Processing of your personal data

Fatshark cares about the integrity of all we come into contact with. All processing takes part in accordance with the provisions in the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This privacy applies specifically when you sign up as a playtester for Fatshark and is supplemented by Fatshark’s general Privacy Policy found here.  

1. Who is responsible for processing of your personal data?
   Fatshark AB, company registration no. 556736-4970, (“Fatshark”) is the controller of personal data. Contact us on community@fatshark.se or at the address stated below if you have any questions regarding our processing of personal data. 
   
   Fatshark AB 
   Rosenlundsgatan 29C
   118 63 Stockholm 
   Sweden 
   

2. Our processing of personal data 
   2.1 What personal data do we process and for which purpose?

   Fatshark will use personal data obtained directly from you, such as your name and e-mail address.  Fatshark will process your data in order to send surveys and related information to you. You have the right to withdraw your consent to receiving surveys and information at any time, so called “opt-out” in every asset Fatshark send to you. The purpose of the processing is to use the playtesting responses to improve and analyse our games.
   

   2.2 Legal grounds 

   Fatshark will process your personal data based on consent regarding surveys and related information. 
   

   2.3 How long do we keep your personal data?  

   Contact details and other data that might be saved in questionnaires are stored for a duration of 1 year. We will process your personal data no longer than necessary. However, Fatshark will cease processing your data when you have unsubscribed from our surveys or withdrawn your consent. 
   

3. What are your rights? 

   Right to withdraw consent 

   You have the right to withdraw your consent at any time. If you withdraw your consent this does not affect our processing of your personal data before the withdrawal. 
   
   Right to complain with a supervisory authority 

   If you have any questions or concerns regarding our processing of personal data, please contact us at community@fatshark.se or by telephone at +46 8 20 51 70, or by mail to Fatshark AB, Rosenlundsgatan 29C, 118 63, Stockholm. 
   
   You may always lodge a complaint with the Swedish Authority for Privacy Protection (Swe. Integritetsskyddsmyndigheten) imy@imy.se, 08-657 61 00) regarding our processing of personal data. Contact details to other supervisory authorities in the European Union or the European Economic Area (the “EU/EEA”) can be found here. 
   

   Other rights 

   If your personal data is processed by Fatshark, you are also ensured other rights that are further described here.
   

4. Who has access to your data?

   Fatshark may transfer information to a third party if it is necessary for us to be able to provide our services, or if we have a legal obligation to transfer the information. We share your personal data with suppliers carrying out tasks on our behalf, for the purpose of IT-functions etc. Fatshark work with the following third parties; Google.  Fatshark will only process the data to accomplish the intended processing purpose as stated in Section 2.1 above. Fatshark will never sell your personal data to any third party. Information about how each third-party process personal data about you are to be found in each third-parties´ privacy notice. For example, see Google’s privacy policy here. 
   

5. Where do we process your data?  

   Fatshark strives to process data within the European Union (“EU”) and European Economic Area (“EEA”) when possible. However, some of our business partner organisations, subcontractors and subsidiaries are situated outside EU/EEA. Sharing data to such collaborators, for example Google, means that personal data may be transferred to a third country outside the EU/EEA area. 
   

   The transfer will take place in accordance with current privacy protection legislation, including the GDPR, in order to maintain an appropriate level of protection in the processing of personal data. This means that there is either a decision by the European Commission that there is an adequate level of protection for the country in question, or that appropriate safeguards have been provided. Such measures may be that the receiving party acts under legally binding standard contractual clauses or company regulations. However, since the GDPR does not apply in the third country, the transfer may entail an increased risk in terms of privacy with regard to, among other things, the possibility for authorities in the third country to gain access to your personal data and for your opportunities to exercise control over personal data. 
   

6. Automated decision-making and profiling 

   Fatshark does not apply any form of automated decision-making or profiling in terms of analysing questionnaires.