Privacy Policy

Last Updated: March 1, 2025

1. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you voluntarily provide data (e.g., account registration)
• Contractual Necessity: To fulfill our services to you
• Legal Obligation: When required by law
• Legitimate Interests: For business operations and fraud prevention

2. Information We Collect

Personal Data

We may collect the following categories of personal data:

• Identity Data: Name, username
• Contact Data: Email address
• Technical Data: IP address, browser type, device information
• Usage Data: Pages visited, gameplay statistics
• Marketing Data: Preferences for receiving marketing

Special Category Data

We do not intentionally collect any "special categories" of personal data under GDPR (Article 9).

3. Data Subject Rights

Under GDPR, you have the following rights:

Right to Access (Article 15)

You may request copies of your personal data.

Right to Rectification (Article 16)

You may request correction of inaccurate or incomplete data.

Right to Erasure ("Right to be Forgotten") (Article 17)

You may request deletion of your personal data under certain circumstances.

Right to Restriction of Processing (Article 18)

You may request we restrict processing of your data.

Right to Data Portability (Article 20)

You may request transfer of your data to another organization.

Right to Object (Article 21)

You may object to our processing of your personal data.

Right to Withdraw Consent

Where we rely on consent, you may withdraw consent at any time.

4. Data Retention

We retain personal data only as long as necessary for the purposes collected, including:

• Active user accounts: Until account deletion request
• Marketing data: Until consent withdrawal
• Financial transactions: 7 years for tax compliance
• Website logs: 30 days

5. International Data Transfers

We may transfer and process data outside the EU/EEA. When we do, we ensure appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses
• Adequacy decisions
• Other approved transfer mechanisms

6. Cookies and Tracking Technologies

We use cookies categorized as:

• Essential: Necessary for website operation
• Analytics: Google Analytics (with anonymized IP)
• Marketing: Only with your consent

You can manage cookie preferences via our Cookie Settings tool or browser settings.

7. Data Security

We implement appropriate technical and organizational measures including:

• Encryption of sensitive data
• Regular security assessments
• Access controls
• Staff training

8. Data Breach Notification

In case of a data breach that risks your rights and freedoms, we will notify you and relevant authorities within 72 hours of becoming aware, as required by GDPR Article 33.

9. Changes to This Policy

We may update this policy. Material changes will be notified via email or website notice prior to becoming effective.

10. Complaints

If you have concerns about our data practices, you may contact us at privacy@gamezone.example.com or lodge a complaint with your local supervisory authority.