Rolly Hill – Privacy Policy

Last updated: 15 April 2020

This Privacy Policy explains how your personal data is collected and processed by Bidease Inc. ("Bidease") when you use the our mobile applications (the "App").

The App is a free to play game (with optional in-game-purchases), and in order to maintain the high quality and a great game experience we process information from and about you in particular to improve the entire experience in the App and to support internal operations.

We update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, depending on the specific changes, we will provide you with additional notice or require a renewed consent.

Collection of information

Information we collect automatically through the app

When you access or use the App, we automatically collect general information about you, including:

Information we collect from other sources

If you log into the App using a third party site or platform such as Facebook, Apple Game Center and Google Sign-In, we access information about you from that site or platform, such as your screen name, profile information and friend lists, in accordance with the authorization procedures determined by such third party site or platform provided that you have given the third party site in question such consent.

You can learn more about how such third-party sites or platforms process your personal data in the relevant privacy policy:

If you log into the App using a third party site or platform, you represent and warrant that (i) your access and use of such features in connection with the App will comply with the applicable terms and policies of such site or platform; and (ii) that you are over the minimum age limit that is prescribed for such third party site or platform by the legislation in the individual jurisdictions.

Use of information – purpose and legal basis

We use information about you for the following purposes in accordance with the legal bases for each type of personal data as described below:

We only process your information to the extent that is necessary to achieve the purposes for which the information has been collected.

Storage of information

Bidease will store your personal data for as long as necessary in order to provide you with the App or otherwise fulfil the purposes as described above, unless further storage is required in order to establish, exercise or defend a legal claim or to comply with applicable law, including accounting rules.

Your personal data are deleted or anonymized as soon as it no longer serves one of the above mentioned purposes and in any event no later than three (3) years after your interaction with Bidease has ceased.

Sharing of information

We disclose information about you to the following categories of recipients based on the legal bases under Sections 6(1)(b), 6(1)(c) and 6(1)(f) of the GDPR (see a description of the legal bases above):

Furthermore, if you have given your consent in accordance with Section 6(1)(a) of the GDPR, we share your Device identifiers to advertising network companies for the purpose of them serving behavioral advertisements to you within the App. We use or may use the following advertising network companies:

The recipients' use of the disclosed information will not be covered by this Privacy Policy. If you have questions concerning the processing carried out by such third parties, you should review their privacy policy.

In connection with our processing, we use following data processors such as server hosting providers, technical service providers for supporting internal operations, user login services and analytics service providers:

Social sharing features

The App offers or can offer social sharing features and other integrated tools (such as the Facebook “Like” button), which let you share actions you take in the App with other media. You must be over the minimum age limit that is prescribed by the legislation in the individual jurisdictions to use any social sharing features integrated in the App. The use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature.

Children

Use of the App is limited to users aged 13 years and above, except in European Economic Area, where the App is limited to users aged 16 years and above. If you are accepting this Privacy Policy and using the App, you warrant you are 13 (or 16, depends what is applicable) or more years old.

If you have additional questions about Bidease's privacy practices related to children under the applicable minimum age, please contact us at [email protected]

Transfer to third countries

In connection with the processing, we will in certain circumstances transfer your personal data to recipients outside the EEU.

We only transfer personal data to entities in third countries that have provided appropriate safeguards to ensure that their level of data protection is in agreement with this Privacy Policy and applicable law.

Consequently, the transfers will only occur based on the following safeguards:

Security

Bidease takes reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction.

Push notifications

We send push notifications or alerts to your mobile device to provide game-related information, service updates, promotional communications and other related messages, if you have agreed to such notifications. You can deactivate these notifications by changing your notification settings on your device.

Does Bidease actually "sell" personal data?

Bidease does not, and will not, provide your personal data in direct exchange for money. Therefore, in the literal sense, Bidease does not sell your data. However, we have disclosed some categories of personal data we collect, explained under ”Sharing of information“, to the third parties for business purpose as explained under “Use of information – purpose and legal basis”.

To the extent this practice is interpreted to constitute a “sale” under the CCPA, please contact us at [email protected] to exercise your right to withdraw your consent on sharing your personal data with third parties.

YOUR RIGHTS

Rights of EEU residents

We process and answer your requests without undue delay and in any event within one month of our receipt of the request unless a longer period is required due to the complexity of the request. In this case, our response time can be up to three months in total as permitted by Article 12 of the GDPR.

Right to request access

You have the right to request access into the data that we are processing on you, see Article 15 of the GDPR, including information about:

Furthermore, you have the right to obtain a copy of the personal data undergoing processing. Please note that the access may be restricted due to intellectual property or trade secrets.

The right to object

You have the right to object to our processing of your personal data on grounds relating to your particular situation when the data are processed based on the balancing-of- interest rule in Section 6(1)(f) of the GDPR, see Article 21 of the GDPR. In this case, we will cease the processing unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is necessary for the establishment, exercise or defense of legal claims.

You have the right to object to our processing of your personal data for direct marketing purposes at any time. We will cease the processing of your personal data for this purpose after the objection.

Right to rectification

You have the right to have inaccurate personal data rectified, see Article 16 of the GDPR.

The right to restriction

You have the right to obtain restriction of processing in certain circumstances, see Article 18 of the GDPR. If you have the right to restriction, we will only process your data with your consent or for the establishment, exercise or defense of a legal claim or to protect a person or important grounds of public interest.

The right to withdraw consent

If we have asked for your consent to our processing of your data, you have the right to withdraw your consent at any time, see Article 7 of the GDPR.

If you withdraw your consent, we will cease processing of the data for which you have withdrawn consent, unless we have a legal obligation to keep some or parts of your data.

The withdrawal of your consent does not affect the lawfulness of processing based on your consent before its withdrawal.

The right to data portability

You have the right to receive the personal data you have provided us with which we process in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller if the processing is based on consent or contract performance, see Article 20 of the GDPR.

Rights of California residents

We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal data that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Right to opt out

Under CCPA each California resident can request any business stops selling personal information to third parties.

Right to be informed

You have a right to be informed about what categories of personal data we are collecting, including the purpose of the collection. You can freely find this information in our Privacy Policy. We update our Privacy Policy at least once every 12 months.

Right to disclosure

You can request us to disclose what personal data we have collected on you in the past 12 months.

We can assure you that our Privacy Policy is an relevant document where you can find information about what personal data we have collected about you over the past 12 months and intend to collect, sources of your personal data and how we use your personal data.

You also have a right to get a free copy of your personal information disclosed in a readily usable and readable format (right of access). You can make this request for free, twice per year.

When providing information under the right of access, we will provide you with the following information:

Right to deletion

You can request us to delete the personal data we have collected on you in the past 12 months.

We fully recognize you right to deletion, however, we would like to note that in some cases we are obliged to keep your personal data for certain period of time. For instance, if we need to provide services to you, detect or resolve issues security or functionality-related issues, comply with the law, conduct research in the public interest, safeguard the right to free speech or carry out any actions for internal purposes that you might reasonably expect. If we do not have obligations to perform any of the above actions, we can delete your personal information at your request.

Right to equal services and prices

California residents are protected against any discrimination that a business might subject them to based on the exercising of their CCPA rights.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

How to exercise my rights

If you wish to use any of the rights described below, you may contact us at any time by emailing us at [email protected]

Mandatory verification: We will need to verify your identity before processing your request. However, because you cannot create an account with the App, and you do not provide us with any information directly, we only collect information automatically, we may use limited verification methods. To verify your identity, we will generally require the matching data in our systems to the information we can process when you are making a request. In certain circumstances, we may decline the request, mainly where we are unable to verify your identity, for example, if you disable cookies, changed the device you used to access the App or you already requested us to delete your personal data.

Contact

Bidease has the following contact information:

Bidease Inc.

Address: USA, New York, NY, 10019, 142 W 57th St

E-mail: [email protected]

You may also contact your local data protection authority for unresolved complaints.