This Privacy Policy explains how personal data is processed when you visit and use this website (the "Site"). We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), and other applicable data protection laws. The Site offers free-to-play social casino games for entertainment only; no real money is wagered and no payment data is collected.
1. Who we are (data controller)
The controller responsible for processing your personal data on this Site is:
Address: Harju maakond, Tallinn, Lasnamäe linnaosa, J. Koorti tn 2-43, 13623
Email: info@mydatabrick.shop
For any question about this policy or to exercise your rights, contact us at the email address above.
2. Personal data we collect
We follow the principle of data minimization and collect only what is necessary:
- Newsletter sign-up: your name and email address, and a record of your consent (date and time).
- Contact form and emails: your name, email address, the content of your message and any information you choose to share with us.
- Technical data: when you visit the Site, our hosting server automatically records standard log data such as your IP address, browser type and version, operating system, referring URL, pages requested and the date and time of access.
- Cookie data: a strictly necessary cookie that stores your cookie preference. See our Cookie Policy.
We do not require you to create an account to play, we do not collect payment or financial data, and we do not knowingly collect special categories of personal data (Article 9 GDPR).
3. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Sending our newsletter about new games | Name, email, consent record | Your consent, Art. 6(1)(a) |
| Answering your enquiries and requests | Name, email, message content | Steps at your request, Art. 6(1)(b); our legitimate interest in responding to communications, Art. 6(1)(f) |
| Operating, securing and troubleshooting the Site | Technical and log data | Legitimate interest in a secure, functioning website, Art. 6(1)(f) |
| Remembering your cookie choice | Consent cookie | Legitimate interest / strictly necessary storage, Art. 6(1)(f) |
| Complying with legal obligations and handling legal claims | Data relevant to the matter | Legal obligation, Art. 6(1)(c); legitimate interest, Art. 6(1)(f) |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You may object to such processing at any time (see section 8). Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal, for example by using the unsubscribe link in any newsletter or emailing us.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects (Article 22 GDPR), and we do not sell your personal data.
4. Embedded game providers
The game demos on this Site are embedded from the servers of third-party game providers. When you open a game page, your browser connects directly to that provider, which may receive your IP address and technical data and may set its own cookies or similar technologies. These providers act as independent controllers for that processing, under their own privacy policies. We do not receive any personal data from them and have no control over their processing. If you prefer not to share data with these providers, please do not open the game demos.
5. Recipients of personal data
We share personal data only where necessary and only with:
- Service providers (processors) such as our web hosting provider and email or newsletter service provider, who process data solely on our instructions under a data processing agreement pursuant to Article 28 GDPR;
- Professional advisers such as lawyers or accountants, where needed and under a duty of confidentiality;
- Public authorities where we are required to do so by law, or to establish, exercise or defend legal claims.
6. International data transfers
We aim to store and process personal data within the European Economic Area (EEA). If a service provider processes data outside the EEA, we ensure an adequate level of protection, either through an adequacy decision of the European Commission (Article 45 GDPR) or through appropriate safeguards such as the Standard Contractual Clauses adopted by the European Commission (Article 46 GDPR). You can request a copy of the relevant safeguards by contacting us.
7. How long we keep your data
- Newsletter data: until you unsubscribe or withdraw consent. We keep a record of the consent and withdrawal for as long as needed to demonstrate compliance.
- Enquiries: up to 12 months after our last communication, unless a longer period is required to deal with a legal claim.
- Server logs: up to 30 days, unless needed longer to investigate a specific security incident.
- Consent cookie: 12 months.
After these periods, the data is deleted or anonymized.
8. Your rights under the GDPR
Subject to the conditions set out in the GDPR, you have the right to:
- Access your personal data and receive a copy of it (Art. 15);
- Rectification of inaccurate or incomplete data (Art. 16);
- Erasure ("right to be forgotten") (Art. 17);
- Restriction of processing (Art. 18);
- Data portability, receiving your data in a structured, commonly used, machine-readable format (Art. 20);
- Object to processing based on legitimate interests, and to object at any time to direct marketing (Art. 21);
- Withdraw consent at any time (Art. 7(3));
- Not be subject to a decision based solely on automated processing (Art. 22).
To exercise any of these rights, email info@mydatabrick.shop. We will respond without undue delay and in any event within one month of receiving your request. This period may be extended by two further months where necessary, in which case we will inform you. We may ask you to verify your identity before acting on a request. Exercising your rights is free of charge, unless requests are manifestly unfounded or excessive.
9. Right to lodge a complaint
If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA Member State of your habitual residence, your place of work or the place of the alleged infringement (Article 77 GDPR). We would, however, appreciate the chance to address your concerns first, so please feel free to contact us.
10. Other information
Age restriction
This Site is intended only for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
Security
We use appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, such as encrypted connections and restricted access. No method of transmission over the internet is completely secure, but we work to protect your data.
Is providing data required?
You are not obliged to provide personal data to play the games. Providing your name and email is necessary only if you want to receive our newsletter or a reply to your enquiry.
Changes to this policy
We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the last update shown at the top. Where changes are significant, we will take reasonable steps to inform you.