Before using this Website or our Services, you should familiarize yourself with our Privacy Policy.
PRIVACY POLICY
GENERAL INFORMATION ABOUT US - WHO WE ARE AND HOW TO CONTACT WITH US
Thank you for your interest in our website and our products.
Plot Twist S.A. (a Polish joint stock company) with a registered office in Kraków (Poland) at 11 Św. Krzyża St, 31-028 Kraków, Poland, entered in the register of entrepreneurs of National Court Register (KRS) kept by the District Court in Kraków, Kraków-Śródmieście, XI Commercial Division of National Court Register under KRS number 0000881326 and the NIP (tax identification number) 6762468360, REGON (statistical number) 122942800, with a share capital 1.374.447,60 PLN (in words: one million three hundred and seventy-four thousand four hundred and forty-seven Polish zloty 60/100) - fully paid (collectively the “Plot" or “We”, “Us”, “Our”), produces computer games.
We understand the value of personal data and privacy. We care about how your personal data and confidential data (together the „Data”) are is used and shared online. We are committed to protecting the privacy of all data collected in the course of our business activities.
The purpose of this Privacy Policy, we would like to inform you of the nature, scope and purposes of the collection, use and processing of your data by Plot, and rights you have associated with that data - regardless of whether you are visiting the https://plottwist.games/ (our “Website”) or using our Games ( the “Products”).
We will process your personal data under this Privacy Policy and in accordance with any agreement with you.
Plot fulfills conditions deriving from the law, in particular the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
In the course of our business, we process data as a Data Controller (that is, we determine alone or jointly with others, for which the purposes and the manner in which data are or will to be processed) and as a Data Processor (that is, we process data on behalf of the Data Controller). This Privacy Policy does not apply to such personal information that we process on behalf of our business customers. Our use of this personal information is restricted by our agreements with those business customers.
OUR CONTACT DETAILS
The controller of your Data is Plot Twist S.A. (a Polish joint stock company) with a registered office in Kraków (Poland) at 11 Św. Krzyża St, 31-028 Kraków, Poland.
If you have any questions about this Privacy Policy, data protection, privacy and security issues, please contact us at the following e-mail address office@plottwist.games.
II. GENERAL INFORMATION ABOUT DATA COLLECTION AND PROCESSING
TYPES AND CATEGORIES OF DATA COLLECTED AND PROCESSED
As the Data Controller we collect and processing Data about:
our website Users (persons who visit our website)
Internet identifiers - each time our Website is accessed, our system automatically collects data and information from the computer system of the accessing computer. For example: your computer’s operating system, device and connection information, such as, IP address, the type and version of your Internet browser; date and time of your access; geographic location; user information, such as, behavioral information about how you navigate within our Website and which our Products you use the most; the UTM parameters and other similar technical information;
Usage information: information about your interactions with our Website, including access dates and times, hardware and software information, device event information, log data, crash data, cookie data;
General location information;
Cookies and similar technologies;
people who buy our products via e-commerce:
transactional data including bank account number;
personal contact information including but not limited to, the first and last name, phone number, e-mail address;
Internet identifiers , such as information from the computer system of the accessing computer, such as computer’s operating system, device and connection information, such as, your IP address, the type and version of your Internet browser; date and time of your access; geographic location; user information, such as, behavioral information about how you navigate within our Website or Services and which elements of our Services you use the most, and other similar technical information;
Usage information, such as information about your interactions with our Services or Website, including access dates and times, hardware and software information, device event information, log data, crash data, cookie data.
General location information;
Cookies and similar technologies;
people who contact us with questions, feedback, or otherwise correspond with us online - Contact Requests Data - If you have sent us a request, we will have your contact information and email address;
We receive your data: directly from you if you provide it to us in connection with our Website; indirectly, through automated technologies such as cookies.
OUR PURPOSES OF THE PROCESSING AND THE LEGAL BASIS FOR THE PROCESSING
We process data primarily:
to provide and maintain our Website;
to fulfill the customer or recipients contract or to carry out pre-contractual measures;
to ensure network security, including preventing unauthorized access to electronic communications networks and preventing damage to computer systems;
to enable you to scan your website for trackers;
to ensure the highest possible quality of administration of our website;
to provide customer support; to the extent necessary to provide our content and Products and a functioning website;
to detect, prevent and correct technical problems;
to establish a primary channel of communication with you;
we also use it to compile statistics about how users use our website;
handling outgoing and incoming mail, and e-mail correspondence,
to assert claims amicably, in court and in enforcement proceedings;
communications with Users;
marketing activities, including social media activities.
In general, we collect and process data on the basis of:
1) performing a contract or taking an action at your request prior to the conclusion of a contract, and for the purpose of pursuing claims under arising from the contract (Article 6(1)(b) and (f) GDPR);
2) answering the questions you have asked by the contact form, which is in the exercise of Plot’s legitimate interest (Article 6(1)(f) GDPR);
3) direct marketing activities through the information channel of your choice, which are in the exercise of Plot’s legitimate interest (Article 6(1)(f) GDPR),
4) your consent(Article 6(1)(a) GDPR) - if the processing is based on your consent, you may withdraw your consent at any time by contacting us using the contact details.
5) We use data for the purposes for which it was collected and may only further use it for legal or other legitimate purposes.
We use data for the purposes for which it has been collected and might be further used for statutory or other legitimate purposes only.
Data of which we are the Data Processor, we process on the basis of a processing entrustment agreement to the extent specified by their Controller.
OUR LEGITIMATE INTERESTS PURSUED
Our legitimate interests include:
to provide reasonable security for the services provided and the business conducted;
the proper performance of the contracts;
to provide and manage your access to and use of our services;
to prevent unauthorized access to the network;
to ensure contact with you and to process your request;
the exercise or defense of any claims that may arise in connection with the performance of our contracts;
to transfer of personal data to other groups of companies as part for internal administration,
to prevent fraud;
to report possible crimes to the appropriate authorities.
RECIPIENTS OF THE DATA
The recipient of your data are entities cooperating with Plot in the scope of provided services, in particular legal advisors, accountants, IT service providers and other persons providing organizational and technical support to the recipients of Plot services.
We may also release your data if necessary to comply with the law, enforce our Privacy Policy, or protect our rights, the rights of others, property, or safety or in response to governmental requests, court orders, or legal process, if necessary for legal prosecution or enforcement.
We also use the services of our suppliers to provide our services. these may include, in particular, data centers that store our website and databases, IT service providers that maintain our systems.
We may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked websites.
TRANSFER OF DATA TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA
Our products can be accessed by players all over the world, we also cooperate with companies all over the world, so your Data Your may be transferred by Us to recipients outside the European Economic Area. Your information may be transferred to countries where the data protection laws may be different from those in your jurisdiction.
By using our website, or by providing us with data, you agree and consent to the processing of your personal data in other jurisdictions in which we operate.
The transfer of your personal data to a third country may be based on the following legal under the terms of Chapter V of the GDPR:
where the Commission has decided that the third country, a territory or one or more specified sectors within that third country, or the international organisation in question ensures an adequate level of protection (more information: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en);
if the controller or processor has provided appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies for data subjects are available like standard data protection clauses adopted by the Commission in accordance with the examination procedure referred to in Article 93(2). The European Commission's decision on standard contractual clauses, i.e. Decision 2021/914 of 4 June 2021 (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj),is currently in force.
Plot has developed procedures for selecting and auditing entities to which it provides data. Plot selects entities to which it provides data based on their expertise, credibility, and ability to implement technical and organizational measures that meet Plot's security and privacy requirements and the EU Standards.
THE PERIOD FOR WHICH THE DATA WILL BE STORED
In principle, we only retain data for as long as is necessary to fulfill the contractual or legal obligations for which we collected the data. After that, we delete the data immediately, unless we still need the data for evidence purposes for civil law claims or due to legal retention obligations until the expiry of the statutory limitation period.
Internet identifiers (all technical information, which are collected by us in log files after your visit to our Website), are deleted as soon as they are no longer needed for the purpose for which they were collected. Typically, these Internet Identifiers are deleted or rendered unrecognizable after no more than thirty (30) days.
You have the possibility at any time to revoke your consent to the processing of your personal data at any time.
WHAT ARE YOUR RIGHTS?
You have the right of access to your data and the right to request their rectification, erasure and restriction of their processing, the right to data portability and erasure, restriction of their processing, the right to data portability, the right to withdraw your consent to their processing at any time without affecting the legality of the processing carried out on the basis of the consent given before its withdrawal - applies only to such data whose processing does not result from separate regulations.
THE RIGHT OF ACCESS TO YOUR DATA
The right of access consists in the possibility of requesting information from us, among other things, whether we are processing your data, how we are processing them, the scope of the processing, the purposes for which we are processing your data, the logic applied to the processing and the form in which the processing is carried out, as well as the possibility of requesting a copy of your data.
You have the right to know what personal information we have collected about you, including
the categories of personal data collected;
the categories of sources from which the personal data is collected;
the business or commercial purposes for which the personal data is collected or sold;
the categories of third parties with whom the personal information will be shared;
the specific categories of personal information collected about you that are permitted by law.
THE RIGHT TO REQUEST THE RECTIFICATION, ERASURE OR RESTRICTION OF THE PROCESSING
The right to rectification of data it consists in the possibility to immediately request the rectification of inaccurate data processed by us and to request the completion of incomplete personal data, including by providing an additional explanation. You have the right to request the correction of inaccurate personal data that we maintain about you or to update the information we hold about you.
You have the right to request that we delete any of your data that we have collected, subject to certain exceptions. Once we receive your request and verify your identity, we will delete (and direct our service providers to delete) your data from our records, unless an exception applies.
The right to erasure consists in the ability to request the erasure of data when it is no longer necessary to fulfill the purpose for which it was collected, i.e. when:
the data subject has withdrawn his or her consent to the processing; or
the data subject has objected to the processing;
the data have not been processed in accordance with the law;
the data must be deleted in order to comply with a legal obligation;
the data were collected in connection with the provision of information society services.
The right to restrict data processing consists in the possibility of requesting the restriction of data when
the data subject disputes the accuracy of the personal data, for a period that allows us to verify the accuracy of the data;
the processing is unlawful and the data subject objects to the erasure of the personal data and requests the restriction of its use instead;
we no longer need the personal data for the purposes of the processing, but it is needed by the data subject to establish, assert or defend claims; or
the data subject has objected to the processing, pending a determination as to whether the legitimate grounds on our part override the grounds of the data subject's objection;
You also have the right to restrict the use of sensitive personal information.
The right to data probability consists of the ability to receive in a structured, commonly used machine-readable format the data concerning you that you have provided to us. This applies to certain personal information when processed by automated means and with your consent, or based on a contract you have with us. On your request, and where technically feasible, we will transfer your personal information to another party of your choice.
RIGHT TO OBJECT to the processing of your data. The reasons for an objection should relate to your particular situation, and be related to processing based on the legitimate interest condition. We will then no longer process the personal information, unless we can demonstrate compelling reasons to do otherwise. In certain circumstances, you have the unconditional right to object; for example, in the context of direct marketing activities.
RIGHT TO OPT OUT OF SALE OR SHARING OF YOUR DATA
You have the right to opt out of the sale or sharing of personal information.
We do not sell your data.
RIGHT TO NON-DISCRIMINATION FOR THE EXERCISE OF YOUR RIGHTS
You have the right to be protected from discrimination for exercising your rights. We will not discriminate against you for exercising your right.
RIGHT TO LODGE A COMPLAINT
If your country of residence is in the European Economic Area, You have the right to lodge a complaint with the President of the Office for the Protection of Personal Data if you consider that the processing of your personal data violates the provisions of the GDPR.
REQUEST TO EXERCISE YOUR RIGHT
You may submit your request by sending an e-mail to office@plottwist.games. We will then respond to your request as required.
We will respond to your request within 30 days of receiving it. If we need more time, we will notify you in writing of the reason and the extension period. Plot does not charge a fee for processing or responding to a valid request unless the request is unreasonable, repetitive, or clearly unfounded.
THE USE OF COOKIES
The Website and Platform retains information and gain access to information already retained in user's device, using so-called 'cookies'. The User's consent or lack of consent for the use of cookies is made through the browser settings.
We do not share information collected through cookies with any third parties, except with legally authorized government agencies.
CHILDREN'S PRIVACY
Our Website are not directed to anyone under the age of 18 („Children"). We do not knowingly collect information from children under the age of 18. If you are under the age of 18, please do not use our Website and do not provide us with your data.
III. GENERAL INFORMATION ABOUT DATA SECURITY AND INTEGRITY
We take your privacy seriously. We take appropriate security measures to protect your information from loss, misuse and unauthorized access, alteration, disclosure or destruction. We have implemented the data protection standards applicable in the EEA. We have taken steps to ensure the ongoing confidentiality, integrity, availability and resilience of systems and services that process personal information, and will restore availability and access to information in a timely manner in the event of a physical or technical incident.
In accordance with the law, we take appropriate technical and organizational measures (policies and procedures, IT security and others) to ensure the confidentiality and integrity of your personal information and the way it is processed. We provide measures such as: physical access control, access control to IT resources, control of user access to data, control of data segregation, control of data transmission, control of availability, control of tasks. We have procedures to regularly review, assess and evaluate the effectiveness of technical and organizational measures to ensure secure processing. We have rules for dealing with security incidents, including the security of personal data.
IV. SOCIAL NETWORKS
In order to stay in contact with our customers, to keep them informed and to carry out pre-contractual measures with future customers and interested parties, we maintain online presences in social networks in order to communicate, among other things, with our recipients and interested parties and to provide information about our products and services, among other things. Your data will be processed and profiled by the relevant social networks for market research and advertising purposes. This is done by storing cookies and other identifiers on users' computers. Based on usage profiles, advertisements are placed within the social networks as well as on third party websites. For the legal basis of the data processing carried out by the social networks under their own responsibility, please refer to the data protection information of the respective social network.
Social networks, which we use:
Facebook (USA and Canada: Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA; all other countries: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).
Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).
Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland).
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland).
V. UPDATES
We reserve the right to update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. Changes to this Privacy Policy are effective when they are posted on this page.
