Backgammon Arena – Privacy Notice

Welcome to Backgammon Arena!

This notice summarises how we collect and process your personal data in relation to the provision of the Backgammon Arena software applications and websites (the "Services") and what choices you have with respect to your privacy.

This notice does not apply to any third-party products, services or businesses, including tournament managers.

What type of personal data do we process?

If you are not registered to the Services but you participate in a relevant tournament, we may process some limited amount of data about you, such as your name, country and match results. This information is provided by the Administrator of the tournament or by other players. Such data is necessary to maintain tournament integrity and fairness for past opponents and is processed based on legitimate interest.

Why do we process your data?

• Services: We will use some of your personal data for the provision and maintenance of our Services and its functionalities, in particular to record pairings, match results, rankings and balances during the relevant tournaments.
• Providing (technical) support services: Occasionally, we connect personal information to information gathered in error and diagnostic reports as necessary to provide better customer experience and to improve our services.
• Communication: Where necessary, we will send you information regarding the Services, such as administrative messages, to your email address provided to us. Please be aware that you cannot opt out of receiving certain service messages from us, including necessary security alerts and legal notices.
• Marketing: Upon your consent, we may use your email address to send you marketing communications.
• Protecting our legitimate business interests and legal rights: Where required by law or where we believe it is necessary to protect our legal rights, interests and the interests of others, we use information about you in connection with legal claims, compliance, regulatory, and audit functions, and disclosures in connection with the acquisition, merger or sale of our business.
• Other: We may also process your data for any other purposes for which we obtain your consent where necessary or otherwise in accordance applicable law and this policy.

What is the legal basis of our data processing?

We collect and process information about you only where we have legal bases for doing so under applicable EU laws. This means we collect and use your information only where:

• It is necessary in order to provide you the Services, including to set up and maintain an account for you, to provide customer support;
• It satisfies a legitimate interest (which is not overridden by your data protection interests), such as to maintain tournament integrity and fairness for past opponents, for security and technical support, and to protect our legal rights and interests;
• You give us consent to do so for a specific purpose;
• It is needed to comply with a legal obligation.

How do you use your data while using the Services?

To provide you with updated results of the tournaments, we continuously show you pairings and schedules, as well as your match results and rankings. This function enables you to follow your developments during different tournaments.

Via the Chat function, you may exchange messages with other players registered to the Services. Before you send a message, please always consider the rules set out in in our Terms and Conditions.

Do we share your data with third parties?

We never sell your personal data to third parties. However, in certain cases we need to share your personal data with others. In any case, we will share your personal data only in accordance with applicable laws and this notice, and in the following cases:

• Tournament managers: In order to register, and record the results, as well as to administer balances of the players participating in the relevant tournament, we will make summary reports available to tournament managers about the achievement of players, including their names and countries, as well as all results recorded within the Services.
• Other players and the public: To prevent a potential fraud or abuse of the rules, certain information (such as your name, country and results) is publicly available as part of the relevant tournament. You can look up the rankings and results of other players – and other players can also look up yours.
• Legal compliance: We may transmit personal data if the applicable legal provisions so require, or when such action is necessary to comply with any laws, e.g. with criminal authorities if we are required to cooperate for such purposes. We may also need to share personal data for the protection of our rights and interests, to protect your safety or the safety of others or to investigate fraud, in accordance with the applicable laws.
• Third-party service providers: In certain cases, we use third party data providers. For example, we use third-party data storage services to run our Services. Our data processors always undertake to use the personal data shared only in relation to their services provided to us.

In principle, your data is stored within the territory of the EEA. We will only transfer personal data outside of the EEA in accordance with applicable laws.

Who is responsible for the processing of your data?

The Services are provided by Katalin Veszeli (address: 1135 Budapest, Petneházy utca 70-72. 4/8.) ("we" or "us"), acting as a data controller under the laws of European Union.

In any case, certain of our activities are outsourced to third parties (processors), they may also use your personal data when acting on behalf of Us. You can find more details about our sub-processors above.

How long will we process your data?

We will retain your personal data as long as it is needed to fulfil the purposes specified above (for example, to provide you with our Services, to enable you to record your results and administer your balances), unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize it in accordance with applicable laws.

You may also request the deletion of your account via the application. Upon your account deletion request, your account will be scheduled to be deleted within 30 days. Once the 30 days expired, your account and relating personal data will be deleted or anonymized in accordance with applicable law.

We may retain certain information after your account is deleted, but only for limited purposes. For example, to pursue legitimate business interests, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes and enforce our agreements. Please note that in order to maintain tournament integrity, match results, and fairness for past opponents, your displayed player name and completed match records will remain visible within the match history.

How do we protect your data?

We take appropriate technical and organizational measures to protect your personal data against any forms of unlawful processing. Your password is stored in an encrypted form. Messages exchanged between players are encrypted at rest, and their transmission occurs over an encrypted channel (HTTPS/TLS).

Your privacy rights

You may exercise certain rights about your personal data in accordance with the EU General Data Protection Regulation (“GDPR”):

• You have the right to obtain confirmation from us whether we are processing your personal data and related information, as well as the right to obtain a copy of your personal data undergoing processing.
• You have the right to request the rectification of inaccurate personal data and to have incomplete data completed.
• In certain circumstances, you may request that we restrict the processing of your personal data, and you have the right to object to the processing of your personal data.
• You may request that we erase your personal data in certain cases.
• In certain circumstances, you may request a copy of your personal data in electronic format and request us to transmit that personal data for use in another party’s service.

Please note that the types of automated decision-making referred to in Article 22(1) and (4) of the GDPR do not take place in connection with your personal data.

In cases where the processing of your personal data is based on your consent, you can withdraw your consent any time. Please note that such withdrawal of your consent does not affect the lawfulness of our processing activities based on consent before its withdrawal.

You can request this by send an email to support@backgammonarena.com. We will respond to your request within thirty calendar days. Please note that, we may ask you to verify your identity before complying with the request.

You also have the right to complain to a data protection authority or claim damages before the court if necessary. For more information, please contact our supervisory authority, the Hungarian Data Protection Authority (Nemzeti Adatvédelmi és Információbiztonság Hatóság in Hungarian):

Mail address: 1363 Budapest, Pf.: 9.

Telephone: +36-1-391-1400

Fax: +36-1-391-1410

Email: ugyfelszolgalat@naih.hu

Website: http://www.naih.hu

A list of contact details for the EU data protection authorities is available here.

Changes

Due to the ongoing changes in the law and the changing nature of technology, our data processing may change from time to time. Accordingly, we reserve the right to alter or modify this notice when it is necessary.

Any further questions?

If you have any further questions in relation to the processing of your data, please contact support@backgammonarena.com.