Privacy Policy
Unless defined below capitalized terms used in this Privacy Policy shall have the meanings as in the Terms of Use. The purpose of this privacy policy is for you, as a website visitor or customer, to learn how Playleak handles your personal data and for you to be able to feel secure that the processing is being carried out in accordance with the General Data Protection Regulation and other applicable data protection laws.
1. Who is responsible for your personal data?
Playleak Limited is the data controller. Playleak’s group companies and selected suppliers may process your personal data on Playleak’s behalf and in accordance with Playleak’s instructions as stated below and are thereby processors of your personal data. You may contact us at any time through customer service.
2. Processing and collecting Personal Data
When browsing the website, purchasing products, interacting with customer support, subscribing to newsletters and other interactions with Playleak, we process your personally identifiable information (“Personal Data”). If you choose to withhold any Personal Data requested by Playleak for such purposes, it might not be possible for us to accept your purchase, subscription for newsletters or marketing or solve the matter that you would like to have solved by the support or customer service.
2.1 Purchasing products
- Type of personal data: Your name, shipping and billing address, phone number and e-mail address
- Legal Ground: Fulfilling the purchase contract
- Purpose: Fulfilling our obligations related to the purchase, such as processing orders, delivering products, providing product warranty, resolving disputes, handling payments and claims, and for compliance with legal obligations (such as bookkeeping)
- When the purpose ends: When the purchase is completed and there are no longer any legal obligations (7 years for bookkeeping and up to 10 years for statutes of limitation).
- Type of personal data: Your IP-address
- Legal Ground: The processing is based on a balancing of interests , where we have determined that our interest in processing your Personal Data for security and fraud prevention, outweighs your rights to not have your data processed for this reason.
- Purpose: Security and fraud prevention.
- When the purpose ends: When we have established that there is no fraud or security risk.
2.2 Subscribing to newsletters and marketing
- Personal Data type: Your name, birthdate, country of residence and postal code, e-mail address, IP-address, and phone number.
- Legal Ground: Consent.
- Purpose: Sending product information, special offers, running competitions, conducting market research, measuring interest in our website, products and services, and sending newsletters.
- When the purpose ends: When you withdraw your consent and no longer wish to receive newsletters and marketing.
2.3 Contacting customer service
- Type of Personal Data: Your e-mail address and other information you voluntarily provide upon contact with support or customer service.
- Legal Ground: The processing is based on a balancing of interests, where we have determined that our interest in processing your Personal Data for providing customer service, outweighs your rights to not have your data processed for this purpose.
- Purpose: Fulfilling our obligations and undertakings related to your purchase, such as handling claims, returns and refunds.
- When the purpose ends: When your contact with customer service ends and the statutes of limitation expire (normally 10 years).
2.4 Leaving reviews
- Type of personal data: Your name and e-mail address.
- Legal Ground: The processing is based on a balancing of interests, where we determined that our interest in processing your Personal Data for leaving reviews, outweighs your rights to not have your data processed for this purpose.
- Purpose: Processing your name is to display it with your review and your e-mail to be able to identify you and to be able to verify that you are a real person.
- When the Purpose ends: Until further notice or until you ask for us to stop processing your Personal Data for this purpose.
3. Third parties and Personal Data transfer
Except as provided in this Privacy Policy, we will not intentionally disclose your Personal Data to third parties without your consent. We may however disclose information to third parties under the circumstances set out below. When we share your personal data, we ensure that the recipient processes it in accordance with this notice, such as by entering into data transfer agreements or data processing agreements. Such agreements include all reasonable contractual, legal, technical and organizational measures to ensure that your information is processed with an adequate level of protection and in accordance with applicable law. We may share your data with affiliated companies, including group companies. These recipients are only entitled to process your personal data on behalf of us while performing a service for us. We take all reasonable legal, technical and organizational measures in order to ensure that your data is handled securely and with an adequate level of protection when transferring it to, or sharing it with, such selected third parties. We may also release your personal data to public authorities where we are obligated to do so by law. If all or part of Playleak’s operations are sold, Playleak may transfer your personal data to a potential purchaser of the business, either in whole or in part, for the sole purpose of continuing the business subject to such sale and only if the recipient of such of the Personal Data commits to a Privacy Policy with terms materially consistent with this Privacy Policy.
3.1 Playleak’s service providers
We work with third party service providers who provide (i) website and application development, hosting, maintenance, e-mail servers, and other related services, (ii) order and payment fulfillment, product shipment, after sales services, support services and other related services, (iii) services related to sending e-mails, newsletters, providing marketing and other related services, and (iv) financial services, bookkeeping and audits and other related services. Such third parties may receive access to your Personal Data for them to provide the intended services for Playleak. Playleak will however limit the Personal Data provided to them to what is reasonably necessary for them to perform their obligation in relation to us, and always subject to obligations of confidentiality.
3.2 Law enforcement and legal processes
Playleak may disclose Personal Data if required by applicable laws, court orders, judicial and government subpoenas or warrants, or otherwise to cooperate with law enforcement or other governmental agencies. Playleak may also disclose Personal Data that Playleak believes is appropriate or necessary to take actions to protect Playleak and others from fraudulent, abusive or unlawful use or activity, to investigate and defend Playleak from third party claims or allegations and to protect Playleak’s business and legal rights, enforce contracts or protect the rights, property or safety of others.
3.3 Personal Data transfers outside the EU
Playleak may transfer Personal Data to service providers, as stated in Section 3.1 above, located outside of the EU. Playleak will however always comply with GDPR requirements providing adequate protection for the transfer of such Personal Dara to such third countries and will try to minimize such transfer. Such safeguards may be that the receiving party has signed standard data protection clauses adopted by the EU Commission.
4. Your rights when Playleak processes your Personal Data
4.1 Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
You have the right to lodge a complaint with a supervisory authority.
4.2 Right to withdraw consent (Article 7.3 GDPR)
You have the right to withdraw any consent at any time by contacting us.
4.3 Right of access (Article 15 GDPR)
You have the right to obtain confirmation as to whether we are processing personal data concerning you or not. You can make a request by contacting us. If we process your personal data, you also have a right to obtain a copy of the personal data processed by us as well as information about our processing of your personal data.
4.4 Right to object (Article 21 GDPR)
You have the right to object to our processing of your personal data at any time.
4.5 Right to erasure (“the right to be forgotten”) (Article 17 GDPR)
You have the right to ask us to erase your personal data.
4.6 Right to rectification of processing (Article 16 GDPR)
You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you.
4.7 Right to restriction of processing (Article 18 GDPR)
You have the right to obtain from us restriction of the processing of your personal data.
4.8 Right to data portability (Article 20 GDPR)
You have the right to receive your personal data (that you have provided to us) from us in a structured, commonly used and machine-readable format and, where technically feasible, have your personal data transferred to another data controller (“data portability”).
5. Cookies and Analytics
We use cookies and other technologies to personalise your experience visiting the website, to provide customised advertisement, information, and content, and to monitor and analyse use of the website. We also uses analytics technologies (Google Analytics) to measure and evaluate the access to and traffic on the website, and to generate navigation reports. Google operates independently from us and has its own privacy policy. You may from some browsers opt out from the collection of navigation information by Google Analytics by using Google’s opt-out feature.
6. Period for Storing your Personal Data
The period during which we store your Personal Data depends on which purpose we use the Personal Data for. We generally store Personal Data for a contractual relationship up to 10 years after the relationship ends, due to statutes of limitation. We generally store data for legal obligations for 7 years, mainly due to bookkeeping laws. Regarding Personal Data that we store for other purposes than contractual relationships and legal obligations, we usually store such data until there no longer is a purpose for it.
7. Additional Information for California Residents
If you are a consumer residing in California, you have additional rights under the California Consumer Privacy Act (CCPA).
8. Changes and Updates
We may update our services and this Privacy Policy from time to time. If that happens, we will make the new Privacy Policy available on the website and indicate the date of the latest revisions made. If the update requires a notice or consent, you will be notified or given the opportunity to consent. You are encouraged to revisit this Privacy Policy every time you use any of our services to keep yourself informed about any changes.
This Privacy Policy was last updated: 25 August 2024.