Data Privacy Information – KrakenBay.pl

Name and address of the data controller

As the data controller for data processing, we:
KrakenBay.pl
 Sachsenstraße 20
 20097 Hamburg
 Germany
Email: info@krakenbay.pl (no support)
implement all the technical and organisational measures to ensure the protection of your data.

Name and address of the data protection officer

Data protection agency:
Maximilian Hartung
 Frauentorstraße 9
 86152 Augsburg
 Germany
Tel.: +49 821 90786450
 privacy@krakenbay.pl

General

This Data Privacy Information informs you of which personal data is collected by KrakenBay.pl in the context of our websites, our apps and the games and other services provided by us (jointly referred to as the “Online Offer”). It also explains how such data is processed and used. The protection of your personal information is important to us.
Your data is protected against unauthorised access and loss through the use of various electronic, technical, physical, administrative and contractual measures. KrakenBay.pl has taken the necessary technical and organisational precautions to ensure that the regulations for data privacy are respected both internally and by external service providers.
This Data Privacy Information contains transparent and clear information to ensure that visitors to our site and customers are well informed regarding the collection, processing and use of their personal data.

What is personal data?

Personal data is any information relating to an identified or identifiable natural person (e.g. name, address, telephone number, date of birth or email address).

Legal basis – protection of vital interests

Art. 6, para 1, lit. d GDPR serves as the legal basis should the vital interests of the data subject or another natural person require the processing of personal data.

What data do we collect?

Usage data that is automatically collected

When you use our websites, forums and games, usage data is automatically transmitted by your device and stored in log files.
Collected when visiting a website:
  • IP address

  • Date, time, duration, frequency of use

  • Names of the websites used

  • Volume of data transferred

  • Operating system and browser (name/version)

  • Referrer URL

  • Access status (success, file not found, etc.)

Collected when opening an app:
  • IP address

  • Date, time, duration, frequency of use

  • Device type, resolution, screen size, pixel density

  • Store ID

  • Volume of data transferred

  • Operating system, app name/version

  • Access status

Contact requests

If you contact us via the contact form, support or email, the following may be processed: name, postal address, email, user ID, IP address (if via form), date, time and content of your message.

Game forums

If you use forums, the following is processed: username, email address, password, registration date, profile picture (optional) and forum posts.

Newsletters

If you subscribe, we process your email, user ID and information regarding opening/clicking newsletters (including IP address).

Use of our game offers

When you play, we process: login data (username, user ID, password), game progress, statistics, usage data, chat/communication, and, where applicable, payment data (credit card, PayPal, bank details).
If you played before under our predecessor company (KrakenBay S.à.r.l. & Co, SCS, Luxembourg), we continue to use required inventory data (scores, purchases, billing) to provide uninterrupted service.

Purposes of data use and legal bases

  • Usage data: ensure functionality, security, fraud prevention, analytics. Legal basis: Art. 6(1)(f) GDPR.

  • Contact requests: response to enquiries. Legal basis: Art. 6(1)(f) GDPR.

  • Forums: contract performance (Art. 6(1)(b) GDPR) + legitimate interest (Art. 6(1)(f) GDPR).

  • Newsletters: consent (Art. 6(1)(a) GDPR) + legitimate interest (Art. 6(1)(f) GDPR).

  • Games: contract performance (Art. 6(1)(b) GDPR), legitimate interest in fraud prevention, improvement, marketing (Art. 6(1)(f) GDPR).

  • Legal obligations: Art. 6(1)(c) GDPR.

  • Crime prevention: Art. 6(1)(f) GDPR.

Cookies

We and our partners use cookies and similar technologies for website functionality, improving user experience and personalised ads.
  • Session cookies (deleted after session).

  • Persistent cookies (stored longer).

Legal basis: consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).
You can revoke consent at any time via our cookie manager or disable cookies in browser settings. Note: some features may not work without cookies.

Data transfer and service providers

We treat your data confidentially. Disclosure occurs only:
  • If legally required (e.g. law enforcement).

  • To service providers (e.g. PayPal, Global Collect).

  • To debt collection agencies in case of payment default.

  • To cloud systems (Alibaba Cloud – Alicloud, EU servers; North American users – US servers).

  • To affiliated companies of the KrakenBay.pl Group for marketing/game development.

All partners are contractually bound by GDPR rules.

Storage/retention

  • Data stored only as long as necessary.

  • Legal/tax data stored per statutory rules.

  • IPs/log files: up to 6 months (longer if fraud suspected).

  • Blocked data retained until retention period expires.

Game info & partner offers

If you check the box for “Game information and partner offers”, you consent to receive such info. Consent can be withdrawn anytime via support: www.krakenbay.pl/support/.

Surveys

We use LimeSurvey GmbH for satisfaction surveys, with servers hosted at Host Europe GmbH (Germany). Legal basis: consent (Art. 6(1)(a) GDPR).

Google Analytics

We use Google Analytics (Google LLC, USA) with IP anonymisation. Legal basis: consent (Art. 6(1)(a) GDPR).
Opt-out via:

Social media links

Our website includes links (not plugins) to Facebook. Data is transmitted only when you click the link.
For Facebook Connect, if you register via Facebook, data like name, email, birth date may be transferred to us. Used only for identification and contract purposes.

Mobile apps

Distributed via Apple App Store, Google Play, or social networks. These platforms may collect personal data independently.

IT Security

With an IT security provider, we collect device-specific data and anonymised IPs for fraud prevention. If abuse is detected, data may be transmitted to the provider.

User rights

You have GDPR rights:
  • Withdraw consent

  • Access data

  • Rectification

  • Deletion

  • Restriction of processing

  • Data portability

  • Objection

Contact: see controller/DP officer above.

Complaints

Supervisory authority:
Hamburg Commissioner for Data Protection and Freedom of Information
 Klosterwall 6 (Block C), 20095 Hamburg
 Tel.: 040 / 428 54 – 4040
 Fax: 040 / 428 54 – 4000
 Email: mailbox@datenschutz.hamburg.de

Security provisions

Our staff is trained, IT updated, and data secured with modern measures. However, Internet use always carries risks; alternative contact (e.g. fax) is possible.

Changes

We may update this Data Privacy Information. Users will be notified if cooperation/consent is required.