Adatvédelemi tájékoztató

1. Who are we?

We are World of Adventures Ltd. (registered seat: 14. Gyümölcs str. Nagykovácsi, 2094, Hungary; company registration number: 13 09 220101; tax No.: HU27842605; Tel: 0036703848018; E-mail: info@wofa.games; represented by: Csaba Masek as managing director) („Controller”, „We” or „Us”) and we own and operate the following website, application and discussion forums: www.wofa.games website and the World of Adventures application. For the purpose of this privacy policy, we refer to the services provided by us in relation to each of the above as our Services („Services”).

2. Which services are covered by this Privacy Policy?

This Privacy Policy applies to World of Adventures Services provided by Us for users („You”) via the website, application and discussion forums referenced in section 1 above. The Services include the following functions:

• User registration;
• User communication;
• Service providing;
• Payment process.

This Privacy Policy aims at providing information on how and for what purposes We are processing Your personal data. Detailed information on certain aspects of the data processing (for example the purpose, the legal basis of processing, the scope of data processed) can be found in the Annexes.

3. Why is data protection important?

In order to be able to provide our Services it is necessary to process Your personal data. We suggest reading this Privacy Policy carefully in order to be aware of all the relevant information on the processing of your personal data. We draw your attention to the fact that by using our Services – in particular by registering on our Website or Application – you agree to the processing of your personal data as specified in this Privacy Policy. You can freely decide on giving your personal data to Us, however, without providing some of your personal data (registration) you cannot use some of our Services. You are able to browse our Website partly without registration.

We process your personal data in compliance with the applicable European and national data protection laws. These laws are primarily the following:

• REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC („GDPR”);
• Other national applicable data protection laws.

4. What categories of personal data are processed and for what purposes?

Personal data means any information relating to you through which We can identify you directly or indirectly; it means for example your name, e-mail address, IP address, location data, online identifier.
When providing our Services we process your personal data as data controller. We are processing Your personal data primarily in order to (i) provide You with our Services and administer your account, (ii) communicate with You; (iii) analyze our Services and optimize our website and application, (iv) send you information we think will be of interest to you (v) bill Our fees and administer payment. You can use most of our Services as registered user, however, you can browse website without registration.

In the event of any enquiries coming from state, administrative or investigative authorities or courts we may be obliged to provide these authorities or courts with Your personal data subject to applicable laws. In addition, we may transfer your personal data to another company if we are acquired by or merged with that another company.

Detailed information on the purposes of data processing, the legal basis of data processing, categories of data processed, the duration of data processing and third parties with which we share your personal data can be found in the Annex 1 of this Privacy Policy.

During the visiting of our website and using Our application, We are using cookies to improve our Services, to customize our communication with You as well as to present personalized advertisement to You. Detailed information on the use of cookies is included in Annex 2 of this Privacy Policy.

5. What data processors are used?

Data processor means a third person or entity which processes personal data on behalf of Us.
Please note that We are using data processors primarily for business related support services and these data processors receive Your personal data for the purpose of providing Us with such services. The table below indicates all categories of data processors which receive Your personal data.
Categories of recipients of the personal data:

• server hosting services provider; Rackforest Kft., Planet Express Kft.
• financial transactions services provider; Barion Payment Zrt.
• IT development services provider; 3xo Ltd
• Single sign on providers (e.g. Apple, Google, Facebook Sign In);
• Social media providers (e.g. Facebook, Instagram); Facebook
• Advertising partners including advertising networks (e.g. Facebook pixel)
• Online analytics services providers (e.g. Google Analytics); Firebase
• Billing processor: Billingo

6. What are your rights?

You have the following rights regarding the data processing carried out by Us in relation to Your personal data:

• right to access
  You have the right to request from Us a confirmation as to whether or not personal data concerning You are being processed, and, where that is the case, access to the personal data and obtain information on the data processing including:
  • what is the purpose of the processing,
  • what categories of personal data are processed,
  • who are We transferring or disclosing Your personal data to,
  • for what period are We processing Your personal data,
  • Your rights in connection with data processing,
  • Your right to lodge a complaint with a supervisory authority and
  • the existence of automated decision-making and information about it, as well as the significance and the
  • envisaged consequences of such processing for You.
• right to rectification
  You have the right to request Us to rectify Your inaccurate personal data without undue delay and to request Us to complete Your incomplete personal data including by means of providing a supplementary statement.
• right to erasure
  We erase any of Your personal data without delay if You request Us to do so if one of the following grounds applies:
  • Your Personal Data is no longer necessary for the given purpose;
  • You withdraw Your consent and there is no other legal basis for the processing;
  • You object to the processing and there are no overriding legitimate grounds for the processing;
  • Your Personal Data have been processed unlawfully;
  • Your Personal Data have to be erased according to relevant laws.
    Please note that We are entitled to refuse to erase Your personal data in certain circumstances specified by applicable laws, for example if data processing is necessary for compliance with legal obligation or establishment, exercise or defence of legal claims.
• right to restriction of processing
  You have the right to obtain from Us restriction of processing where one of the following applies:
  • You have contested the accuracy of Your personal data, for a period enabling Us to verify the accuracy of Your personal data;
  • the processing is unlawful, and You oppose the erasure of Your personal data and request the restriction of their use instead;
  • We need no longer Your personal data for the purposes of the processing, but they are required by You for the establishment, exercise or defence of legal claims.
  • d) the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
  • Where processing has been restricted, such personal data can, with the exception of storage, only be processed with Your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State. We will inform you before the restriction of processing is lifted.
• right to object to processing
  You have the right to object, on grounds relating to Your particular situation, to processing of personal data concerning You which is based on legitimate interest, including profiling based on legitimate interest. We will no longer process Your personal data unless there are compelling legitimate grounds for the processing which override Your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, You have the right to object to processing of personal data concerning You for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case We will no longer process Your personal data for direct marketing purposes.
• right to data portability
  You have the right to receive Your personal data, which You have provided to Us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from Us. You have the right to data portability if:
  • the processing is based on consent or on a contract; and
  • the processing is carried out by automated means.
    You also have the right to have Your personal data transmitted directly from Us to another controller, where technically feasible.
• right to withdraw consent
  You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

  We take actions in relation to exercising Your above rights without undue delay and in any event within one month of the receipt of Your request. By sending reasoned notification to You within one month of the receipt of Your request, this one month period may be extended by two months where necessary, taking into account the complexity and number of requests.

  In the event of You make such a request by electronic means, We provide You with information by electronic means where possible, unless You request otherwise.

  In case We do not take any action regarding Your request, We inform You as to the reasons within one month of receipt of Your request. If you do not agree with our response or action, You have right to remedy (section 7.).

  We take the necessary actions regarding exercising Your rights free of charge except if Your request is manifestly unfounded or excessive.

In case We have reasonable doubts as to the identity of the natural person making the request, We may request the provision of additional information necessary to confirm the identity of such person.

7. Remedies

In case You do not agree with our response or action or if You consider that Your rights have been infringed You have the right to lodge Your complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement, in Hungary the National Data Protection and Freedom of Information Authority (address: H-1125 Budapest, Szilágyi Erzsébet fasor 22/c; telefon: +36-1-391-1400; e-mail: ugyfelszolgalat@naih.hu), or You may initiate court proceedings.

8. Miscellaneous

Please note that We review this Privacy Policy from time to time and amend it as necessary. In case We amend this Privacy Policy We announce and publish it by the usual means. Please review this Privacy Policy occasionally.

It is very important for us that you feel 100% safe when using our Services and that’s why we always work hard to guarantee you the highest security standards. Should you have any question or doubt, feel free to contact Masek Csaba sole proprietor staff.
31 August 2020

Annex 1 – Information on personal data processing activity

User registration
Register as a user, to identify/verify You when You sign-in your account, to provide our Services to You, to administer Your account with us, and to restrict access to our Services
Your consent
For registration (all mandatory):
• user name;
• password;
• email address;
For providing our Services for You:
• Your precise geolocation;
• IP address;
• User ID for your account;
• Membership data;
Until You withdraw Your consent or for the period You are registered user of our Services.

Data processors as listed in Section 5.
User communication
Respond to your inquiries, customer service requests, complaints
Performance of a Contract
• email address;
• any personal data included in your message.
5 years after the termination of the contract
Data processors as listed in Section 5.
User communication
Communicate with You, including to update you on changes to our Services, this Privacy Policy, or our Terms of Use and other administrative communications
Performance of a Contract
• e-mail address;
• any personal data included in your message.
5 years after the termination of the contract
Data processors as listed in Section 5.
Service development
Analyze personal data to improve our Services or customize content available through Services or for market research
Your Consent
• cookies;
• location data;
• IP address;
• Browser version;
• Operating system;
• Date and time of visiting of the Website / application
Until You withdraw Your consent or for the period You are registered user of our Services.
Data processors as listed in Section 5.
Service providing
Provide the operation of the Website and/or the Application
Legitimate interest
• essential cookies
See data retention periods in Annex 2 section 2

User communication
Send you information we think will be of interest to you including sending you newsletter or other promotional communications
Your Consent
• email address;
• non-essential cookies.
Until You withdraw Your consent or for the period You are registered user of our Services.
Data processors as listed in Section 5.
Payment proccess
Authorize, process and track payment and billing
Compliance with legal obligation
• billing name;
• billing address;
• email address.
Eight (8) years as from the issuance of invoice
Data processors as listed in Section 5.

Public authorities as required by applicable law.
Service providing
To enable Authorized Developers to provide geocaching-related websites and applications that extend and enhance the geocaching experience
Your Consent
• cookies;
• location data;
• IP address;
• Browser version;
• Operating system;
• Date and time of visiting of the Website / application
Until You withdraw Your consent or for the period You are registered user of our Services.
Data processors as listed in Section 5.
User communication
To allow you to login and share information through a social network site account, such as Facebook and Twitter
Your Consent
• any personal data included in your message.

Until You withdraw Your consent or for the period You are registered user of our Services.
Data processors as listed in Section 5.

Annex 2 – Use of cookies

1. About cookies

Cookies are small text files which are placed in the browser of the computer by the websites You visited. Cookies are generally used for the purpose of effective operation of websites and/or providing web-based services or functions. Cookies can be session or persistent cookies. Persistent cookies are stored by the browser for a definite period of time provided that the user of the computer has not deleted the cookie earlier. Session cookies are deleted automatically by closing the browser.
When the Website is loading we request your consent to install cookies by a pop up window. If You do not provide your consent, we will only install the essential cookies that are absolutely necessary for the operation of the Website and/or the Application on your computer or other device.

2. Website cookies

The cookies used by the Website are indicated in the below table:

3. Third party cookies

Cookies used by third parties primarily for analytics purposes in connection with visiting the Website. Third party cookies are indicated in the table below:

4. Legal basis and rejecting and blocking cookies

When the Website is loading we request your consent to install cookies by a pop up window. If You do not provide your consent, we will only install the essential cookies that are absolutely necessary for the operation of the Website and/or the Application on your computer or other device. If you would like to reject (i.e. block) cookies or withdraw your consent, You can do that by clicking here. However, we draw your attention to the fact, that if you block cookies then You may not be able to use certain Services of the Website and the Application or even the entire Website/Application will be unavailable.