User Information Note




INFORMATION NOTE REGARDING THE USERS WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA

Rollic Games Oyun Yazılım ve Pazarlama Joint-Stock Company (“Company”), as required by its activity, processes some personal data of users who use the applications produced by the Company, in accordance with Law No. 6698 on the Protection of Personal Data (“Law") in the capacity of data controller. The purpose of this information note is to fulfill the obligation to inform the mentioned data groups within the scope of Article 10 of the Law.

  1. WHICH PERSONAL DATA DO WE PROCESS?
    USERS:
    Data Categorization and Explanation
    • Identity Information: Name, Surname, Age
    • Contact Information: E-mail address, address information (the city/country where a user is located)
    • Financial Information: Financial information about the in-game acquisition presented by our company
    • Process Security: The type of device the user uses to play the game, ID number, IP address, game identity
    • Other Information related to the Service: User's profile preferences, playing time, game content, and other technical content
    • Legal Transaction: Documents (correspondence, etc.) that can be used in a possible litigation/enforcement process


  2. FOR WHICH PURPOSE AND LEGAL REASON DO WE PROCESS YOUR PERSONAL DATA?
    Personal data of the users are processed in accordance with the conditions in Article 5 of the Law for the purposes of establishing a contract between the user and the Company, for the use of the applications, performing the relevant contract, fulfilling our legal obligations, and resolving the user complaints.

    Within this framework, the data of the users are processed on the grounds of the legal reasons in Article 5/2 of the KVKK, such as the necessity of data processing for the establishment or execution of a contract, the necessity of data processing or explicit consent for the legitimate interest of the data controller.

    Additionally, the personal data stated above, may be processed for this purpose, if necessary, with the intent of fulfilling our legal obligations. The data processed for this purpose, are processed based on the reason that data processing is necessary for the fulfillment of a legal obligation or as stipulated by law.


  3. TO WHOM AND FOR WHAT PURPOSE IS YOUR PERSONAL DATA TRANSFERRED?
    Data of the users may be transferred to our third-party service providers, if necessary for executing the contract between us. The data transferred for this purpose, are transferred in consequence of the reason that the transfer is necessary to execute the contract.

    Additionally, the data of the users may be transferred to the Company’s subsidiaries and servers located abroad, to increase the quality of service provided to users, since the Company is a global company and its servers are located abroad. The data transferred for this purpose, are transferred on the basis of explicit consent.

    Additionally, the personal data stated above, may be transferred to authorized institutions and organizations if necessary to fulfill our legal obligations. The data transferred for this purpose, are transferred in consequence of the reason that data transfer is required by law or is necessary to fulfill a legal obligation.


  4. PERSONAL DATA COLLECTION METHOD
    Your personal data is collected through electronic channels in accordance with the legal reasons stated in the hereby clarification text.


  5. WHAT ARE YOUR RIGHTS UNDER THE LAW?
    Your requests regarding your personal data within the scope of Article 11 of the Law can be submitted to the Company’s address at Vişnezade Mah.Şehit Mehmet Sk. Maçka Residances Sit.9b/80 Beşiktaş, İstanbul or those can be submitted to the Company by creating a request via https://www.rollicgames.com/privacy/request in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your rights under Article 11 of the Law are as follows:
      • To learn whether personal data has been processed or not,

      • To learn the purpose of processing personal data and whether they are used in compliance with their intended purpose,

      • To know the third parties to whom personal data are transferred abroad or domestically,

      • To request the rectification if the personal data are processed incompletely or inaccurately and to request the notification of such rectification to third parties to whom the personal data has been transferred,

      • To request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, despite the fact that it has been processed in accordance with the provisions of the Law and other relevant legislation, and to notify of such operation to third parties to whom the personal data has been transferred,

      • To object to the occurrence of a result against the data subject himself/herself by analyzing the data processed solely through automated system,