Last Update: Nov 26, 2021
1. Introduction
2. Definitions
3. Who is the Data Controller
4. Age Restriction
5. Information We Collect and How
6. Purpose of Processing Personal Data
7. Legal Basis for Processing Personal Data
8. Retention Period
9. The Security of Your Personal Data
10. Information We Share - Data Transfer
11. Cookies
12. Your Rights
13. Do not track signals
14. Contact Us
15. National Data Protection Authority in Cyprus
16. Links to other Websites
17. Changes to the Privacy Policy
1.1 This Privacy Policy applies to our online browser game (hereinafter the “Game”) available through the following means:
a. our website cedar.games (hereinafter the “Site”);
b. our mobile application of the Game (hereinafter the “Mobile Application”);
c. our downloadable clients of the game: Desktop client and Steam™ client (hereinafter the “Game client”);
d. our game in Facebook™ App center (hereinafter the “Facebook™ App”);
and any other Services related to the game offered by D.G.CEDARTREE PROJECT LTD (HE369096 Republic of Cyprus) established at: Chr.Chatzipavlou 195-197 2nd floor, Office 23, 3036 Limassol, Cyprus (hereinafter the “Company” and/ or “we” “our”, “us”) and regulates how we collect, use, process and treat your personal information when searching information about the game or registering, creating an account and playing the game.
1.2 This Privacy Policy (together with our Terms of Service and any other documents referred to in it) is made to provide clarity about the types of information we collect about you and how we use it to provide a better gaming experience, in which cases we will share it with third parties, as well as the rights you have concerning your personal data. By accepting our Privacy Policy and Terms of Service you consent to our collection, storage, use and disclosure of your personal information as described in this Privacy Policy. This Policy fully respects the entire legal framework and especially the EU 679/2016 Regulation “on the protection of natural persons with regard to the processing of personal data and on the free movement of such data”.
1.3 An overall principle is that we do not collect more information than is reasonably necessary to provide you with the best user experience.
For the purposes of this Policy:
a. “personal data” means data that relates to you as an identified or identifiable natural person.
b. “data subject” (or User) is any living individual who is using our Service and is the subject of Personal Data.
c. “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
d. “data controller” means the natural or legal person, public authority, agency or other body which determines the purposes and means of the processing of personal data;
e. “data processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.
f. “usage data” is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
g. “cookies” are small pieces of data stored on your device (computer or mobile device).
h. GDPR is the EU General Data Protection Regulation 2016/679.
For the purposes of the relevant data protection legislation, the data controller is the legal person “D.G.CedarTree Project LTD”, a Cyprus company, having its registered office Chr.Chatzipavlou 195-197 2nd floor, Office 23, 3036 Limassol, Cyprus, phone +357 96 999 225, e-mail: [email protected]
As explicitly referred to the Terms of Service, registering in the Game and creating an account is not permitted to persons that have not reached the age of 12, over which is allowed to enter into binding agreement with us. If you are under the age of 12, please do not register in the game. By reading and accept the Terms of Service and the present Privacy Policy you confirm that you are aged 12 years or over.
We do not knowingly collect personal information about persons under the age of 12 in cases where we can control it. For example, it is not possible to control information that is communicated to us online. In any event, if we find that we have collected any personal information from a person under the age of 12 (in accordance with Article 8 of the Regulation), we will delete the information from our records immediately and we will terminate the account (if any). If you believe we may have collected information from a person under the age of 12, please contact us.
5.1 We collect information about you directly from you, automatically through your use of our Service and from third parties. We may combine the information that we collect about you from these various sources.
5.2 Information you give us directly / Personal Data: When you are using the Game or by corresponding with us by email or otherwise, you may give us information about you. This includes but not limited to information you provide when you register to use the Game, subscribe to our Service, or when you report a problem with our Game. The information you give us may include:
a. Your email address;
b. Your first and last names and/or username and user ID;
c. Your date of birth;
d. Your gender;
e. Your location and time-zone;
f. Your address;
g. Desired payment method, amounts, payment terms, name and surname, place, telephone, e-mail during payment, full credit card details/ IBAN, data of depositor if defers from the payee;
h. Interface display language;
i. You in-game chat messages and history;
j. History of all your actions in the Game and or any blocking;
k. History of your purchase of Virtual Goods;
l. Your messages sent to our Support and history of all inquiries;
m. Details from your Facebook™ account which either you or Facebook™ are willing to share with us, including but not limited to: your name, your age and gender, list of friends, location, etc. We might use this information for the same purposes as described in this privacy policy, including advertising some services to you.
n. We may also collect certain data (like IP address, username, time of entry and re-entries etc.) that is required for our detection, investigation and prevention of cheating in the Game and EULA violations. These data are used for the purposes of detection, investigation and prevention of frauds and cheating in the Game. If the data can be used to prove that cheating or another fraud or EULA violation has occurred, we will further store the data for the establishment, exercise or defense of legal claims during the applicable statute of limitations. Please note that the specific data stored for this purpose may not be disclosed to you or any third parties, since the disclosure will compromise the mechanism through which we detect, investigate and prevent frauds and cheating in the Game, as well as other EULA violations. In such cases we might also need to pass your information to fraud prevention agencies, or any other related organizations involved in crime and fraud prevention, such as the police.
o. We might use your data for the purposes of, in case you are living in EU, including it in the VAT invoices where we are legally required to do so.
5.3 Information we collect about you automatically through your use of the service/ Usage Data: We collect information that comes from you while you are playing our games, interacting with the application / website and other Services.
Such information includes but not limited to what device you are using, the way you play the game and your levels, profile visits and the information that you provide us with directly. Additionally, information we collect via cookies. For more information, please refer to the proper section of this policy and to our Cookies Policy here.
5.4 Information we receive from other sources: If you use any of the other services we provide, we may receive information about you from them. Furthermore, we may receive information about you from third parties with whom we are working closely including but not limited Facebook, business partners, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies).
We only use personal information collected through any of the Sites, Game and Services for the purposes described in the Terms and below in this Privacy Policy. For example, we may process your personal information:
a. To respond to your submissions, questions, comments, requests and complaints and provide customer support;
b. To monitor and analyze usage of the Game and trends in order to personalize and improve the Game and experience of our users while using any of the Sites, Game or Services;
c. To provide relevant content, ads and features that matches your or other people preferences;
d. To increase functionality and general quality of the Game;
e. To send you confirmations, updates, security alerts and support/administrative messages;
f. For marketing campaigns purposes, including (without limitation) email marketing campaigns;
g. To provide competitions;
h. To prevent cheating, fraud and crime and to verify your compliance with our terms and conditions and our policies;
i. To meet legal and tax obligations and to carry out financial, regulatory and management reporting, and audit and record keeping;
j. To provide and maintain our Service;
k. To notify you about changes to our Service;
l. To allow you to participate on interactive features of our Services when you choose to do so;
m. To gather analysis or valuable information so that we can improve our Service;
n. To detect, prevent and address technical issues;
o. For any other purposes, which we believe are necessary and for which the information is collected;
p. To protect our property rights and to enforce our legal rights.
According to Article 6.1 of the GDPR, we rely on the following legal bases for the collection and use of your personal information:
a) You have given your consent to the processing of your personal data for one or more specific reasons. We may sometimes ask your consent to collect other information from you or your device. In such instances, we will inform you about the information we would like to collect, the reason we need it and what we will use it for. You have the right to withdraw consent at any time.
b) Processing is necessary in order to enter into or perform a contract with you. For example, we may need to use your information in order to provide you with the information, products and services that you request from us or information about goods and services we feel may interest you, to notify you of changes to our Service etc.
c) Processing is necessary for compliance with legal obligations we are subject to. For example, to prevent fraud or potentially illegal activities and, to take action against fraudulent or misbehaving players, or to keep our Service and its features safe, we may use your data.
d) Processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests, rights or freedoms, such as for the purposes of data analysis, testing, research and surveying, as well as for the purposes of marketing and promotion of our products.
We store personal data for as long as required by the respective processing purpose and any other lawful linked purpose.
Personal data that are collected under the legal basis of ‘Legal Obligations’, are maintained after the expiry of the legal obligations as long as the relevant institutional framework permits.
Data that may be necessary for our legitimate interests as the controller are kept until the reason for such storage has expired.
Personal data of expression of interest through a query or a complaint are kept no longer than 6 months after the query or the complaint is answered and permanently settled.
Players’ personal data are kept for 5 years since the last day of active participation in the game. We will delete your Personal Data after you request your Account deletion and the grace period of 45 (forty - five) calendar days, during which we can restore your Account, expires.
Cookies are kept for no longer than two years.
Specifically for personal data we process based on your consent (e.g. for marketing purposes), such data are kept from obtaining your consent and until it is revoked.
Personal data that are no longer necessary are safely destroyed or anonymized.
We have implemented reasonable and appropriate organisational and technical measures to protect the personal data and the entire information we collect from security risks.
We do follow the rules of Regulation (EU) 2016/679 (General Data Protection Regulation) on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the generally accepted industry standards to protect the personal information submitted, both during transmission and once we receive it. Therefore, while our goal is to use commercially acceptable ways to protect your personal information, we cannot guarantee it is absolutely secure, since no method of data transmission over the Internet, or method of electronic storage is 100% secure. Please note that information that you voluntarily make public, or which you disclose by posting comments or inserting of the Content will be publicly available and viewable by others. We do not hold any liability for any information that you voluntarily choose to make public through such and/or other explicit actions.
For the performance of a contract with you, compliance with a legal obligation we are subject to, and based on our legitimate interests, we may share or disclose your personal data with the following categories of third parties:
a) business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you;
b) third party companies that perform services on our behalf, including payment processing, data analysis, marketing services, email campaigns, hosting services, and customer service. While providing the services for us, these companies may access your personal information, and are required to use it solely as directed by us for the purpose of our requested service;
c) advertisers and advertising networks that require the data to select and serve relevant advertisements to you and others. We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users (for example, we may inform them that 200 women aged between 40-50 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target. We may make use of the personal data we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience;
d) Player Support partners: for some territories and products we engage third parties to provide you with appropriate player support services. Such companies may get access to your personal data, including personal data that you may provide in your player support requests.
We may disclose your information when you give us your consent to do so, including if we notify you on the Game that the information you provide will be shared/disclosed in a particular manner and you provide such information.
Some personal data of yours may be disclosed to public authorities, e.g., tax and customs authorities, auditors, or to any supervisory or persecutory authority within its role or any judicial authority where required by law or judicial decision, after their request, in accordance with Union or Member State law.
Your information (including personal data) can only be accessed (with limited access rights to the absolutely necessary) by our authorized employees or consultants or the concerned group entities that need to have access to this data in order to be able to fulfil their given duties. In order to help ensure a secure of your data, we are developing and implementing administrative, technical and physical security measures to protect your data from unauthorized access or against accidental or unlawful loss, misuse or alteration.
We are working with third parties that are based outside of the European Economic Area (EEA), and may transfer data about you to the countries in which these parties reside. Whenever we share personal data originating in the EU with an entity outside of the EEA, we guarantee an adequate level of personal data protection and we will do so on the basis of the EU standard contractual clauses, with your consent, or because such transfer is necessary performance of a contract.
Some of the information you provide to us are stored on our secure servers, based in the European Economic Area (“EEA”), in the United States of America, in Russia, Korea and Singapore.
By submitting your personal data, you agree to this transfer, storing or processing.
In order to make your visits to our Sites as pleasant as possible, we use cookies and web beacons (collectively, “Data Collection Tools”) when you access or use our Service. These Data Collection Tools automatically track and collect certain technical information that your browser sends to us. This information might include Internet protocol (IP) addresses, the browser type, browser language, time zone setting, Internet service providers (ISP), referring/exit pages, URLs, operating systems, date/time stamps, clickstream data and other similar information. However, this information doesn't identify individual users and we use it exclusively to analyze trends, to administer the site, to help authenticate you when you are on the Websites, to remember your preferences and registration information, as applicable, to track user movements around the site as a whole to improve the services provided.
Your Internet browser can be set to reject cookies generally. Note that we recommend you to allow all cookies from our Sites, otherwise some of our Services may work incorrectly and some features may become unavailable.
For further information please refer to our Cookies Policy here.
Under the General Data Protection Regulation, you have certain data protection rights when it comes to having access to your personal data, which you can exercise by contacting us at the email address provided below.
These rights are the following:
a) Right to be informed. Before data is collected, you have the right to know how it will be collected, processed and stored and for what purposes. This right is exercised through this privacy and data processing notification.
b) Right of access. You have a right to inquire and know what information we hold about you how and why we use your information, to whom we disclose your information, and request a copy of the information we hold about you. In order to exercise this right, you should contact us at [email protected] and to identify which information would you like to receive. We shall get back to you in the fullest extent possible, however please note, that we might need to verify your identity before sharing the information with you, as well as that we might not be able to provide you with certain types of information if it is related to other users information Please note that we may not be able to provide all the information you ask for, for instance if the information includes personal information about another person. Where we are not able to provide you with information that you have asked for, we will endeavor to tell you why.
c) Right to correction/ Rectification. We put our best effort to keep the information that we hold about you accurate and up to date. Since it is not possible for us to be aware of any changes to your personal data if you do not inform us, please help us keep your information accurate by informing us of any changes to your personal information we do process. In case you have reasons to believe that the information we hold is incomplete or inaccurate, please inform us at [email protected] and we will act accordingly.
d) Right to erasure / Right to be forgotten. We have to answer such right when:
• your personal data are no longer necessary in relation to the purposes for which we collected it
• withdraw your consent on which the processing is based and where there is no other legal basis for the processing
• your personal data have been unlawfully processed
• have to be erased for compliance with a legal obligation we are subject to
We reserve the right to refuse this right of immediate implementation if the processing is necessary for compliance with any legal obligation we are subject to, or for reasons of public interest, or for the foundation and exercise or support of our legal claims (according Article 17 § 3 of the Regulation).
In case you want to exercise such a right, please let us know via e-mail at [email protected]. Be informed, that in order for us to process your request and to prevent us from collecting any future information about you, you should delete the game application from your devices and terminate your account with us and clear your cookies from any device where you have played our Games in a web browser.
e) Right to restriction of processing of your personal data. You may have the right to request to block or suppress processing of your personal data, when certain conditions apply. If you would like to exercise this right, please contact us at [email protected].
f) Right to data portability. In some circumstances, you have the right to request from us to move, copy or transfer to you, in a safe and secure way, in a commonly used and machine- readable format, the data which you have provided to us, in order to transfer it to another data controller. Whenever technically possible, this also includes the right to have the data transferred directly from us to another controller without you having to handle the data. If you would like to exercise this right, please contact us at [email protected].
g) Right to object to processing / right to withdraw consent. You have the right to object to the processing of your personal data for specific reasons such as direct marketing purposes, purposes of historical/ scientific research or for the performance of a task in the public interest. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. After your request, we shall no longer process your personal data unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms. If you would like to exercise this right, please contact us at [email protected].
h) Rights related to automated decision-making including profiling. We do not carry out any decision-making based solely on automated processing, including profiling unless we have your consent, or we need to do so to perform a contract with you.
Additionally, you have the right to opt-out of direct marketing. Specifically, if you have elected to receive direct marketing communications from us, you can change your mind at any time by following the opt out link in any marketing communication that is sent to you. If you have elected to receive more than one type of marketing communications from us, you may need to opt out of all of them individually. It may take a few days for us to update our records before any opt out is effective.
In the event that you make such request in a written or electronic form regarding any of the above rights and provided that the request is coming from the data owner and this may be verified, we will assess your request and respond within one month of its receipt, either for its satisfaction or to provide you with objective reasons preventing it from being satisfied, or, given the complexity of the request and the number of requests at the given time, request an extension of response for a further two months period (Article 12.3).
The exercise of your rights is free of charge.
Furthermore, you have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority.
If you are dissatisfied with the use of your data by us, or our response after exercising your rights, you have the right to lodge a complaint with a supervisory authority. Before such complaint, you may contact us if you wise so we can provide you with complete information and support.
We do not support Do Not Track ("DNT"). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.
You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
For any questions regarding the processing of your personal data and the exercise of your rights mentioned above, you may contact us by telephone at +357 96 999 225 (working hours 09:00 - 17:00 Cyprus time zone), by e-mail at [email protected] and by post at: Chr.Chatzipavlou 195-197 2nd floor, Office 23, 3036 Limassol, Cyprus.
In our webpage https://cedar.games you may find a more extensive description of our Policy.
If you wish to contact with the Supervisory Authority in the country of our establishment, the contact details are: Jason 1 str., 1082 Nicosia, CYPRUS, telephone +35722818456, e-mail: [email protected].
Our Website may contain links to other websites that are not operated or controlled by us. If you click on a third-party link, you will be directed to that third-party site. We recommend you review the Privacy Policy in each site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Due to the services constantly evolving, this Policy might change from time to time, therefore we advise you to check for the latest versions which will always be published on our website.
Any information we collect is subject to this Privacy Policy in effect at the time such information is collected. We may, however, modify and revise our privacy policy. If we make changes in the way we use personal information, we will give you a reasonable notice. You are bound by any changes to the Policy when you use the Service after such changes have been first posted. We strongly advise you to visit this page and read this Privacy Policy every time you access any of the Sites, Game or Services. If you object to any change, your sole recourse shall be to immediately terminate your account and cease using the Service.