This privacy policy ("Privacy Policy") informs the user in what way, to what extent and for what purpose the processing of personal data by the responsible provider Deca Live Operations GmbH, Unter den Linden 21, 10117 Berlin, Germany or Deca Games EOOD, 53 B Stefan Stambolov Str., 5000 Veliko Tarnovo, Bulgaria (hereinafter together and individually referred to as "Deca" or "we") takes place. You can access, save and print this Privacy Policy in the current version at any time via our website https://decagames.com/.
Deca collects, processes or uses personal data exclusively within the applicable legal framework. Therefore, the high data protection level of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG) applies.
When you download and install our Games via a third-party app store or platform (collectively "Platform"), the operator of the relevant Platform (for example Apple, Inc. for the AppStore and Google Ireland Limited for the Google PlayStore) collects your personal data required for the download. These data include in particular your name, your email address and your postal code, time of download, the IP address and the individual identification number of your device (so-called IMEI), as well as your payment information, if applicable. This collection and processing of your personal data is, however, basically carried out solely by the respective Platform operator without our participation in the data processing or our ability to influence it. In this respect, the data protection information of the Platform operator applies, which can be viewed on the relevant Platform. We only receive and process personal data collected by the Platform operator to the extent necessary for the download and provision of the Game. If we process personal data as part of the installation, this is done on the basis of the contract on the subscription and use of the Game that you concluded with us when downloading and installing the Game, in accordance with Article 6 (1) lit. b) GDPR.
When you download our Games via our websites (collectively "Websites"), we collect and process server log files, i.e. certain technical information (e.g., IP address, time of access, referrer URL, browser type and version, operating system, volume of data transmitted) that your device will automatically transmit when establishing a connection to our servers. The log file data collected is used to provide you with the relevant game data as part of the download and for statistical analysis for the purposes of operating, securing and optimizing the Website and the download, which are considered legitimate interests of Deca within the meaning of Art. 6 (1) lit. f) GDPR. For further details on the data processing related to our Website, please see our Website privacy policy at https://decagames.com/privacy.html
When you start and use a Game, depending on the specific Game, a connection to our servers may be automatically established to retrieve new content or updates. Information that your device automatically transmits to us is logged in the process. This includes the IP address of the device you are using, data on the operating system, installed Game and its version (client build, client data version), date and time (including time zone) of the respective access to the contents of the Game as well as the information on which specific contents have been requested for the respective Game. In addition, Deca may process user profile information (see below for details) and certain technical data, e.g., as part of a Game start, in order to fulfil its contractual obligations to the user. Depending on the respective Game, this data includes name and IP address and data identifying the user's device.
Deca collects and processes this data in order to provide the Game, its features and any (new) content of the Game. Therefore, the basis of this data processing for the fulfilment of contractual obligations is Art. 6 (1) lit. b) GDPR.
Some Games or individual features of a Game require a player profile or account (collectively "Account"). An Account is either automatically created when you first start a Game or when you provide the information (such as the player name) according to the registration form. Some Games allow you to use user account login details from other services (e.g. Facebook or Game Center) to create an Account or link an existing Account to the relevant service. In detail:
An Account is usually created when you start the Game for the first time. Depending on the specific Game, you might be required to enter certain user information (e.g. player name, email address, date of birth, age, password) to create an Account. Further information, such as an identification number ("ID"), the IP address of your device or further technical data identifying your device is automatically collected. Your Account is bound to your device by default. However, you can link your Account to third-party services such as Facebook, Google, or Apple by using the respective login features (see below).
Deca collects and processes the Account data in order to provide the Game and its features. We also use the Account data and further collected information to manage our relationship with you and provide you with our Account services. For example, we may also use your contact information (e.g. your e-mail address) to send you relevant communications in connection with your contract with us or your Account, e.g. to inform you about an upcoming deletion of your inactive Account (see sect. 24 below).
To the extent that above services are provided within the framework of a contract with you, the basis of this data processing is the fulfilment of contractual obligations pursuant to Art. 6 (1) lit. b) GDPR. In individual cases, the legal basis can be Art. 6 (1) lit. f) GDPR, whereby our legitimate interest is the management of our relationship with you.
In some Games, we offer you the option of creating an Account or linking an existing Account by entering the login data of your Facebook user account (so-called "Facebook Login", formerly known as "Facebook Connect"). The Facebook Login is subject to your consent, which you can express by clicking on the corresponding button to connect to Facebook. The Facebook Login function is offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta").
The login data of your Facebook account will be sent directly to Meta. We do not have access to your login data. After verification of your login data, Meta only informs us about the following data from your Facebook user account: the registered first and last name, date of birth, gender, email or phone number. Meta further checks which other Facebook users with whom you are connected on Facebook (so-called "friends") have already played the respective Game and provides us with this information. Deca receives and uses the aforementioned data to set up your player Account in the Game. We also use the information about your friends on Facebook to enable you to invite a Facebook friend to a joint game session and to easily start this game session. However, we only process this information to the extent necessary to provide the respective social feature, i.e. for a joint gaming session.
By using the Facebook Login function, Meta receives the information that you have created or linked an Account for the relevant Game and can link this information to your Facebook user account. Meta processes this information under its own responsibility; we have no influence on data processing at Meta. Meta may also transfer the information to its parent company in the USA, Meta Platforms, Inc. Since the parent company is certified under the EU-US Data Privacy Framework, such a data transfer could be based on the adequacy decision pursuant to Art. 45 GDPR. Information on how Meta handles your personal data can be found in Meta's privacy statement at: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
Data processing with the Facebook Login function is legally based on your consent (Article 6 (1) lit. a) GDPR) which you give when calling up Facebook Login and subsequently entering your login data to your Facebook account. You can revoke your consent to data processing when using Facebook Login at any time with effect for the future.
In certain Games, we offer you the option to create or link your Account using your Google Play Games Services credentials. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Upon your consent, Google shares with us your Google Play Games Services profile information, which may include your Gamer ID, profile image, and activity data. We do not have access to your Google account password. Google processes your data under its own responsibility.
By using the Google Login or Google Play Games Services function, Google receives the information that you have created or linked an Account for the relevant Game and may link this information to your Google user account. Google processes this information under its own responsibility; we have no influence on data processing by Google. Google may also transfer the information to its parent company in the USA, Google LLC. Since the parent company is certified under the EU-U.S. Data Privacy Framework, the data transfer may be based on the adequacy decision pursuant to Art. 45 GDPR.
Further information on how Google handles your personal data can be found in Google’s privacy statement at: https://policies.google.com/privacy
Data processing with the Google Login function is legally based on your consent (Article 6 (1) lit. a) GDPR), which you give when calling up the Google Login and subsequently entering your login data. You can revoke your consent to data processing at any time with effect for the future by disconnecting your account or adjusting your settings in your Google account.
In certain Games, you have the option to create or link your Account using your Apple ID through the "Sign in with Apple" feature. This service is provided by Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA ("Apple").
Upon your consent, Apple shares with us your name and verified email address. If you choose to hide your email address, Apple generates a unique, random email address that forwards messages to your personal email. We do not have access to your Apple ID credentials.
By using the Sign in with Apple function, Apple receives the information that you have created or linked an Account for the relevant Game and may link this information to your Apple ID. Apple processes this information under its own responsibility; we have no influence on data processing by Apple. Apple may also transfer the information to its parent company in the USA. Since the parent company is certified under the EU-U.S. Data Privacy Framework, the data transfer may be based on the adequacy decision pursuant to Art. 45 GDPR. Further information on how Apple handles your personal data can be found in Apple’s privacy statement at: https://www.apple.com/legal/privacy/en-ww/
Please find Apple's privacy policy regarding the Sign in Function at: https://www.apple.com/legal/privacy/data/en/sign-in-with-apple/
Data processing with the Apple Login function is legally based on your consent (Article 6 (1)lit. a) GDPR), which you give when calling up the Apple Login and subsequently entering your login data. You can revoke your consent to data processing at any time with effect for the future by disconnecting your account or adjusting your settings in your Apple account.
In certain Games, you can create or link your Account using your Steam account via the OpenID authentication system. This service is provided by Valve Corporation, P.O. Box 1688, Bellevue, WA 98009, USA ("Valve" or "Valve").
Upon your consent, Steam shares with us your unique Steam ID and public profile information. We do not have access to your Steam account credentials.
By using the Steam Login function, Valve receives the information that you have created or linked an Account for the relevant Game and may link this information to your Steam user account. Valve processes this information under its own responsibility; we have no influence on data processing by Valve. Valve may transfer information to the USA, where it is headquartered. Since Valve is certified under the EU-U.S. Data Privacy Framework, any data transfer to the USA may be based on the adequacy decision pursuant to Art. 45 GDPR. Further information on how Valve handles your personal data can be found in Valve’s privacy statement at: https://store.steampowered.com/privacy_agreement/
Data processing with the Steam Login function is legally based on your consent (Article 6 (1) lit. a) GDPR), which you give when calling up the Steam Login and subsequently entering your login data. You can revoke your consent to data processing at any time with effect for the future by disconnecting your account or adjusting your settings in your Steam account
In certain Games, you can create or link your Account using your Amazon account. This service is provided by Amazon Europe Core SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg ("Amazon").
By using the Amazon Games Login function, Amazon receives the information that you have created or linked an Account for the relevant Game and may link this information to your Amazon Games iD user account. Amazon processes this information under its own responsibility; we have no influence on data processing by Amazon. Furthermore, upon your consent via the Amazon Games Login process, Amazon may share with us certain account-linked data (for example your Amazon Games iD, linked email or Amazon account identifier) which you have permitted Amazon to transmit. Further information on how Amazon handles your personal data can be found in Amazon' s privacy policy at: https://www.amazon.com/gp/help/customer/display.html?nodeId=Ta1eQvQPF8Doic2mDw
Data processing with the Amazon Games Login function is legally based on your consent (Article 6 (1) lit. a) GDPR), which you give when calling up the Amazon Games Login and subsequently entering your login data. You can revoke your consent to data processing at any time with effect for the future by disconnecting your account or adjusting your settings in your Amazon Games account.
In certain Games, you have the option to create or link your Account using your Epic Games account through the "Sign in with Epic Games" function. This service is provided by Epic Games, Inc., 620 Crossroads Blvd, Cary, NC 27518, USA ("Epic").
Upon your consent, Epic shares with us your unique Epic Account ID, display name, and email address solely for the purpose of verifying your identity and linking your Game Account. We do not have access to your Epic Games account password or payment information. If you authorize additional access (e.g., to your friends list or game profile), Epic may share further information with us as explicitly approved by you during the sign-in process. You may revoke such access at any time via your Epic account settings. By using the Epic Games Login function, Epic receives the information that you have created or linked an Account for the relevant Game and may link this information to your Epic account. Epic may also transfer personal data to the United States or other third countries. In such cases, Epic states that it uses appropriate safeguards for international data transfers, including the European Commission’s Standard Contractual Clauses pursuant to Article 46 GDPR.
Further information on how Epic handles your personal data can be found in Epic' s privacy policy at: https://www.epicgames.com/site/de/privacypolicy?lang=de
Data processing with the Epic Login function is legally based on your consent (Article 6 (1) lit. a) GDPR), which you give when calling up the Epic Login and subsequently entering your login data. You can revoke your consent to data processing at any time with effect for the future by disconnecting your account or adjusting your settings in your Epic account.
In certain Games, you have the option to create or link your Account using your VK Play account through the "Sign in with VK Play" function. This service is provided by VK LLC, 39 bldg 79, Leningradskiy prospect, Moscow, Russia, 125167 ("VK").
By using the VK Play Login function, VK receives the information that you have created or linked an Account for the relevant Game and may link this information to your VK Play user account. VK processes this information under its own responsibility; we have no influence on data processing by VK. VK may also transfer the information to its parent company in Russia or other third countries. Further information on how VK handles your personal data can be found in VK’s privacy policy at: https://documentation.vkplay.ru/terms_vkp/privacy_world_vkp
Upon your consent, VK shares with us your display name, profile photo and email address for the purpose of verifying your identity and linking your Game Account. We do not have access to your VK account password or payment information. If you authorize additional access (e.g., to your friends list), VK may share further information. However, we only process this information to the extent necessary to provide the respective social feature. Data processing with the VK Play Login function is legally based on your consent (Article 6 (1) lit. a) GDPR), which you give when calling up the VK Play Login and subsequently entering your login data. You can revoke your consent to data processing at any time with effect for the future by disconnecting your account or adjusting your settings in your VK Play account.
In certain Games, you can create or link your Account using your Samsung account. This service is provided by Samsung Electronics Co., Ltd. 129, Samsung-ro, Yeongtong-gu, Suwon-si, Gyeonggi-do 16677, Republic of Korea and its affiliates ("Samsung").
Upon your consent, Samsung may share with us your Samsung Account ID, email address, name, date of birth, country/region, device information, and gamer profile data (e.g., depending on your configuration, nickname, avatar, gaming preferences, in-game achievements, friends lists).
By using the Samsung Login function, Samsung receives the information that you have created or linked an Account for the relevant Game and may link this information to your Samsung account. Samsung processes this information under its own responsibility; we have no influence on data processing by Samsung. Any data transfer to the Republic of Korea may be based on the EU Commission's adequacy decision for the Republic of Korea pursuant to Article 45 GDPR. Further information on how Samsung handles your personal data can be found in Samsung' s privacy policy at: https://v3.account.samsung.com/policies/privacy-policies
Data processing with the Samsung Login function is legally based on your consent (Article 6 (1) lit. a) GDPR), which you give when calling up the Samsung Login and subsequently entering your login data. You can revoke your consent to data processing at any time with effect for the future by disconnecting your account or adjusting your settings in your Samsung account.
In certain Games, you can create or link your Account using your Xiaomi account. This service is provided by Xiaomi Technology Netherlands B.V., Xiaomi Technologies Singapore Pte. Ltd., and/or their affiliated companies ("Xiaomi").
Upon your consent via the Xiaomi Login process, Xiaomi may share with us certain account-linked data (for example your linked email or Xiaomi account identifier) which you have permitted Xiaomi to transmit. By using the Xiaomi Login function, Xiaomi receives the information that you have created or linked an Account for the relevant Game and may link this information to your Xiaomi account. Xiaomi processes this information under its own responsibility; we have no influence on data processing by Xiaomi. Xiaomi may also transfer personal data to Singapore or other third countries. In such cases, Xiaomi states that it uses appropriate safeguards for international data transfers, including the European Commission’s Standard Contractual Clauses pursuant to Article 46 GDPR. Further information on how Xiaomi handles your personal data can be found in Xiaomi' s privacy policy at: https://privacy.mi.com/all/en_US
Data processing with the Xiaomi Login function is legally based on your consent (Article 6 (1) lit. a) GDPR), which you give when calling up the Xiaomi Login and subsequently entering your login data. You can revoke your consent to data processing at any time with effect for the future by disconnecting your account or adjusting your settings in your Xiaomi account.
In some Games, we may offer additional versions and content for purchase. In order to conclude the corresponding contract and the associated payment processing, it is necessary to enter bank details or other payment-related data (e.g. credit card). For payment processing, we use the services of either the operator of the respective Platform through which you have obtained the Game (for example, Apple, Inc. for the AppStore, Google Ireland Limited for the Google PlayStore, Valve Corporation for Steam), or a payment service provider (for example, Suraway Inc. (also known as Xsolla)). The use of payment services provided by a Platform operator is often mandatory for us to be allowed to offer the Game on the respective Platform and also serves to provide you with an easy and smooth payment process in the Game.
The aforementioned information will be processed accordingly together with the necessary usage data by the respective Platform operator or payment service provider, insofar as this is necessary to process the payment. Details on the handling of your personal data in connection with the payment processing can be found in the privacy statement of the respective Platform operator or payment service provider, which is available on the corresponding Platform or website.
When you make a payment through one of these services, the Platform operator or payment service provider may share with us the following information: your name, user ID, email address, IP address, and the amount of the payment. We may store this data for tax purposes. We collect and process this data in accordance with Article 6 (1) lit. b) of the GDPR, in order to provide you with secure, reliable and user-friendly online payment processing and fulfil our contractual obligations to you.
Some Games offer a text chat, voice chat or other features for player communication. Deca transmits and processes the communication content (e.g. text or voice messages) from players only to the extent that this is technically necessary to provide the corresponding service. The communication content is encrypted. Deca collects and processes this data in order to provide the communication features in certain Games. Therefore, the basis of this data processing for the fulfilment of contractual obligations is Art. 6 (1) lit. b) GDPR.
If you notify our customer support, provide feedback, or otherwise contact Deca (e.g. with a contact form in the Games), the information you provide in your message, including the contact details (e.g. email address) or purchase information (e.g. receipt by Apple or Google, name of the purchased items) given there, will be processed for the purpose of handling your enquiry and processing it, including investigating and rectifying any problems in the Game and in the event of follow-up questions. In the event of a request to our customer support via the Game, information on the Game (e.g. game, build version, in-game events), your ID and Account, your game progress and, if applicable, the problematic part of the Game as well as information on your device (e.g. IP address, operating system version and language, settings, IMEI, device location) may also be processed automatically. Your data will be automatically deleted as soon as it is no longer required to answer your request.
We process this data in accordance with Art. 6 (1) lit. b) GDPR, as far as you contact us within the framework of an existing contract for the use of the Game or for the purpose of initiating such a contractual relationship. Otherwise, the storage and use of the data takes place on the basis of Art. 6 (1) lit. f) GDPR, whereby our legitimate interest is the careful processing of your respective request or feedback and the solution of any technical problems.
We may process any collected information to maintain the security of our Games and other systems or services, prevent fraud, potentially illegal or offensive activities, or to enforce our rights or the rights of our users. This includes ensuring the confidentiality of personal data of our users, preventing unauthorized access or modifications to our systems and otherwise maintaining the security of personal data. Suspicious activities can lead to Accounts being reported and blocked. The legal basis for this processing is Art. 6 (1) lit. f) GDPR. We and our users have a legitimate interest in protecting our Games, systems, networks and users’ Accounts and personal data, preventing fraudulent or illegal activities, and exercising or defending our rights (including legal claims) or the rights of our users.
In certain Games, you can register for our newsletter to receive news about the game, promo codes and other information related to our Games. Details about the content of each newsletter are specified in the individual registration form.
In order to register you and send you the newsletter, we need your valid email address. To verify that you are the owner of the email address provided and that you would indeed like to receive information from us, we use the so-called double opt-in procedure. After submitting your registration, you will receive a link to confirm your subscription to the newsletter. Once you have clicked on the link to enable the newsletter service, your registration will be activated and the chosen newsletter will be sent out.
We use your email address to send you the newsletter. Please note that we also evaluate the opening, unsubscription and click rates in connection with your use of the newsletter and use these findings to improve the newsletter. For this evaluation, the newsletter emails sent contain so-called tracking pixels, which help us to recognise when recipients open a newsletter email, and so-called tracking links, which help us to recognise when recipients click on a link contained in our newsletter. This information is used to create an open and click rate, which we can use to statistically evaluate the percentage of recipients who opened a newsletter sent by us. We can also see which recipients opened our newsletter and which did not. By evaluating this data, we can draw conclusions about the recipients' interest in our newsletter content and improve and develop the newsletter accordingly
We use Verifalia, operated by Cobisi Research (Italy) and Mailchimp, operated by Rocket Science Group LLC to dispatch the newsletter and evaluate its usage.
The legal basis for data processing in the context of the newsletter is your consent pursuant to Art. 6 (1) lit. a) GDPR. You can unsubscribe from the e-mail newsletters and revoke your consent at any time with effect for the future. To unsubscribe or revoke you only have to send an e-mail to support@decagames.com or click the unsubscribe link contained in each newsletter.
In some Games, you may be able to create an invitation to a shared gaming session with a direct link to the specific gaming session to send this invitation to a contact via a messenger app or by other means (e.g. e-mail, message shared on a social network). When the invitation to a game is created, a specific link is generated that leads directly to the gaming session in the Game.
The data processing in connection with the direct link to the gaming session is carried out to provide players with an easy and direct way to start a gaming session with others. The data processing is based on Article 6 (1) lit. f) GDPR. Our legitimate interest is to make it as easy and convenient as possible for our users to start playing games together, thereby providing them with a special gaming experience. This benefits both the sender and recipient of invitations to play a game.
Cookies and similar technologies (collectively "Cookies") are used in our Games. Cookies are small text files that are stored on your device. Cookies may be set by us as the provider of the Game (so-called first-party Cookies) or by third parties whose services are integrated on our Game (so-called third-party Cookies).
Cookies do not contain viruses or otherwise harmful software. They collect and store certain information related to the specific device or to the usage of our Games, e.g. the duration of usage, and they might contain pseudonymized identifiers like an ID. However, this does not mean that we are immediately aware of your identity.
Regarding the storage period, Cookies used on our Games can be distinguished as follows:
Regarding their purposes and legal bases, Cookies used on our Games can be distinguished as follows:
Optional Cookies are only used in conjunction with another service implemented in the relevant Game (e.g. for analytics or marketing purposes). Such services are often provided by third-party vendors (collectively "Vendors").
The types of information collected and processed by our Vendors in the course of providing their services can be broadly categorized as follows. Not all of the following information is collected by Cookies. Some of it is, for example, accessed on the device or automatically transmitted to our Vendors in the event of server contact:
Details on the Cookies, Vendors and services used in our Games and the relevant data processing can be found in the following sections of this Privacy Policy.
We display advertising and (non-advertising) content in our Games that is selected and delivered by our Vendors, including advertisers, publishers, ad networks or other content providers. Only limited data is used in this process, mainly to ensure that a specific ad is displayed in a suited (online) context or country and to control the frequency or sequence order of displayed ads or pieces of content.
Please note that the data processing described in this section does not include personalization or retargeting measures, where users’ advertising profiles are used to tailor the selection of ads to their perceived interests. For information on such personalization services, please see section 14. of this Privacy Policy.
To select and display advertising or other content to a user, certain limited data might be collected, including by means of first-party and third-party Cookies (see section 12 of this Privacy Policy for details on Cookies), and shared with our Vendors. This can include the IP address of your device and other technical data related to your device (e.g. manufacturer and model of the device, the language setting), basic information about the Game (e.g. its basic content), previously displayed advertisements or content, and a non-precise location of the device (e.g. the country). Vendors may also store your past interactions with certain ads or content served by them and take these into account when selecting ads or content, over which we generally have no control. However, there is no detailed tracking of user behavior, and no advertising profiles of users are created.
The collected information is processed to decide which specific ad or piece of content is played. We have no influence on the selection and display of the specific ads or content in our Games. We only provide our Vendors with some basic parameters and criteria to set some general boundaries for the selection of ads. Our Vendors alone decide which specific ads or content is played.
Certain Vendors might combine the collected information with further data about the user available in the specific moment, link different devices of the user, or identify the user’s device based on characteristics in order to select an advertisement in the specific moment (see section 17. of this Privacy Policy for details on these features).
The data processing in the context of the selection and display of advertising or content is determined independently by our Vendors who process the collected information in their own responsibility and for their own purposes according to their privacy policy.
The collected information may be transferred to servers in third countries (e.g. the USA). However, we only work with vendors who, in the event of a data transfer to a third country, ensure an adequate level of protection in that third country in accordance with the provisions of Art. 44 et seq. GDPR. The relevant data processing is often based either on an adequacy decision of the EU Commission for the relevant country (Art. 45 GDPR) or standard contractual clauses concluded between the parties of a data transfer (Art. 46 (1) lit. c GDPR). Both safeguards ensure that the level of data protection in the third country is substantially equivalent to that of the GDPR. Details on data processing to a third country can be found in the privacy policy of the relevant Vendor.
It depends on the respective Game whether and which specific tools and Vendors are used and to which extent advertising or content is selected and displayed to players.
Please refer to the Vendor list of your specific Game for details of the Vendors and tools that select and display ads or content based on limited data in your specific Game.
The list is available in the consent banner of your Game. The consent banner is displayed to you, inter alia, when you first start the Game. Here you can adjust your settings for advertising or content for the respective Game.
The data processing as described above is usually based on your consent pursuant to Art. 6 (1) lit. a) GDPR. You can freely withdraw your consent at any time with effect for the future.
Depending on the specific Vendor and the extent (and limitation) of the relevant data processing when serving advertising or content, the data processing may in individual cases be based on legitimate interests pursuant to Art. 6 (1) lit. f) GDPR. Our legitimate interest is to display advertising to our users in order to finance the creation and further development of free Games, which is also in the interest of our users.
With your consent, our Games may contain personalized advertising or (non-advertising) content. We want to provide users with interest-based and relevant advertising and content in our Games wherever possible. Personalization usually takes place on the basis of pseudonymous profiles of the user, from which conclusions can be drawn about the content, products or services in which the individual user may be interested. We have implemented tools and services (collectively "Personalization Tools") provided by our Vendors in our Games which help to
The Personalization Tools are therefore used to display personalized (also so-called "targeted") advertising or content to users of our Games.
The Personalization Tools often use Cookies (see section 12 of this Privacy Policy for details on Cookies) which contain a pseudonym ID to track certain user-related information in our Games, including user behavior (e.g. engagements with ads or content), and content-related information such as the ads or content displayed in our Games. The tracked information includes, for example, the user’s advertising IDs, details on which and for how long an ad has been displayed, details on user interactions with ads or certain pieces of content, user interaction in the Game such as the use of certain features or objects or purchase of certain items. In addition, device-related data (e.g. IP address, manufacturer and model of the device, the language setting) and the location of the device (e.g. country) might be collected. Please note that the precise location of the device is only collected and processed with the user’s separate and explicit consent (see section 12 of this Privacy Policy for details).
The collected information is shared with our Vendors as providers of the relevant Personalization Tools. In summary, our Vendors generally process the information to create an advertising profile of the user and to serve ads or content based on that profile. Certain Vendors might combine the collected information with further data about the user, link different devices of the user, or identify the user’s device based on characteristics in order to create and enrich advertising profiles or to select a specific ad (see section 13.4. of this Privacy Policy for details on these features).
We provide our Vendors with some basic parameters and criteria to set some general boundaries for the selection of ads. However, our Vendors alone decide if an advertising profile is created, or which specific ad or content is played. Our Vendors generally process the collected information in their own responsibility and for their own purposes according to their privacy policy. To this extent, Deca has no influence on the data processing by Vendors.
Therefore, the following more detailed information about our Vendors’ data processing is based on our best knowledge and may vary from Vendor to Vendor: Typically, the collected user information is analyzed and stored in pseudonym user profiles, i.e. it is used to create a user profile or to further enrich an already existing user profile. The information may be combined with further information about the individual user which was collected by the Vendor elsewhere, e.g. through websites or apps of third parties. The user information may also be combined across multiple devices. The user profiles are typically tagged with targeting criteria based on the analysis of the collected information. This helps the Vendors to customize content or advertising. However, the Vendor may also process the data for further purposes in accordance with its privacy policy, e.g. to improve or develop new products, to measure the effectiveness of certain advertising or for market research purposes.
The collected information may also be transferred to servers in third countries such as the USA (see section 13.4 of this Privacy Policy for details).
Deca is generally not involved in this data processing by the Vendors. Deca also does not receive any information from Vendors with which Deca could identify individual users. The selection of ads or content displayed to a user is generally made by our Vendors. Deca only receives statistical analyses from Vendors that provide information about which ads or content have been clicked on.
It depends on the respective Game whether and which specific Personalization Tools and Vendors are used and to which extent content or advertising is personalized.
Please refer to the Vendor list of your specific Game for details of the Vendors and tools that personalize ads or content in your specific Game.
The list is available in the consent banner of your Game. The consent banner is displayed to you, inter alia, when you first start the Game. Here you can adjust your settings for advertising or content for the respective Game.
We only use Personalization Tools with your consent. Therefore, the data processing as described above is based on Art. 6 (1) lit. a) GDPR. You can freely withdraw your consent at any time with effect for the future.
We measure the advertising and (non-advertising) content performance, including the user’s interactions and conversion (so-called "Conversion Tracking"), to bill the delivery of advertising or content, to better understand our audience or the reach of the displayed advertising and content and to further improve its relevance.
Our Games use Cookies to collect information about the ads or content displayed to our users (e.g. the displayed ads, number, and duration of display; information on brand suitability) and how our users interact with them. This can include details of how many users interacted with an ad or piece of content, for how long, when, and how (e.g. click, tap, hover, scroll) they engaged with it, and which engagements may have led to a successful conversion (e.g. a sale or certain user interaction at the website of the advertiser). In addition, device-related data (e.g. IP address, manufacturer and model of the device, the language setting), age, gender, and the location of the device (e.g. country) might be collected. Please note that the precise location of the device is only collected and processed with the user’s separate and explicit consent (see section 12 of this Privacy Policy for details).
The collected information is processed to create statistical reports about the reach of the displayed ads or content. These statistical reports can be used to invoice the delivered ads or content or to evaluate its relevance. The statistical information can also be combined with further data sets (e.g. user profiles, statistics, market research or analytics data) such as data regarding user interactions with similar advertising or content to identify common characteristics (e.g. to determine which audiences are more receptive to an ad campaign or certain contents). These insights help our Vendors, advertisers, and publishers to conduct market research and define target groups for their advertising campaigns or content.
Our Vendors process the collected information in their own responsibility and for their own purposes according to their privacy policy. Certain vendors might combine the collected information with further data about the user, link different devices of the user, or identify the user’s device based on characteristics to measure the performance of advertising or content (see section 17 of this Privacy Policy for details on these features). The information may also be transferred to servers in third countries such as the USA (see section 13.4 of this Privacy Policy for details).
Vendors who display personalized advertising or content (see section 14 of this Privacy Policy) might also evaluate the collected information on an individual user profile level, i.e. the data might be combined with user profiles (see section 14.2 of this Privacy Policy for further details).
It depends on the respective Game whether and which specific measurement tools and Vendors are used and to which extent the performance of advertising and tools is measured.
Please refer to the Vendor list of your specific Game for details of the Vendors and tools that measure performance of ads or content in your specific Game.
The list is available in the consent banner of your Game. The consent banner is displayed to you, inter alia, when you first start the Game. Here you can adjust your settings for advertising or content for the respective Game.
The data processing as described above is regularly based on your consent pursuant to Art. 6 (1) lit. a) GDPR. You can freely withdraw your consent at any time with effect for the future.
Depending on the specific Vendor and the extent (and limitation) of the relevant data processing when serving advertising or content, the data processing may in individual cases be based on legitimate interests pursuant to Art. 6 (1) lit. f) GDPR. Our legitimate interest is to play advertising to our users in order to finance the creation and further development of free Games, which is also in the interest of our users.
Information on the user interactions with the advertising and (non-advertising) content is processed to improve or develop new Games or products and services, including from our Vendors.
Our Games use Cookies to collect information about how our users interact with the advertisements or content displayed in our Games. This can include details of how many users interacted with an ad or piece of content, for how long, when, and how (e.g. click, tap, hover, scroll) they engaged with it. In addition, the IP address and other device-related data as well as the location of the device can be collected. Please see section 15.2 for further details.
The collected information is processed to create statistical reports about the usage of advertising and content in our Games. These insights help us to improve our Games and our Vendors to improve their products and services, e.g. by improving their performance or adapting them technically. The insights may also be used when developing new Games, products, and services.
Our Vendors process the collected information in their own responsibility and for their own purposes according to their privacy policy. Certain Vendors might combine the collected information with further data relating to the user, link different devices of the user, or identify the user’s device based on certain characteristics to improve and develop their services (see section 17 of this Privacy Policy for details on these features). The information may also be transferred to servers in third countries such as the USA (see section 13.4 of this Privacy Policy for details).
It depends on the respective Game whether and which specific tools and Vendors are used to collect information about the user interactions with advertising and content.
Please refer to the Vendor list of your specific Game for details of the Vendors and tools that use the collected information to improve their services or products.
The list is available in the consent banner of your Game. The consent banner is displayed to you, inter alia, when you first start the Game. Here you can adjust your settings for advertising or content for the respective Game.
The data processing as described above is regularly based on your consent pursuant to Art. 6 (1) lit. a) GDPR. You can freely withdraw your consent at any time with effect for the future.
Depending on the individual Vendor and the extent (or restriction) of data processing when collecting and processing information about user interactions, the data processing can also be based on our legitimate interest pursuant to Art. 6 (1) lit. f) GDPR. Our legitimate interest is to play advertising to our users in order to finance the creation and further development of free Games, which is also in the interest of our users.
In support of the purposes explained above (see sections 13-16 of this Privacy Policy), certain Vendors might combine the collected information with further data relating to the user, link different devices of the user, or identify the user’s device based on certain characteristics.
Information about your activity in the Game and your interaction with ads or (non-advertising) content may be matched and combined with other information relating to you and originating from various sources (for instance your activity on a separate Game or online service).
Such other information may be derived and collected by the Vendor from other services (e.g. from websites, other applications, direct emailing campaigns or in-store purchase history) that you use. Matching these separately collected data sets with your information collected in our Games can help the Vendor to achieve better results from the data processing for the relevant purpose. For example, Vendors can tailor advertising or content more precisely to the user if the underlying advertising profile contains not only information about activities within the Game, but also information about the user's activities and interests on third-party websites.
Your device might be considered as likely linked to other devices that belong to you or your household (for instance because you are logged in to the same service on both your phone and your computer, or because you may use the same Internet connection on both devices). This might allow Vendors to collect and combine information related to the user from additional sources to achieve better results from the data processing for the relevant purpose (see section 17.2 of this Privacy Policy).
Your device might be distinguished from other devices based on information it automatically sends when accessing the Internet (for instance, the IP address of your Internet connection or the type of browser you are using).
Certain Vendors use these individual characteristics to create a pseudonym identifier and/or to re-identify your device at a later time, e.g. when your device is re-connected to the Vendor’s service. This identification of your device might allow vendors to link information from additional sources to a certain user, which can help them to achieve better results from the data processing for the relevant purpose (see section 17.2 of this Privacy Policy).
The relevant legal basis for the above-mentioned data processing generally depends on the respective purpose for which the data processing was carried out (see sections 13-16 of this Privacy Policy). However, such data processing is typically more extensive and therefore usually only takes place with the consent of the user in accordance with Art. 6 (1) lit. a) GDPR. You can freely withdraw your consent at any time with effect for the future.
Your data can be processed to monitor for and prevent unusual and possibly fraudulent activities (e.g., regarding advertising, ad clicks by bots), and ensure systems and processes work properly and securely. It can also be used to correct any problems you or our Vendors, including publishers or advertisers, may encounter in the delivery of content and in your interaction with them.
For details on the collected information, please see sections 12-17 of this Privacy Policy. The information can be processed, inter alia, to monitor or prevent invalid traffic, manipulations, hidden ads, or advertising spam, to identify product errors and ensure operability of the Game and systems.
For details about the tools and Vendors processing data for these purposes, please refer to the Vendor list of your specific Game.
To the extent our Vendors collect the information for this purpose, they may do so on their own responsibility and for their own purposes according to their privacy policy. The information may also be transferred to servers in third countries such as the USA (see section 13.4 of this Privacy Policy for details).
The legal basis for this processing is Art. 6 (1) lit. f) GDPR. We and our Vendors have a legitimate interest in ensuring the security in our Games, products, and services, preventing and detecting (potential) fraud, and in fixing errors.
Certain information is used to ensure the technical capability of the advertising or (non-advertising) content, and to facilitate the transmission of the advertisement or content.
Information processed for this purpose can include data related to the device (e.g. IP address, user agent type, supported language, connection type) and the requested advertising or content (e.g. size and type of the advertisement or content). The data is processed to receive and respond to ad requests, to deliver ad files, to respond to a user’s interaction with an advertisement or content, or to log the delivery of the advertisement or content (without recording any personal data about the user).
To the extent our Vendors collect the information for this purpose, they might do so on their own responsibility and for their own purposes according to their privacy policy. The information may also be transferred to servers in third countries such as the USA (see section 13.4 of this Privacy Policy for details).
The legal basis for this processing is Art. 6 (1) lit. f) GDPR. We and our Vendors have a legitimate interest in delivering and presenting advertising and content to the users of our Games.
We process data from your consent in the cookie settings to document your consent, to implement your setting and to enable you to manage your consent. The choices you make in our Games regarding the purposes listed in this Privacy Policy and the consent banner are saved and made available to the relevant Vendors in the form of digital signals (such as a string of characters). This is necessary in order to enable both this service and the entities to respect such choices.
The legal basis for this processing is Art. 6 (1) lit. f) GDPR. We have a legitimate interest in providing our users with a compliant consent solution and in documenting and implementing their choices.
Some of our Games may use social plug-ins of third-party social networks. Such a plug-in can typically be recognized by the logo of the corresponding social network operator.
If you click on a social network plug-in (e.g. the Facebook "Like" Button) that is integrated into a Game, the Game establishes a direct connection to the servers of the relevant social network provider (e.g. Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland). The plug-in notifies the social network provider that the Game is being used. If you post a comment or click the like button, the respective information is directly transmitted to the social network provider and may be processed there. There is a possibility that your IP address is stored by the social network provider. The information may be transferred to the provider's servers outside of the European Economic Area or the European Union, including the USA. Such data transfers may be based on the EU-U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses.
If you are logged in with the relevant social network, its provider may match this information to your social network account. If you are a registered member of the social network and would like to prevent the social network from matching the collected data to your account, you should log out of the social network before using the relevant plug-in in our Game. Deca does not have any influence on the nature and amount of data transferred by the plug-in to the social network provider. You can find further information in the privacy policy of the relevant social network provider.
However, the connection to the servers of the respective social network is only established and the above-mentioned data is only transmitted to the provider of the social network if you click on the corresponding plug-in and thereby express your interest in using the corresponding function. The legal basis for this processing is Art. 6 (1) lit. f) GDPR, whereby our legitimate interest is the provision of a service to you.
We may share your personal data with our third-party service providers who provide services such as data analysis, payment processing, information technology and related infrastructure provision, customer service, email delivery, auditing, and other similar services. These third parties are only permitted to use your personal data to the extent necessary to enable them to provide their services to us. We have concluded corresponding data processing agreements with these service providers in accordance with Art. 28 GDPR so that your data is processed only on our behalf in accordance with our instructions. Before forwarding any personal data, we ensure that service providers have taken the necessary technical and organizational measures to ensure an adequate level of protection. Our main service providers are currently: Amazon Web Services, Google Cloud, SendGrid Twilio, Zendesk, Gridly, Perforce, Photon, Rapid7, Redis, StackPath StrikeTracker, TestRail, Bugly, Ucloud, Microsoft Azure, Tencent Cloud, Tableau and Heroku.
Otherwise, data will only be shared with third parties with your consent or insofar as this has been described elsewhere in this Privacy Policy. In individual cases, data may also be transmitted to the following recipients:
Information, including personal data that we collect from you, may be transferred to, stored at and processed by us and our third-party service providers outside the country in which you reside, where data protection and privacy regulations may not offer the same level of protection as in the country in which you reside or in other parts of the world.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. This includes the use of the EU-U.S. Data Privacy Framework for transfers to the USA as well as the European Commission's Standard Contractual Clauses. Further details can be provided upon request.
We process personal data of the user as long as it is necessary to achieve the purposes of the processing or is prescribed by a legal obligation to store the data. Subsequently, the data is deleted in accordance with statutory laws. Data that we store for legal reasons, however, is stored for as long as this is required by law. Upon the end of a statutory retention period, the data will be deleted without undue delay, unless there are other reasons within the meaning of Art. 17 (3) GDPR opposing the deletion.
Data that we have processed on the basis of consent will generally be erased or made anonymous immediately after consent is revoked.
Accounts of inactive players ("Inactive Accounts") are deleted. An Account will only be considered inactive if the following conditions are met: (i) there has been no login activity for three (3) years, (ii) the Account has never been used to purchase in-game items or currency, and (iii) the Account has been played for less than 10 hours.
Deca takes technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, misuse, or access by unauthorized persons or against unauthorized disclosure. Our security measures are regularly reviewed and adapted in line with technological developments. Data transmitted between our server and the terminal is encrypted (HTTPS protocol). Please note, however, that no internet transmission is ever 100% secure or error-free, please take this into account when using the services of Deca.
Our Games do principally not include an automated decision-making process, including profiling, pursuant to Art. 22 (1) and (4) GDPR. Should this change and individual, special features of our Games in individual cases include also an automated decision-making process, we will provide you with relevant information about the logic involved and the scope of such processing.
As a person subject to data processing, you are entitled to the following rights, in each case under the requirements and to the extent stipulated by the GDPR. Please contact us if you wish to exercise your rights.
You have the right to request free information about the nature, extent and source of the data stored about you, the recipients or categories of recipients to whom your information has been or will be disclosed and the purpose and intended duration of the storage.
You have the right to request at any time the correction of incorrect data, the deletion and/or restriction of the processing of personal data stored about you, unless Deca is legally obliged to retain such data. Insofar as this includes such personal data that is necessary for the provision of services to you, the deletion or restriction of the processing of this data can only take place when you no longer use Deca’s services.
If you provide data relating to you and Deca processes such data on the basis of your consent or in order to fulfil the contract, you may request to receive such data in a structured, current and machine-readable format from Deca or to make Deca transmit such data to another person responsible, insofar as this is technically possible (so-called right to data portability).
You have the right to object, on grounds relating to your particular situation, at any time to the processing of the personal data concerning you, which is based on Art. 6 (1) lit. e) or f) GDPR, in accordance with Art. 21 GDPR; this also applies to profiling based on these provisions. Deca will no longer process the personal data concerning you unless Deca can demonstrate compelling legitimate grounds for processing which outweigh your interests, rights and freedoms or the processing is intended to assert, exercise or defend legal claims. If the personal data concerning you are processed for direct advertising purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.
You have the right to revoke your consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the member state where you reside, work or the alleged infringement occurred, if you believe that the processing of the personal data concerning you is contrary to the GDPR.
You may ask us to delete your personal data at any time.
We must verify your identity before acting on a request. If you are logged in, we may verify through your account. If you are not logged in, we may ask for additional information such as account ID, purchase receipts, device identifiers, or other data we already hold, which we will use only to verify your request. Authorized agents may submit requests if they provide proof of authorization, and we may ask the account holder to confirm the request.
If your request is approved, we will delete or de-identify personal data we hold about you, and we will instruct our service providers and contractors to do the same. Where we have sold or shared your personal information in the meaning of California law, we will notify relevant third parties to delete your information, unless this proves impossible or would involve disproportionate effort.
We may keep data where an exception applies. These include, for example, compliance with a legal obligation, exercise or defense of legal claims, security incident detection and protection against malicious activity, debugging to identify and repair errors, internal uses that are reasonably aligned with consumer expectations or compatible with the context in which the information was provided, and freedom of expression. If we deny your request in whole or in part, we will explain why.
Certain logs and backups are deleted or overwritten on scheduled cycles. We will isolate your data from active use and complete deletion when the cycle runs. We may keep minimal information about your request, such as your account ID or email, to maintain a record that the deletion occurred and to prevent re-creation of your profile.
We will confirm completion of your request or explain any denial or partial denial. EEA and UK users will also be told about their right to complain to a supervisory authority.
Due to the further development of our Games or due to changed legal or regulatory requirements, it may be necessary to change this Privacy Policy from time to time. The current Privacy Policy is always available via a link in each Game.