We Broken Rules Interactive Media GmbH, Museumsplatz 1, Stiege 1, Top 2, 1070 Vienna (“Broken Rules” or “we”/“us”) as the data controller take the protection of your personal very seriously. Therefore, we handle your personal data as confidential information and in compliance with the statutory data protection regulations as well as this Privacy Notice.

This Privacy Notice provides you with information on how we process your personal data when you use our games and other services (“Games”).

1. What kind of your data we process

You are under no obligations to provide Broken Rules with the data we ask you for. However, if you do not provide your personal data, you will not be able to use Games and/or the features we provide. Should the provision of your personal data be mandatory by law, we will inform you separately thereof.

In order to provide you with our Games to its full extent, we will collect the categories of personal data set out below:

Use our Games:

When you use our Games, we may automatically collect your:

• game data such as game progress (i.e. which level you have reached), achievements (also known as trophies), completed events, saves of your game progress, virtual currency and statistics including the playtime or the use of the various features as well as the data associated with any bugs and malfunctions,
• IP address;
• device data and technical data such as device type, operating system, network connection type, screen resolution, device language, country, location and in case you use our Games via a mobile device your mobile carrier and/or Internet service provider; and
• user preferences and settings, such as game language, settings regarding in-game sound and music as well as auto save functions.

2. Purposes of processing your data

We will process your personal data set out above for the purpose of:

1. making our Games available;
2. troubleshooting such as detecting, preventing and investigating problems our Games cause;
3. internal reportings.

3. Legal bases of the processing

We process the categories of your personal data listed above on the following legal bases under the General Data Protection Regulation (“GDPR”):

• The performance of the contract we have concluded with you or the necessity to take steps at your request prior to entering into such an agreement, insofar as it is necessary (Article 6(1)(b) GDPR); or
• We process some the categories of personal data set out under point 1 on the basis of our overriding legitimate interest according to Article 6(1)(f) GDPR to provide you the best possible user experience, such as to ensure the security of our Games as set out under Point 2 above; or
• The necessity to comply with legal obligations to which we are subject (Article 6(1)(c) GDPR).

4. Age Limits

We do not knowingly collect or ask for any personal information from children. In case you can’t confirm full legal capacity (fourteen), please do not provide us with any data about yourself, including name, address or email address.

If you wish that we delete data of individuals under the age of fourteen, please contact us at our contact information set out under point 8 below.

5. Transfer of your personal data

To achieve the purposes set out above, we will transfer your personal data to the following categories of recipients:

• Google LLC, 1600 Amphitheatre, Parkway, CA 94043, USA

• Google Ireland, Gordon House Barrow Street Dublin 4, Ireland

• Unity Technologies ApS, Niels Hemmingsens Gade 24, 1153 Copenhagen, Denmark

  Some information is automatically collected by Unity Analytics. Unity Technologies provides the software engine that powers our Games. It collects statistical information to better understand how our Games are used by the public. This information helps us to improve our Games. Unity does not retrieve any personally identifiable information or share any personal information with third parties. All the collected information is anonymized before being sent to Unity Analytics.

  For more information on Unity please see the privacy policy here: http://unity3d.com/legal/privacy-policy.

• other IT-service providers we use

Some of the recipients referred to above are located in or process personal data outside of your country. The level of data protection in another country may not be equivalent to that in your country. However, we only transfer your personal data to countries where the EU Commission has decided that they have an adequate level of data protection or we take measures to ensure that all recipients provide an adequate level of data protection. We do this for example by entering into appropriate data transfer agreements based on Standard Contractual Clauses. These are accessible upon request (see the contact details in point 7).

6. Retention period

Broken Rules will delete or anonymize your personal data as soon as it is no longer needed for the purposes set out under point 2 in any case Broken Rules will delete or anonymize your personal data latest after one-hundred-eighty days following the relevant matter having been addressed and/or following inactivity, whatever occurs earlier.

Thereafter, we will retain your personal data (i) as long as required under statutory retention obligations or (ii) as long as potential legal claims, where personal data is needed to raise or defend against the claim, are not yet time-barred.

7. Your rights in connection with your personal data

Under applicable law, you have the right to (under the conditions set out in applicable law):

• obtain confirmation as to whether and what kind of personal data we store about you and to request copies of such data;
• request rectification or erasure of your personal data;
• request us to restrict the processing of your personal data;
• object to the processing of your personal data;
• withdraw any consent previously granted for the processing of your personal data (withdrawing your consent does not affect the lawfulness of processing based on your consent before your withdrawal);
• request data portability; and
• lodge a complaint with the competent supervisory authority.

8. Our contact details

Please address your requests or questions concerning the processing of your personal data to:

Broken Rules Interactive Media GmbH
Museumsplatz 1, Stiege 1, Top 2
1070 Vienna
E-Mail: yourdata@brokenrul.es

9. Changes to this Privacy Notice

We reserve the right to update this Privacy Notice, if necessary, in compliance with the applicable data protection regulations. This way, we can adapt it to the current legal requirements and take changes in our services into account, e.g. when introducing new Games. The most current version always applies.

The current version of this Privacy Notice is always available here:
http://www.eloh-game.com/privacy

Last updated on 08.05.2023