Definitions

• User means any entity, organization, corporation or living natural person that uses the Services and/or interacts with CHARK Studio in any way.
• Data Processor means anyone who Processes Personal Data on behalf of a Data Controller.
• Data Controller means a legal entity, who alone or jointly with others, determines the purposes and means of the Processing of Personal Data.
• Data Protection Legislation means the applicable data protection legislation such as Regulation (EU) 2016/679 (General Data Protection Regulation; the “GDPR”) and any other applicable data protection legislation.
• EU/EEA means the European Union/European Economic Area.
• Personal Data means any information that, directly or indirectly, can identify a natural person.
• Processing means any operation or set of operations performed with regard to Personal Data, whether or not performed by automated means, such as collection, recording, organisation, storage, adaptation, alteration, retrieval, gathering, use, combination, blocking, erasure or destruction.
• Recipient means a natural or legal person, public authority or another body, to whom Personal Data may be disclosed to by CHARK Studio.
• Services means any of CHARK Studio’ services and/or games as well as communications provided on CHARK Studio’ websites and other electronic channels.

General

This Privacy Policy describes how MB “CHARK” as a Data Controller Processes User’s Personal Data on a general level. Specific information about further Processing can be found in separate agreements, websites or other documents related to CHARK Studio.

CHARK Studio may need to Process Personal Data in order to provide the Services to the Users, fulfil legal obligation or for the performance of agreements. If a User chooses not to provide or submit Personal Data in the Services, it may prevent CHARK Studio to fulfilling the abovementioned obligations. In some cases, Users may not be able to use and access the Services, such as multiplayer features of the games provided by CHARK Studio.

CHARK Studio ensures the confidentiality of Personal Data and has implemented appropriate technical and organizational measures to safeguard Personal Data from unauthorized access, unlawful disclosure, accidental loss, modification, destruction or any other unlawful Processing.

CHARK Studio may use approved Data Processors for Processing Personal Data. CHARK Studio ensures that Data Processors Process Personal Data under documented instructions of CHARK Studio which are in accordance with adequate and required security measures in accordance with Data Protection Legislation.

Personal Data Of Child

The Services are not directed or intended for children and CHARK Studio does not knowingly collect Personal Data from children under 18 years old in the Services. CHARK Studio prohibits submission of Personal Data by children, unless sent under the supervision of their parent or guardian. It is important to safeguard the privacy of children and CHARK Studio encourages parents to regularly monitor their children’s use of online activities. CHARK Studio will promptly delete Personal Data submitted by children unless legally obligated to retain such data.

CHARK Studio requests that any parents to children under the age of 18 that may have submitted Personal Data to make contact at [email protected].

Security

CHARK Studio has taken reasonable steps to ensure that Personal Data it collects is secure and reasonable measures are put in place to protect the confidentiality, security, and integrity of the Personal Data collected from our Users. Personal Data is stored in secure operating environments that are not available to the public and that are only accessible to authorized employees and contractors. CHARK Studio also has security measures in place to protect the loss, misuse, and alteration of the information under our control.

Please note that CHARK Studio may provide links to other games and websites that are operated and hosted by third parties who may have their own privacy policies. The Processing of Personal Data by third parties in other games and websites are governed by their own privacy policies, which may be substantially different from this Privacy Policy. Visitors to other games and websites are encouraged to review the privacy policies and information collection practices of those websites.

Any improper collection or misuse of User Created Content or information provided in the Game is a violation of the Terms of Use and should be reported to CHARK Studio at [email protected].

Collection of Personal Data and Categories of Data Subjects

CHARK Studio primarily collects from and Processes Personal Data of Users of the Services, such as players of the games provided by CHARK Studio. Personal Data may be collected from Users directly, by User’s submission of Personal Data and/or automatically from the use of the Services. CHARK Studio may also save electronic communications or otherwise document CHARK Studio’ interaction and communication with Users in various electronic channels. CHARK Studio also collects non-personal identifiable information, such as anonymous gameplay data and statistical information, derived from the Services, in order to improve the Services.

CHARK Studio also collects and Processes Personal Data from prospect customers, agents, legal representatives, corporate representatives, signatories, shareholders, contact persons, board members, job applicants and visitors of CHARK Studio’s offices.

CHARK Studio may also collect Personal Data from other sources, such as third-party sites or platforms, newspapers, blogs, instant messaging services in order to improve and provide the Services as well as a more personalized experience. CHARK Studio will in some cases ask for email addresses for sales and marketing purposes.

Categories of Personal Data

The main categories of Personal Data Processed by CHARK Studio include:

• Identification and contact information such as name, personal identification code/number, internet protocol (IP) address, online nickname, date of birth, address, telephone number, email address and country of residence.
• Communication information such as complaints/support matters in voice/written form, images and/or audio recordings, emails, messages and other communications such as social media.
• Electronic interaction information such as the type of browser that is used, the type of operating system that is used, the IP address or other unique identifier such as a device identifier of any computer(s) or device(s) that are used to access electronic channels.

Legal Basis and Purpose of Processing

Performance of Agreements

CHARK Studio Processes Personal Data to fulfil obligations in agreements with external parties. This Processing relates to the execution, documentation and administration of agreements entered into by CHARK Studio. Examples of purposes for Processing are to verify transactions with business partners, to perform play and beta tests and to provide the games as part of the Services.

Legal Obligations

CHARK Studio Processes Personal Data in order to fulfil legal obligations imposed by regulators. Examples of purposes for Processing are to identify Users in order to make sure that CHARK Studio does not collect Personal Data from children as well as to comply with book keeping obligations.

Legitimate Interest

CHARK Studio Processes Personal Data based on CHARK Studio’ legitimate interest. CHARK Studio has concluded this Processing necessary for the interest pursued by CHARK Studio, which outweighs the User’s interest in protection of the Personal Data. Examples of purposes for Processing are to improve the Services, to provide personalized offers and direct marketing and to organize competitions and campaigns.

Links to Third-Party Platforms

CHARK Studio may provide links to third-party platforms where Users can purchase games developed by CHARK Studio. These links are known as affiliate links, and CHARK Studio may be compensated when Users use these links to make a purchase. When you click on an affiliate link and make a purchase, the third-party platform may use cookies or other tracking technologies to track your purchases and ensure that CHARK Studio receives credit for the referral. These third-party platforms have their own privacy policies, and you are encouraged to review them to understand how Personal Data may be collected and used.

Recipients of Personal Data

Based on the legal bases and the purposes for Processing by CHARK Studio, CHARK Studio may share User’s Personal Data with Recipients to Process Personal Data as a Data Processor. CHARK Studio will only share necessary Personal Data for the purposes of the disclosure and never for the Recipient's own purposes. Further, CHARK Studio will only share Personal Data if the Recipients have ensured an adequate level of protection of the Personal Data in accordance with Data Protection Legislation. CHARK Studio may also share anonymous or aggregated information, or other data that is not considered Personal Data with third parties, for example, personas on leaderboards or to show trends about the use of CHARK Studio’ Services.

1. Third-party Agents/Contractors/Developers
2. Suppliers of IT and communications
   • Recipient name: MarkSign.eu
   • Personal Data: email address and name
3. Service, data and cloud storage
   • Recipient name: Meta, Unity
   • Personal Data: Player data, user ID, player progression and settings, logs
4. Marketing services
   • Recipient name: Mailgun
   • Personal Data: email address and name

Where applicable, the Recipient’s Processing of Personal Data will not be covered by this Privacy Policy. In such instances you must review such Recipients’ privacy policies.

Location of Processing

In some cases, CHARK Studio may transfer and share Personal Data to third parties (including service providers operating on behalf of CHARK Studio) which may be located in countries outside the EU/EEA which may not have the same level of data protection laws as those in the country where the User is located. Where Personal Data is transferred to a country outside the EU/EEA that is not subject to an adequacy Data Protection Legislation, the transfer will only occur if there are appropriate safeguards in place such as (i) an agreement with the EU Standard Contractual Clauses, code of conducts, certifications or other clauses compliant and in accordance with Data Protection Legislation, or (ii) the country outside EU/EEA has an adequate level of data protection as approved by the EU Commission.

Retention Period of Personal Data

CHARK Studio will not retain Personal Data longer than necessary for the purposes for the Processing carried out by CHARK Studio unless required by Data Protection Legislation. CHARK Studio may need to retain Personal Data in order to establish, exercise or defend a legal claim or to comply with applicable law, including accounting rules. Personal Data is deleted or anonymized by CHARK Studio as soon as it no longer serves the purpose it was collected and Processed for.

Data Subject’s Rights

Users have the following general rights as Data Subjects regarding the Processing of Personal Data carried out by CHARK Studio:

• Right to correction meaning the Users can request to correct the Personal Data if the Personal Data is incorrect, incomplete or inadequate.
• Right to objection meaning Users can object to the Processing for certain purposes, such as direct marketing.
• Right to erasure meaning Users can require the Personal Data to be deleted.
• Right to restriction meaning the User can restrict the Processing, for example when the amount of Personal Data necessary for Processing is contested by the User.
• Right to information and access meaning the Users can receive information if their Personal Data is Processed and gain access to their Personal Data.
• Right to receive a copy of the Personal Data meaning the Users can request to receive their Personal Data that is Processed, provided that the Processing is based on Performance of agreement or consent. The Personal Data will be received in written or commonly used electronic format. If technically feasible, the User may request that the Personal Data be transferred to another Data Controller.
• Right to withdraw consent meaning the Users can withdraw their consent to the Processing of Personal Data.
• Right to request not to be subject to fully automatic decision-making meaning the Users can request that their Personal Data is not part of Processing for any automatic decision-making, including profiling, if such processing has any significant or legal effects for the Users. If the decision-making is in accordance with Data Protection Legislation and/or the Users have provided their explicit consent, this right is not applicable.

Please note that the above-described rights for the Users as Data Subjects may be limited if the Personal Data is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims

To invoke any of the rights described above or for more information regarding the rights, Users may contact CHARK Studio at any time by emailing [email protected]. CHARK Studio will process and answer requests without undue delay and in any event within one month of the receipt of the request unless a longer period is required due to the complexity of the request. In this case, the response time can be up to three months in total.

Changes to the Privacy Policy

This Privacy Policy applies to all Personal Data collected or provided to CHARK Studio. This Privacy Policy is subject to change and CHARK Studio may make any necessary changes to this Privacy Policy. CHARK Studio will notify Users of material changes by posting providing information about the changes in the Services. Users are encouraged to check back and review this Privacy Policy from time to time so that Users are always aware of what Personal Data is collected, how it is Processed and for which purpose and to whom it is disclosed. All continued use of and access to the Services is subject to this Privacy Policy and will signify Users acceptance of Privacy Policy and any potential changes to it.

Contact Information

For any questions, complaints or comments regarding our Privacy Policy, or to exercise the rights as a Data Subject, please contact CHARK Studio at:

MB “CHARK”
Partizanų g. 49-27
LT-49363 Kaunas
Lithuania

Email: [email protected]

Information We Collect

We collect information that identifies, relates to describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). Personal information does not include (i) publicly available information from government records, (ii) anonymized or aggregated consumer information, or (iii) information excluded from the CA Privacy Acts’ scope. In particular, we have collected the following categories of personal information from our consumers within the last twelve (12) months:

We collect most of this personal information directly from you when you use our website and Services or contact us. However, we may also collect information from the following categories of sources:

• Third parties (e.g., advertising networks, internet service providers, and social networks).
• Third parties with your consent (e.g., your bank).
• Cookies on our website.
• Automated information collection.
• Our IT systems.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following purposes:

• To fulfil or meet the reason you provided the information. For example, if you share your name and contact information to ask a question about our Services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service from us, we will use that information to process your payment and facilitate delivery.
• To provide, support, personalize, and develop our website and Services.
• To create, maintain, customize, and secure your account with us.
• To process your requests, purchases, transactions, and payments and prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To help maintain the safety, security, and integrity of our website, Services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our Website and Services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CA Privacy Acts.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our consumers is among the assets transferred.

We will not collect additional categories of personal information, sensitive personal information, or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

How Long We Keep Your Personal Information

We will not retain your personal information for longer than reasonably necessary for the purposes described above. We will delete or anonymize personal information as soon as it no longer serves the purpose it was collected and processed for. The table below shows our standard retention practices:

Disclosure of Your Personal Information

We do not sell personal information. We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purposes to the following third parties:

Your Rights and Choices Under the CA Privacy Acts

The CA Privacy Acts provide consumers (California residents) with specific rights regarding their personal information. This section describes your CA Privacy Act rights and explains how to exercise those rights. An authorized agent may exercise these rights on your behalf. If an authorized agent submits a request to know or delete your personal information, we require you to:

• Provide your authorized agent with signed permission to exercise your rights and choices on your behalf;
• Verify your own identity directly with us; and
• Directly confirm with us your authorized agent has permission to submit the request.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion Rights), we will disclose to you:

• The categories of personal information we collected about you;
• The categories of sources for the personal information we collected about you;
• Our business or commercial purpose for collecting or selling that personal information;
• The categories of third parties with whom we share that personal information;
• The specific pieces of personal information we collected about you in a structured, commonly used, machine-readable format (also called a data portability request); and
• If we disclosed your personal information for a business purpose, a list describing such disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

We will never disclose in response to a request to know your account password. We may deny your request to access information if we do not maintain your personal information in a searchable or otherwise reasonably accessible format, if we maintain your information solely for legal or compliance purposes, or for any other reason permitted under the CA Privacy Acts. In the event we deny your request, we will describe to you the categories of records that may contain your information.

Correction and Deletion Request Rights

You have the right to request that we correct any of your inaccurate personal information, or that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Access,Data Portability, Correction, and Deletion Rights), we will correct or delete (and direct our service providers and contractors to correct or delete, if applicable) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information for us or our service providers or contractors to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Exercising Access, Data Portability, Correction, and Deletion Rights

To exercise the access, data portability, correction, and deletion rights described above please submit a verifiable consumer request to us by emailing us at[email protected]. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.

You may only make a verifiable consumer request for access or data portability twice within a twelve (12) month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized agent; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Responding to Your Request

We endeavour to respond to a verifiable consumer request within forty-five (45) calendar days of its receipt. If we require more time (up to forty-five (45) days), we will inform you of the reason and extension period in writing. We will send you confirmation of receipt of any verifiable consumer request within ten (10) business days of its receipt.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response electronically.

Any disclosures we provide will only cover the twelve (12) month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the requests warrant a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.