.