A. Who is responsible for the data processing and who can you contact?
Responsible as controller for the processing of your personal data is:
Name: AIDIS Inc.
Address: 6th floor Sumitomo Fudosan Aoyama Bldg, 1-7-7 Shibuya, Shibuya-ku, Tokyo, Japan.
You can reach our data protection officer under the following contact information:
Address: DPO, AIDIS Inc., 6th floor Sumitomo Fudosan Aoyama Bldg, 1-7-7 Shibuya, Shibuya-ku, Tokyo, Japan.
General Data Protection Regulation (GDPR) – European Representative
Pursuant to Article 27 of the General Data Protection Regulation (GDPR), AIDIS, Inc. has appointed European Data Protection Office (EDPO) as its GDPR Representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR:
by using EDPO’s online request form: https://edpo.com/gdpr-data-request/
by writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium
UK General Data Protection Regulation (GDPR) - UK Representative
Pursuant to the UK GDPR, AIDIS, Inc. has appointed EDPO UK Ltd as its UK GDPR representative in the UK. You can contact EDPO UK regarding matters pertaining to the UK GDPR:
by using EDPO’s online request form: https://edpo.com/uk-gdpr-data-request/
by writing to EDPO UK at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom
B.How do we process personal data?
We process various personal data you provide to us when using our products and services. This may include our websites and our games as well as other products and services (in the following together defined as “Products”).
In principle, the following can be considered as the purposes of the processing: the processing for the initiation of contractual relationships and the performance of contracts (Art. 6 (1) lit. b GDPR and corresponding Article of the UK GDPR), the processing for the protection of legitimate interests (Art. 6 (1) lit. f GDPR and corresponding Article of the UK GDPR), the processing based on your consent (Art. 6 (1) lit. a GDPR and corresponding Article of the UK GDPR) and/ or the processing subject to statutory provisions (Art. 6 (1) lit. c GDPR and corresponding Article of the UK GDPR).
You can find in the following further information on the specific personal data and the purposes we process such personal data for as well as the legal basis for such processing.
While visiting our website, the following specific data is stored during every retrieval: Name of your internet provider, IP-address, time and date of your visit, browser information, referral-URL (previous visited website.
The processing of the personal data is based on Art. 6 (1) lit. f GDPR and corresponding Article of the UK GDPR. Purpose and our legitimate interest are administration and improved functionality of our website as well as preventing security issues (e.g. hacking).
In order to make the use of our Products more attractive and to enable the use of certain functions, we use so-called cookies. Cookies are small text files that are stored on the user’s end device when he/she visits a website and thereby enable the user to be assigned with his/her device.
You can set your browser to refuse the acceptance of cookies in certain cases or generally. You can also delete cookies which are already set. However, please note that we use certain cookies which are technically necessary for proper operation of certain functions on our website. If these cookies are not accepted, the functionality of our website may be limited.
There are various types of cookies, depending on their characteristics and functions:
Cookies can have various functions, for example for electronic authentication, monitoring of sessions and storage of information regarding your activities when accessing a website.
Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit us (so-called persistent cookies). Furthermore, some of the cookies used on our website are provided by third party providers (so-called third party cookies).
In addition, we may also use similar technologies, which provide the same functions as cookies, for example, to identify devices. Such similar technologies can include fingerprinting techniques, HTML 5 local storage and Local Shared Objects as well as scripts, tracking pixels and plugins.
When you install our Products on your mobile device, we collect the device ID for your mobile device, such as Android’s of ADID. The device ID is a unique terminal identification number which allows to identify an individual smartphone or tablet. The device ID is stored on the mobile device and can be retrieved by an application which is downloaded and installed.
We use the device ID for tracking and identifying a user who is using our Products (without revealing personal information) in order to see user’s interaction with our Products, inter alia in-app events a user triggers, as well as user’s interaction with a mobile advertising campaign, inter alia if a user clicks on an advert.
You can find further information when and for which purposes we use device IDs for in the following sections.
In order to use the full functions of our Products you have to create a user account. In this context, we process the following personal data: account name, device ID (IDFA, ADID). We may also collect the account ID of the social networking service you are using and has connected with our Products, e.g. for logging in.
In order to provide you with the full functionality of our Products, we need to process various data about your use of our Products. This includes information about your game settings, your progress in the games, your participation in and performance in certain events as well as your in-game interactions, inter alia purchase of in-game items.
We use social networks, like Facebook and Twitter, to provide you with information about our Products, for example updates, new functions and release of new items for our games as well as in-game and live streaming events. We also use these social networks to carry out marketing measures, for example to provide giveaways (see below).
We may also analyze your behavior when using a certain social network that we also use based on a specific ID given to you by the respective social network. This includes information about which website you came from before visiting our social network accounts and from which page a user moves from our social network account to another website. We use these information to understand users of our Products and to improve our game-related marketing. We also use the data for checking the number of followers, lists of followers who apply for our marketing campaigns and collect keywords that generate high interest among users. For this purpose, we use the service Social Insight from User Local, Inc. based in Japan (https://sns.userlocal.jp/). Please note that the service does not track the individual log-in activity.
Legal basis for the processing of personal data is Art. 6 (1) lit. f GDPR (legitimate interests) and corresponding Article of the UK GDPR . Our legitimate interest for the processing is to improve our Products and marketing activities relating to our Products.
When using our Products we may offer you to participate in our giveaway campaigns. For this purpose, we process the following personal data: name, address, postcode, country, email-address, phone number, SNS account ID.
Participation in our giveaway campaigns require that you accept the applicable terms and conditions.
The legal basis for such processing is Article 6 (1) lit. b GDPR and corresponding Article of the UK GDPR. The purpose of the data processing is the performance of the contract on the giveaway (term of use).
We use the following tools provided by external service providers to measure the success of our marketing campaigns, for our own market research and to optimize our Products.
|_ga||Web Analytics Cookie||Cookie provided by Google to collect and analyze information on how visitors use the website.||2 years|
|_gid||Web Analytics Cookie||Cookie provided by Google to collect and analyze information on how visitors use the website.||24 hours|
|_gat_***||Web Analytics Cookie||Cookie provided by Google to collect and analyze information on how visitors use the website.||1 minute|
We only use Google Analytics if have given us your prior consent pursuant to Art. 6 (1) lit. a GDPR and corresponding Article of the UK GDPR.
When you contact us by e-mail or via the contact forms provided in our Products, your e-mail as well as any other details provided by you will be processed by us in order to best answer any questions or issues you may have.
Legal basis for the processing of personal data is Art. 6 (1) lit. f GDPR and corresponding Article of the UK GDPR (legitimate interests). Our legitimate interest for the processing is the offering of good customer care and optimal handling of your requests.
C.Are you obliged to provide personal data?
There is no legal or contractual obligation to provide us with your personal data, except for such personal data which are required for registering and login in the respective Products (e.g. in-game). Otherwise, we only ask you to provide us with the data necessary for providing our services. Without these personal data, we are not able to offer you the full functionalities of our Products and our Products may be limited.
D.With whom do we share personal data?
We use external service providers to process personal data when providing the website and its functionalities and services to you. Processing of personal data by such service provider is carried out on our behalf and in accordance with our instructions (so-called “Processors”, see Art. 4 (8) GDPR and corresponding Article of the UK GDPR). We engage the following service providers or categories of services providers:
We may also share personal data with recipients, which process personal data under their own responsibility for own purposes (see Art. 4 (7) GDPR and corresponding Article of the UK GDPR). This includes transfer to the following recipients or categories of recipients:
E.Do we transfer personal data to third countries?
Any transfer to a third country shall take place only in compliance with the applicable data protection regulations, in particular the assurance of an adequate level of data protection. We have implemented appropriate safeguards, i.e. standard contractual clauses according to Art. 46 (2) lit. c GDPR and corresponding Article of the UK GDPR, ensuring the safety of your personal data. For further information regarding this or a copy of said safeguards you can contact us under the contact information given in Section A.
F.How long do we store personal data?
We process your personal data as long as they are necessary for the specific processing purposes.
In general, we store your personal data for the duration of the usage process, unless storage beyond this period is necessary to fulfil the respective processing purposes. In this case we store your personal data as far as this is necessary for the fulfilment of the respective processing purpose.
In addition, we are subject to various statutory filing and documentation obligations. The retention periods for such storage and documentation obligations can be up to ten years.
In light of possible legal claims, the retention period is also determined by statutory time limitations, which can be up to thirty years, whereby the regular limitation period is three years.
G.How do we secure personal data?
We maintain up-to-date technical measures to safeguard data security, in particular to protect your personal information from threats when transferring data and from prior knowledge gained by third parties. These measures are constantly adapted to the latest state of the art.
In order to prevent unauthorised access by third parties to your personal data, the connection is encrypted using SSL technology.
H.Which rights do you have?
You have the right of access (Art. 15 GDPR and corresponding Article of the UK GDPR), the right to rectification (Art. 16 GDPR and corresponding Article of the UK GDPR), the right to erasure (Art. 17 GDPR and corresponding Article of the UK GDPR), the right to restriction of processing (Art. 18 GDPR and corresponding Article of the UK GDPR) and the right to data portability (Art. 20 GDPR and corresponding Article of the UK GDPR).
When personal data is processed based on your consent, you have the right to withdraw your consent according to Art. 7 (3) GDPR and corresponding Article of the UK GDPR. Please keep in mind that your withdrawal only affects future processing based on your consent.
To exercise the aforementioned rights, you can contact us, in particular via the email set forth in Section A. Please note that we may require you to present proof of identity to verify the eligibility of your rights execution.
If you are of the opinion that the processing of your personal data is unlawful, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR and corresponding Article of the UK GDPR). This right to complain is without any prejudice to any other administrative or judicial remedy.
Information about your right to object in accordance with Art. 21 General Data Protection Regulation (GDPR) and corresponding Article of the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2018 (the “UK GDPR”)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you on the basis of Art. 6 (1) lit. f GDPR and corresponding Article of the UK GDPR (processing of personal Data based on a balancing of interests); this includes profiling based on those provisions (Art. 4 No. 4 GDPR and corresponding Article of the UK GDPR).
Should you decide to object the processing, we will stop to process personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the purpose of establishment, exercise or defence of legal claims.
You also have the right to object at any time to processing of personal data concerning you for the purpose of advertising; this also applies to profiling insofar as it is associated with advertising.
Should you decide to object to the processing for advertising purposes, we will stop to process personal data concerning you for these purposes.
The objection is not subject to any form. Ideally, it should be lodged via email at the bodies mentioned in Section A.