PRIVACY AND DATA POLICY

ISSUED BY BOSSA STUDIOS LIMITED

Last Updated: 12 September 2019.

  1. INTRODUCTION AND GENERAL TERMS

    These terms apply to the use of games and other products and services referred to herein and developed and/or published by Bossa Studios Limited (“Bossa” / “we” / “us”). Our registered office is at Zetland House, Unit E 2nd Floor, 5-25 Scrutton Street, London, EC2A 4HJ, United Kingdom.

    We are a company registered in England and Wales, with company number 07375707.

    This privacy and data policy (“Privacy Policy”) applies and has effect in respect of our game “Hogwash” available on Apple Arcade referred to herein as the “Game”.

    If you have any questions or comments about this Privacy Policy, please contact us at [email protected]

    We are committed to protecting and respecting your privacy. This Privacy Policy explains the basis on which personal data we collect from you will be processed by us or on our behalf. Where we decide the purpose or means for which personal data you supply through the Game is processed, we are the “controller” for the purposes of the General Data Protection Regulation 2016/679 and the UK Data Protection Act 2018.

    You have the right to object to the processing of your personal data in certain circumstances. Information on your right to object, and your other rights, is set out below.

    Please read this Privacy Policy carefully as it contains important information about the following:

    • What information we may collect about you;
    • How we will use information we collect about you;
    • Whether we will disclose your details to anyone else; and
    • Your choices and rights regarding the personal data you have provided to us.

    This Privacy Policy should be read in conjunction with such Terms of Use as may be applicable in respect of the Game. Where Terms of Use are applicable, they will be made available via the Game.

    We do not accept any responsibility or liability for the privacy practices of third party services and your use of these is at your own risk.

    We may make changes to this Privacy Policy in the future, which will be made available here. You should check here from time to time to ensure you are aware of any changes. Where appropriate, we may notify you of changes by email or through the Game.

  2. INFORMATION WE MAY COLLECT ABOUT YOU

    The Game collects information about your progression through and achievements in the Game (“Game Progress”). This Game Progress information is not stored by us and is stored on Apple services such as iCloud using the Apple Team Player ID for game saves and progress and Game Center for achievements. We do not store personal or gameplay data on our servers and its use is governed by Apple’s policies.

    We may collect and process the following personal data from you (together, “Your Information”):

    Information that may be provided by you when you contact us for support

    • Your name; and
    • Your address, telephone number and email address.
  3. WHY WE COLLECT INFORMATION ABOUT YOU

    To respond to your enquiries and requests for support

    We may process Your Information so that we are able to properly respond to your enquiries and support requests, in accordance with the Terms of Use as may be agreed between us.

    For the above purposes, we rely upon the legal basis of performance of a contract and our legitimate interests, being our commercial interests to respond to your queries and requests for support and to maintain good commercial practice in customer service.

    To help us to fix any Game problems

    We may process information about you (being Your Information or any part thereof) so that we can fix Game problems, bugs and defects (for example, if you report a bug to us within your support request).

    This processing is necessary for us to pursue our legitimate interests, being our commercial interests of:

    1. ensuring that our Game functions properly so that you and other users have the best experience when, for example, playing the Game;
    2. improving the quality of our Game, and providing a better experience to our users; and
    3. identifying and correcting any bugs or problems with the Game.
  4. DATA SHARING

    We will share your information with third parties only in the ways that are described in this Privacy Policy

    Group members, personnel, suppliers or subcontractors: We keep your information confidential, but may disclose it to any member of our group (which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006), our personnel, suppliers or subcontractors insofar as it is reasonably necessary for the purposes set out in this Privacy Policy. However, this is on the basis that they do not make independent use of the information, and have agreed to safeguard it.

    Merger or acquisition: If we are involved in a merger, acquisition, transfer or sale of all or a portion of our assets, you will be notified (for example, via email, account message and/or a prominent notice on our website) of any change in ownership or uses of this information, as well as any choices you may have regarding this information.

    Required by law: We may disclose your information to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).

    Enforcement: We may also disclose your personal data to third parties (e.g. mobile network operators, gaming platform operators, game console manufacturers or networks) in order to enforce or apply the terms of agreements, to investigate potential breaches or to protect our rights, property or safety, or those of our customers or others.

  5. YOUR RIGHTS IN RELATION TO PERSONAL DATA WHICH WE PROCESS RELATING TO YOU

    You have the following rights over the way we process personal data relating to you, as set out in the table below. We aim to comply with requests without undue delay and within one month at the latest.

    To make a request, please let us know by email to [email protected]

    Ask for a copy of data we are processing about you and have inaccuracies corrected

    You have the right to request a copy of the personal data we hold about you and to have any inaccuracies corrected.

    We will use reasonable efforts, to the extent required by law, to supply, correct or delete personal data held about you on our files (and with any third parties to whom it has been disclosed to).

    Objecting to us processing data about you

    You can ask us to restrict, stop processing or delete your personal data if:

    • you consented to our processing the personal data and have withdrawn that consent;
    • we no longer need to process that personal data for the reason it was collected;
    • we are processing that personal data because it is in the public interest or it is in order to pursue a legitimate interest, you don’t agree with that processing and there is no overriding legitimate interest for us to continue processing it;
    • the personal data was unlawfully processed;
    • you need the personal data to be deleted in order to comply with legal obligations; and/or
    • the personal data is processed in relation to the offer of a service to a child.

    Obtain a machine-readable copy of your personal data, which you can use with another service provider

    • If (i) we are processing data in order to perform our obligations to you or because you consented and (ii) that processing is carried out by automated means, we will help you to move, copy or transfer your personal data to other IT systems.
    • If you request, we will supply you with the relevant personal data in CSV format.  Where it is technically feasible, you can ask us to send this information directly to another IT system provider if you prefer.

    Make a complaint to a Supervisory Authority

    • If you are unhappy with the way we are processing your personal data, please let us know by contacting us via the support services.
    • If you do not agree with the way we have processed your data or responded to your concerns, an alternative is to submit a complaint to a Data Protection Supervisory Authority. Information and contact details for the Information Commissioner’s Office, the UK’s Supervisory Authority, is available here: https://ico.org.uk/.
  6. DATA RETENTION

    In accordance with data protection laws and good commercial practice, we do not retain data in a form that permits identification of the person to whom it relates for longer than 180 days following the relevant matter having been addressed and/or following inactivity (where applicable).
  7. CHILDREN

    The Game collects, uses, and discloses non-personally identifiable data from underage users in the same way as for other users, as described in this policy. The Game’s use of this data is limited to support internal operations of the Game. If you wish for this information to be deleted please contact at [email protected]

  8. SECURITY

    Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through our Game; any transmission is at your own risk

  9. INTERNATIONAL DATA TRANSFERS

    The data we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff that operate outside the EEA and work for us or our suppliers. These staff may be engaged in the fulfilment of your orders, the processing of your payment details, the maintenance of the Service, and the provision of support services. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

    Where your personal data is transferred outside of the EEA to a territory not subject to an adequacy decision by the European Commission, we have agreements in place with the relevant parties which include either (i) standard data protection clauses adopted by the relevant data protection regulator and approved by the European Commission or (ii) standard data protection clauses adopted by the European Commission, to ensure that appropriate safeguards are used to protect your personal data. Alternatively, we may put in place other appropriate safeguards. If you require more information about these safeguards, you can contact us at [email protected].

  10. CONTACT INFORMATION

    All questions, comments or enquiries should be directed to [email protected].  We will endeavor to respond to any query or questions within 5 business days.

    © 2019 BOSSA STUDIOS LTD. All trade marks are the property of the relevant owners. All rights reserved.