Source: http://www.doradogames.com/privacy-policy
Timestamp: 2019-04-18 22:52:50+00:00

Document:
in various ways, such as our website (“website”) and via mobile applications (“mobile apps” or “apps”) (all together “services”), electronic games. With this data protection policy, we would like to provide you with information on which personal data we collect and process. Furthermore, we would like to inform you about your rights. The responsibility to protect and process personal data is an important concern to Dorado Games. Your data is protected against unauthorized access as well as loss using various technical and contractual measures. Dorado Games has taken the necessary technical and organizational measures for this purpose. If links lead to third-party websites, please note that these companies provide their own data protection statements that apply accordingly. We offer our services only to persons who are at least 16 years old. We therefore do not knowingly collect and process data from persons younger than 16 years old.
We may collect and process data in order to enable you to use our services. This also includes processing for the purpose of data security and the stability and operational security of our system as well as accounting purposes.
We and our service partners process data in order to provide you newsletter services should you decide to use it.
We process the data gathered from you in accordance with Maltese and European data protection laws. All employees are bound to data secrecy and data protection regulations and trained accordingly. For payment processes, your data is transmitted in an encrypted form using the SSL method.
Whenever our services are solicited, our system automatically collects data and information on the visiting computer system.
Temporary storage of the IP address by the system is necessary in order to deliver services to the computer of the user.
To do so, the IP address of the user must be stored for the duration of the session.
Data is stored in log files in order to ensure the functionality of the services.
Additionally, the data also serves to optimize the services and to ensure the security of our IT systems.
Data is stored over the duration of the session for purposes of combating fraud (e.g. payment fraud, violation of the rules of play through the use of multiple accounts by the same person) and for the purposes of IT security (e.g. protection against DDoS attacks).
Otherwise, the data is stored merely for purposes of statistical evaluation.
In order to monitor compliance with the rules of use and rules of play, we reserve the right to store IP addresses and log files for a certain period of time after our services are utilized.
In particular, this procedure serves to avoid certain cases of misuse or to resolve them and be able to forward the data in individual cases to investigative authorities or to rectify bugs. Additionally, any evaluation of data is carried out in an anonymous manner wherever possible.
After this period ends, the IP address and log files are completely erased, unless there exist mandatory statutory storage requirements or concrete criminal or abuse proceedings.
Data collection to provide services and data storage in log files is absolutely required in order to ensure the uninterrupted provision of services.
As a consequence, the user has no option to object.
We gather and process personal data of applicants for the purpose of handling the application process. The data is used to check your suitability for the position (or, as the case may be, other job openings in our company) and complete the application process. The processing may take place electronically as well. That is the case in particular if an applicant transmits their respective application documents to the head of department electronically, for example via e-mail or by using the online form that can be found on the website. Your applicant data will be sighted by the human resources department after receiving them. Suitable applications are then forwarded internally to the department heads in charge of the respective vacant position. Then the further procedure gets coordinated. As a matter of principal, in our company only those who need access to your data to ensure an orderly run of our application process will be granted it. If the person in charge of processing an application enters an employment contract with an applicant, the transmitted data, bearing in mind all legal provisions, will be saved for the purpose of handling the employment. If the person in charge of processing an application does not enter an employment contract with the applicant, the application documents will be deleted after announcing the rejection, unless the person in charge of processing the application holds other justified interests opposing deletion. Other justified interests in this sense are, for example, a burden of proof in a lawsuit under the General Equal Treatment Act. Legal basis for processing is Art. 6 para. 1 lit. b GDPR. Should the occasion arise that after completing the application process the data are required for prosecution, the data can be processed based on the requirements of Art. 6 GDPR, especially to appreciate justified interests pursuant to Art. 6 para. 1 lit. f) GDPR. Our interest in that case would be assertion of or defense against claims. We will delete data six months after a rejection unless you gave consent to a longer period of storing. Should your application be crowned by success in form of being offered a position, the data will be moved from the applicant data system over to our human resource management system.
You can request from the responsible party a confirmation of whether personal data that concerns you is processed by us.
You have the right to request information on whether the personal data concerning you is sent to a third country or an international organization.
In this context, you can request suitable guarantees pursuant to Art. 46 GDPR in connection with the transfer.
You have the right to rectify and/or completion, with respect to the responsible party, provided that the processed personal data concerning you is incorrect or incomplete.
The responsible party must make the rectification without delay.
If the processing of the personal data concerning you was limited, this data, except for its storage, may only be processed with your consent or to assert, exercise, or defend legal claims, or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a member state.
If processing was limited according to the above conditions, you will be informed by the responsible party before the limitation is applied.
We offer the option to independently delete or correct your own personal data in game.
If you are logged in to your account, you can delete your personal data in the settings of your user account.
If you have asserted the right to information on, erasure, or limitation of processing with respect to the responsible party, said party is required to share this rectification or erasure of the data or limitation of processing with all recipients to whom the personal data concerning you was published, unless this proves to be impossible or is associated with excessive cost.
You have the right to information on these recipients from the responsible party.
You have the right to receive the personal data concerning you, which you provided to the responsible party, in a structured, standard, and machine-readable format.
When exercising this right, you also have the right to ensure that the personal data concerning you is transferred directly from one responsible party to another responsible party, provided this is technically feasible.
The freedom and rights of others may not be affected by this.
You have the right, for reasons relating to your particular situation, to submit at any time objection to processing of the personal data concerning you which is conducted based on Art. 6 Para. 1 e or f GDPR; this also applies to profiling based on these conditions.
The responsible party no longer processes the personal data concerning you, unless said party can provide evidence of compelling reasons worthy of protection for the processing that prevail over your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If the personal data concerning you is processed in order to pursue direct advertising, you have the right to submit at any time objection to processing of the personal data concerning you for the purposes of such advertising; this also applies to profiling, provided it is in connection with direct advertising.
If you object to processing for the purpose of direct advertising, the personal data concerning you will no longer be processed for these purposes.
You have the right to withdraw your declaration of consent at any time.
The withdrawal of consent does not affect the legality of the processing conducted on the basis of the consent up to the date of the withdrawal.
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which will have legal effect or similarly affect you in a similar manner.
However, these decisions must not be based on special categories of personal data under Art. 9 Para. 1 GDPR, provided that Art. 9 Para. 2 a or g does not apply, and reasonable measures have been taken to protect your rights and freedoms and your legitimate interests.
With respect to the situations mentioned in (a) and (c), the responsible party shall take appropriate measures to protect your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible party to express his own position and challenge the decision.
Without prejudice to any other administrative or judicial legal remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence or employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is violates the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 6
 Art. 9
 Art. 9