Source: https://www.albiononline.com/en/privacy_policy
Timestamp: 2019-04-26 00:26:11+00:00

Document:
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's device. For this the IP address of the user must remain stored for the duration of the session.
As part of the provision of our Internet presence, we forward the aforementioned personal data to International Business Machines Corp. (IBM), 1 New Orchard Rd, Armonk, New York 10504, USA, which takes over hosting as processor with the Softlayer service (cf. Art. 28 GDPR). Your personal data will be processed by IBM in the USA on our behalf in the scope of hosting.
A transfer to IBM Corp. in the USA as a third country within the meaning of the GDPR is permissible according to Art. 44, 45 GDPR, since an appropriate level of data protection is given for the USA in relation to this company.
On the basis of Art 25 para. 6 EU-Personal data directive (1995), the EU Commission has issued an adequacy decision in the form of the so-called EU-US Privacy Shield. The EU-US Privacy Shield is an intergovernmental agreement between the United States and the European Union. This agreement regulates the protection of personal data transferred from a member state of the European Union to the USA. A self-certification procedure by the companies under the supervision of the US authorities ensures that only companies that respect data protection equivalent to that of the EU process personal data from the EU in the USA. IBM Corp. is certified according to the requirements of the EU-US Privacy Shield. This ensures an adequate level of protection for the designated recipients despite the lack of an adequacy resolution by the EU Commission within the meaning of Art. 45 GDPR.
The anonymous user ID is used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer.
In this regard, the collection of the user's e-mail address serves to deliver the newsletter witch contains information about patches, updates, community events, special promotions, interesting information about the development of Albion Online and, if applicable, offers about our game. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used. This also constitutes our legitimate interest in the processing.
The data will be deleted as soon as the purpose of its collection is no longer given. The user's e-mail address will therefore be stored until the user objects to receiving the newsletter. If we need the user's e-mail address for further purposes (see further details in this data privacy declaration), the deletion will be replaced by the corresponding restriction on processing, i.e. we will no longer use the e-mail address for sending the newsletter.
As part of sending the newsletter, we will forward your e-mail address to The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA (provider of the newsletter distribution platform "MailChimp") or SendGrid Inc. 1801 California Street, Denver, CO 8020, USA. The Rocket Science Group, LLC and SendGrid Inc. are newsletter management service providers who take over the dispatch of our newsletter for us as contract processors (cf. Art. 28 GDPR). Your personal data will be processed by these companies in the USA on our behalf within the scope of the newsletter dispatch.
Transmission to The Rocket Science Group, LLC and SendGrid Inc. in the USA is permitted. The Rocket Science Group, LLC and SendGrid Inc. have each been certified according to the requirements of the EU-US Privacy Shield. Details on the Privacy Shield can be found in Section IV No. 5 of this data privacy declaration.
There is a contact form on our website which can be used for making contact. If a user uses this option, the data entered in the input mask is transmitted and saved including the time of the request. In addition, the IP address of the used device is stored.
It is also possible to contact us via the e-mail address provided on our website. In this case, the user's personal data transmitted via e-mail will be stored.
In addition, contact via Facebook is possible. You can write us a message from your Facebook profile. The name of your Facebook profile and, if applicable, your clear name will be transferred to us.
The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR and, insofar as the personal data are processed for the execution of a contract, Art. 6 para. 1 lit. b GDPR.
Purpose of data processing is the handling of requests, in particular support requests for technical problems with the game and the handling of other questions. The processing of personal data serves us solely to handle the contact approach. This is also our legitimate interest in the processing of the data.
The data will be deleted as soon as the purpose of its collection is no longer given. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is finished when the circumstances indicate that the matter in question has been solved.
Within the scope of user inquiries, we forward the aforementioned data to the service provider Zendesk Inc. 1019 Market St, San Francisco, CA 94103, USA, which takes over the organisational handling of user inquiries including a so-called ticket system as a processor (cf. Art. 28 GDPR). Your personal data will be processed by Zendesk in the USA on our behalf in the course of processing user inquiries. The content of the enquiries will be processed by us.
A transfer to Zendesk Inc. in the USA is permitted. Zendesk Inc. is certified according to the requirements of the EU-US Privacy Shield. Details on the Privacy Shield can be found in Section IV No. 5 of this data protection declaration.
The data will be deleted as soon as the purpose of its collection is no longer given. For the data collected during the registration process, this is usually the case when the user contract is terminated and the user's account is deleted.
If data is collected in the course of the registration which we are obliged to store due to tax, commercial law or other regulations, it will not be deleted until the respective legal retention or storage periods have expired. The legal basis for this data storage is Art. 6 para. 1 lit. c GDPR.
If the data is required to fulfil a contract or to carry out pre-contractual measures or if there are legal storage obligations, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion. If deletion is not possible, processing may be restricted.
As part of the registration process, we transfer the above personal data to International Business Machines Corp. (IBM), 1 New Orchard Rd, Armonk, New York 10504, USA, which is responsible for hosting as a processor (cf. Art. 28 GDPR) with the Softlayer service. Your personal data will be processed by IBM in the USA on our behalf in the course of hosting.
A transfer to IBM Corp. in the USA is permissible, as an appropriate level of data protection is provided for this company in the USA. IBM Corp. is certified according to the requirements of the EU-US Privacy Shield. Details on Privacy Shield can be found in Section IV No. 5 of this data protection declaration.
As part of the provision of the game Albion Online, we store and process the datasets necessary for the operation of the game and website. For this purpose, we also store data in logs when using the game. Logs are protocols of certain technical contents.
The purpose of data processing is the technical implementation and the provision and operation of the game. The specific purpose of saving the logs is a technical improvement of the game Albion Online (quality assurance). To prevent program crashes and other malfunctions (in the future) it is necessary to record and analyze them. In case of a crash of Albion Online or a problem in the game process, an error analysis can be performed by reading the logs in connection with your IP and ID and information about the device used. The chat logs are stored in order to be able to trace the respective chats in case of complaints, e.g. because of insults.
These purposes also constitute our legitimate interest in the processing of personal data.
The data will be deleted as soon as the purpose of its collection is no longer given. This is the case as soon as the data is no longer required for the use and provision of the game, for example if you have deleted your account and there are no further reasons for storing the data. The log data is kept as long as it is required for the purpose of analysis and diagnosis of the cause of the crash or malfunctions. As a rule, the data is deleted immediately after the facts have been clarified, but at the latest after 30 days. The chat logs are usually deleted after 30 days.
If certain data is collected in the course of gaming operations which we are obliged to store due to tax, commercial law or other regulations, it will not be deleted until the respective legal retention or storage periods have expired. The legal basis for this data storage is Art. 6 para. 1 lit. c GDPR.
As part of our gaming operations, we share your information with various companies in Canada and the USA.
We forward the log data to OVH Canada, 50 Rue de l'Aluminerie, Beauharnois, QC J6N 0C2, Canada, that stores the logs for quality assurance as a processor (cf. Art. 28 GDPR). Your personal data will be processed by these companies in Canada on our behalf for quality assurance purposes.
A transfer to OVH to Canada as a third country within the meaning of the GDPR is permissible according to Art. 44, 45 GDPR, as an adequate level of data protection is given for Canada in relation to this company.
On the basis of Art. 25 para. 6 EU-data privacy directive(1995), the EU Commission has issued an adequacy decision (2002/2/EC) for Canada, i.e. there is an intergovernmental agreement between Canada and the European Union. This agreement regulates the protection of personal data transferred to Canada from a member state of the European Union. Accordingly, private companies subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) are required to provide adequate data protection. This ensures an adequate level of protection for the processor OVH despite the lack of an adequacy decision by the EU Commission within the meaning of Art. 45 GDPR.
We will forward your data to Backblaze Inc, 500 Ben Franklin Ct San Mateo, CA 94401, USA, which takes over backup services for the log data as a processor (cf. Art. 28 GDPR) within the scope of quality assurance. Your personal data will be processed by this company in the USA on our behalf for quality assurance purposes.
We will also forward your data to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which handles quality assurance as a contract processor using the Crashlytics tool (cf. Art. 28 GDPR). Your personal data will be processed by this company in the USA on our behalf for quality assurance purposes.
As part of our gaming operations, we transfer the aforementioned personal data to International Business Machines Corp. (IBM), 1 New Orchard Rd, Armonk, New York 10504, USA, which takes over hosting as contract processor with the Softlayer service (cf. Art. 28 GDPR). Your personal data will be processed by IBM in the USA on our behalf in the context of hosting.
A transmission to Backblaze Inc., Google Inc. and IBM Corp. is permitted. The companies have been certified according to the requirements of the EU-US Privacy Shield. Details on Privacy Shield can be found in Section IV No. 5 of this data privacy declaration.
The payment data (account number, credit card number, etc.) are expressly not collected by us, but by the corresponding payment service providers. For the processing of the payment we primarily work with the European service provider Adyen BV.
Purpose of data processing is to manage the payment transaction and to verify its legality, in particular to prevent fraud and to settle any disputes on payment. This is also our legitimate interest in the processing.
The data will be deleted as soon as the purpose of its collection is no longer given. This is the case as soon as the check for the corresponding payment transaction has been completed and it has been ensured that the corresponding payment was made legally.
If data is collected in the course of payment operations which we are obliged to store due to tax, commercial law or other regulations, it will not be deleted until the respective legal retention or storage periods have expired. The legal basis for this data storage is Art. 6 para. 1 lit. c GDPR.
As part of the payment, we will forward the data specified under point X. No. 1. to the service provider Adyen BV, Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands. Adyen then collects the data relevant for the payment as contract processor (cf. Art. 28 GDPR) for us and processes the payment. Adyen only stores your payment data in Europe.
As part of the payment, we shall also forward the information specified under point X. No. 1. to the service provider iovation Inc, 555 SW Oak Street, #300, Portland, OR 97204, USA, who takes over the security and monitoring of payment transactions as contract processor (see Art. 28 GDPR). Iovation is a service provider for monitoring and checking payment transactions. Your personal data will be processed by these companies in the USA on our behalf as part of the payment process.
A transfer to Iovation Inc. in the USA is permitted. Iovation Inc. is certified according to the requirements of the EU-US Privacy Shield. Details on the Privacy Shield can be found in Section IV No. 5 of this data protection declaration.
Our website uses the Custom Audiences service of the social network facebook.com, which is operated by Facebook Inc. This service is used to present interest-based advertisements ("Facebook ads") to visitors of our website as part of their visit to the social network Facebook. For this purpose, the remarketing function of Facebook has been implemented on this website (so-called Facebook pixels). This provides a direct connection to the Facebook servers when you visit our website. The information that you have visited this website is transmitted to the Facebook server and Facebook assigns this information to your personal Facebook account if you have one. The default setting is that "advanced matching feature" is not used. This means that we do not submit any email addresses or names of our users to Facebook.
The legal basis for the processing and forwarding of data to Facebook is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing is advertising. This is also our legitimate interest.
You can prevent the Facebook pixel function and the associated transmission of your data to Facebook by clicking on the "Opt-Out" logout link displayed. Then the Facebook pixel is deactivated and no (more) data is exchanged with Facebook in this way.
Please note that deactivation only applies to the device and browser in which you activated the link. If you open our site from a different device or browser, you must click the unsubscribe link again.
When using the Facebook pixel, data is forwarded to Facebook Inc, 1601 Willow Road Menlo Park, CA 94025 USA. Your data will be processed by these companies in the USA as part of their use of the Facebook pixel.
A transmission to Facebook Inc. in the USA is permitted. Facebook Inc. is certified according to the requirements of the EU-US Privacy Shield. Details on the Privacy Shield can be found in Section IV No. 5 of this data protection declaration.
In addition, the Service may collect automatically saved data, such as the technical log of the server (e.g. the user's IP-address or session history), during the use of the Game.
The above-mentioned data is primarily obtained from the user's usage of Albion Online. Additionally, player account identification data may also be obtained from Sandbox Interactive GmbH or the Sandbox Interactive GmbH’ service providers such as Steam, GOG, and others (“Service Providers”). By using the Game or Service Providers, the user agrees to accept these disclosures.
The purpose of processing personal data is to provide solutions against cheating and fraud in Albion Online. In practice this means information is gathered of the Players interacting in the Game and the gathered information is exchanged between Easy Anti-Cheat and Sandbox Interactive GmbH.
Easy Anti-Cheat uses the personal data of users for the following purposes.
Other equivalent purposes of use.
General profile data and aggregated statistical data about users are stored for the entire duration of the legitimate interest of the Customer and the service agreement between Easy Anti-Cheat and Sandbox Interactive GmbH for Albion Online.
Other personal data are processed in real-time and stored for a duration of maximum 5 days. If the data is suspected to indicate misuse in the Game, the relevant data samples are stored for at most 3 months. If the data is determined to indicate misuse in the Game, the data remains stored until no longer necessary for the purposes provided herein.
The processing of users' personal data will include automated decision-making. The method by which Easy Anti-Cheat processes the data allows observation of whether particular personal data suggests anomalies and may indicate misuse of the Game.
If the user is deemed to have misused Albion Online based on automated decision-making, they will be flagged and it is up to Sandbox Interactive GmbH to determine what consequences are implemented for the identified misuse of the Game. If Sandbox Interactive GmbH decides to sanction a user based on the information Easy Anti-Cheat has provided, the user will have the opportunity to appeal the automated decision by contacting Easy Anti-Cheat’s helpdesk at www.easy.ac/contact/, at which point an expert will review the data and assess the decision.
The recipient of the data is Easy Anti-Cheat Oy, Tammasaarenkatu 3, FI-00180 Helsinki, Finland.
Users can be assured that the transfer of information is always executed in a legal and professional manner. Easy Anti-Cheat observes all valid EU data protection safeguards, such as the EU Model Clauses, within their company when transferring the user's personal data.
Our website uses Google Universal Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Universal Analytics uses "cookies", which are text files placed on users' computers, to help the website analyze how users use the site. The information generated by the cookie about the use of the website by users is generally transferred to a Google server in the USA and stored there. IP anonymization has been activated on this website so that the IP addresses of users of Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area are previously shortened. In some cases, the full IP address is transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website by the users, to compile reports on the website activities and to provide the website operator with further services associated with the use of the website and the Internet. The IP address transmitted by your browser in the context of Google Universal Analytics is not merged with other Google data.
There won't be data transferred to Google Universal Analytics anymore.
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For the cases in which personal data is transferred to the USA, a transfer to Google Inc. in the USA is permitted. The company has been certified according to the requirements of the EU-US Privacy Shield. Details on the Privacy Shield can be found in Section IV No. 5 of this data protection declaration.

References: Art. 28
 Art. 44
 Art 25
 Art. 45
 Art. 28
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 28
 Art. 6
 Art. 28
 Art. 44
 Art. 25
 Art. 45
 Art. 28
 Art. 28
 Art. 28
 Art. 6
 Art. 28
 Art. 28
 Art. 6