Personal data processing policy
- The Organiser notifies that they process the Users’ personal data upon an order from the Sponsor i.e. Stribog Games sp. z o.o. with a registered seat in Kraków, ul. Promienistych 1, 31-481 Kraków entered into the register of entrepreneurs of the NCR kept by the District Court for Kraków- Śródmieście in Kraków, 11th Commercial Division of the NCR under the number: 0000748567, holder of the NIP no.: 9452221951, REGON no.: 381299995, share capital: PLN 50.000 (here-in-after as “Administrator”). Thereby, the Organiser is the processing entity.
- The Administrator has appointed a Personal Data Protection Officer. Contact with the DPO is available through the following address: privacy@striboggames.com.
- The Administrator processes personal data pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
- The policy of personal data processing related to conducting the game is available under the player's profile or at https://terms.striboggames.com/privacy-policy?game=gemstone
- As regards conducting the Contest, the following User personal data shall be collected:
- In the instance of Winners – also the delivery address, telephone contact number and data required to settle the potential tax on the winning.
- In the instance of persons submitting a claim – email address, name, surname.
- The Administrator processes the data in order to organise and conduct the Contest, select the winners and to recognise the potential claims. Data may also be processed for tax purposes.
- The Users’ personal data is processed pursuant to:
- Art. 6 section 1(c) GDPR – within the scope of fulfilling the legal obligations incumbent on the personal data Administrator (keeping records and documents under the applicable law, tax and accounting obligations).
- Art. 6 section 1(f) GDPR – i.e. on the basis of legitimate interest of the personal data Administrator involving:
- Conducting the Contest and selecting the Winners,
- Watching over the course of the Contest,
- Handing over of the Prizes to the Winners,
- Recognising the potential Users’ Claims and pursuing, determining or protecting claims directed against the Organiser or Administrator by the Users or by the Administrator against the Users,
- Preventing the Users from undertaking operations non-compliant with the Regulations,
- Providing personal data is voluntary, however required in order to receive the Prize or to have a potential claim recognised.
- The Contest Users are entitled to access their personal data, correct, complete, limit processing of the data, the right to file an objection against personal data processing and a right to submit a claim with a supervisory body – the leading supervisory body for the Administrator is the President for the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa.
- The personal data recipients are entities providing legal services for the Administrator, entities with the Administrator's order to organise the Contest, provide Prizes for the Winners and entities supporting the Administrator and the Organiser in promoting the Contest. Furthermore, the Administrator or the Organiser acting upon their order may provide the personal data of the Contest Winners to tax authorities within the scope necessary to settle the income tax on the winning.
- Personal data may be transferred to third countries as regards conducting the contest and handing over of the prizes. The personal data administrator assures that as regards the use of the services and technology, personal data is transferred only on the basis of relevant permitted security in accordance with Art. 46 GDPR and verifies whether the entities to whom personal data is made available provide an appropriate protection level. The guarantee of appropriate protection level is provided by, but not limited to, the standard contractual clauses adopted by the EU Commission pursuant to Art. 46 section 2 GDPR.
- The Users’ personal data in terms of its processing for the purposes of conducting the Contest is not subject to profiling or automated decision making.
-
The data is processed during the course of the contest and following its completion for the following period of time:
- personal data stored in order to establish, protect or pursue claims - for the period not longer than the period of limitation of any potential claims.
- data processed for the purpose of tax obligation fulfilment – for the period not longer than the period of limitation of tax obligations arising from the applicable law.
- other personal data – for the period necessary to conduct the Contest, select the Winners and hand over the prizes to the Winners.