Terms and Conditions

Last updated: October 2020

Access to and use of this website https://souldanceparty.com (“Website”) by users (each, a "User" / “You”) is provided by the 1C Online Games Ltd. subject to the following terms (“Terms”):

• By using 1C Online Games Website You agree to be legally bound by these Terms, which shall take effect immediately on Your first use of 1C Online Games Website. If You do not agree to be legally bound by the Terms please do not access and/or use 1C Online Games Website.
• 1C Online Games may change these Terms at any time. Please review these Terms regularly to ensure You are aware of any changes made by 1C Online Games. Your continued use of 1C Online Games Website after changes means You agree to be legally bound by these Terms as updated and/or amended.
• You may not copy, reproduce, republish, post, broadcast, download, transmit or otherwise use 1C Online Games Website content in any way except for Your own personal, non-commercial use. You also agree not to create a derivative work from any 1C Online Games Website content except for Your own personal, non-commercial use. Any other use of 1C Online Games Website content requires the prior written permission of the 1C Online Games.
• You agree to use 1C Online Games Website only for lawful purposes and in a way that does not infringe the rights of, restrict or inhibit anyone else's use and enjoyment of 1C Online Games Website.

Intellectual Property

The names, images and logos identifying 1C Online Games or third parties and their products and services are subject to copyright, design rights and trade marks of 1C Online Games and/or third parties. Nothing contained in these Terms shall be construed as any license or right to use any trademark, patent, design right or copyright of 1C Online Games or any other third party.

Links to external websites

It is 1C Online Games's policy to obtain permission to link to other parties websites. 1C Online Games is not responsible for the content or reliability of the linked websites. Listing should not be taken as endorsement of any kind. We cannot guarantee that these links will work all of the time and we have no control over the availability of linked pages.

Privacy policy

On the basis of what legal provisions are or may be processed your personal data?

The rules on the protection of personal data (hereinafter referred to as the GDPR ) are set out, inter alia, in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance), the country related special acts (lex specialis).

1. Personal data" - means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is a person who can be directly or indirectly identified, in particular on the basis of an identifier such as name and surname, identification number, location data, internet identifier or one or more specific physical, physiological, genetic, mental factors, economic, cultural or social identity of a natural person,
2. Processing" - means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction,
3. Controller" - means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law,
4. - Joint controller(s) occurs when at least two Controllers jointly determine the purposes and means of processing, they are Joint controllers (art. 26 GDPR),
5. Supervisory authority" - means an independent public authority which is established by a Member State,
6. - means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing,
7. - means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller,
8. - means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data,
9. - an entity outside the EEA (European Economic Area) to which personal data is disclosed,
10. - of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her,
11. - this document, presenting information on the principles of personal data processing in accordance with the substantive scope indicated in art. art. 13 GDPR - information clause regarding the processing of personal data,
12. - information on the use of cookies on the website run by the Controller. The Cookie Policy is available on the Controller's website,
13. - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation: https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=celex%3A32016R0679

Who does this Privacy Policy apply to?

This Privacy Policy (hereinafter referred to as PP) applies to the processing of personal data of natural persons.

Who is the Controller?

Please be advised that Controller is 1C SPD Sp. z o.o., ul. Krakowiaków 36, 02-255 Warszawa, Polska, KRS: 753542.

Contact details to the Controller

Please send inquiries regarding the protection of personal data to the Controller by traditional mail to the above-mentioned address or by e-mail to the address: iod_1csdp@1ce.games.

Data Protection Officer

Please be advised that the Controller has not appointed a Data Protection Officer. Inquiries regarding the protection of personal data should be directed to the Controller by traditional mail to the Controller's address or by e-mail to the following address: iod_1csdp@1ce.game.

For what purposes is or can your personal data be processed?

Personal data is or may be processed for the following purposes:

No.	Purpose of personal data processing	Scope of personal data	Lawfulness of processing
1	To conclude an agreement and to provide the service chosen by the User	Name, e-mail,	1) art. 6 (1) b) GDPR - processing necessary to conclude and implement the provisions of the agreement, 2) art. 6 (1) c) GDPR - legal regulations, 3) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,
2	To respond to User queries, feedback or issues including the technical issues (technical support) connected with games	Name, e-mail, description, attachments	1) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,
3	To send periodic emails, such as updates on new games release dates via e-mail (including Newsletter)	e-mail	1) art. 6 (1) a) GDPR - consent of the data subject, 2) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,
4	To participate in the Forum section on the website	Name, nick, avatar, image, comments,	1) art. 6 (1) a) GDPR - consent of the data subject, 2) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,
5	Personal data processed in connection with participation in competitions	Name, surname, telephone number, e-mail address other information connected with participation in competitions	1) art. 6 (1) b) GDPR - processing necessary to conclude and implement the provisions of the contract (acceptance of the provisions of the Regulations), 2) art. 6 (1) c) GDPR - legal regulations (in the case of paid conferences), 3) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,
6	Personal data processed in connection with the exercise of rights in the field of personal data protection	The scope of data necessary to exercise the rights of the person	1) art. 6 (1) c) GDPR - legal provisions, 2) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,
7	For other purposes - while the content of art. 13 GDPR will then be presented individually for the respective processing purpose	-	-

We hereby inform that depending on the purpose of processing, the scope of the indicated personal data may change.

How long will personal data be processed in accordance with the storage limitation principle (personal data retention)?

Please be advised that personal data are or may be processed for the period of:

No.	Purpose of processing	Lawfulness of processing	Processing period
1	To conclude an agreement and to provide the service chosen by the User	1) art. 6 (1) b) GDPR - processing necessary to conclude and implement the provisions of the agreement, 2) art. 6 (1) c) GDPR - legal regulations, 3) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) for the duration of the agreement, 2) for the period resulting from legal provisions, 3) until an objection to the processing is submitted, 4) for a period of 10 years for internal administrative purposes,
2	To respond to User queries, feedback or issues including the technical issues (technical support) connected with games	1) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) until an objection to the processing is submitted, 2) until the technical support is submitted, 3) for a period of 10 years for internal administrative purposes,
3	To send periodic emails, such as updates on new games release dates via e-mail (including Newsletter)	1) art. 6 (1) a) GDPR - consent of the data subject, 2) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) until the consent is withdrawn, 2) until an objection to the processing is submitted, 3) for an indefinite period,
4	To participate in the Forum section on the website	1) art. 6 (1) a) GDPR - consent of the data subject, 2) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) until the consent is withdrawn, 2) until users stop using the Forum, 3) for the period resulting from legal provisions, 4) for a period of 10 years for internal administrative purposes,
5	Personal data processed in connection with participation in the competitions	1) art. 6 (1) b) GDPR - processing necessary to conclude and implement the provisions of the contract (acceptance of the provisions of the Regulations), 2) art. 6 (1) c) GDPR - legal regulations (in the case of paid conferences), 3) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) until an objection to the processing is submitted, 2) for the duration of the competitions, 3) for the period of 6 years after the participation in the competitions, 4) for a period of 10 years for internal administrative purposes,
6	Personal data processed in connection with the exercise of rights in the field of personal data protection	1) art. 6 (1) c) GDPR - legal provisions, 2) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) for the period resulting from legal provisions (for an indefinite period), 2) until an objection to the processing is submitted,

Please be advised that the given periods of personal data processing for individual processing purposes may change, among others, as a result of amendments to the law or internal organizational changes.

Under what circumstances is the provision of personal data a statutory or contractual requirement or a requirement necessary to enter into a contract?

Please be advised that providing personal data is:

No.	Purpose of processing	Lawfulness of processing	Processing
1	To conclude an agreement and to provide the service chosen by the User	1) art. 6 (1) b) GDPR - processing necessary to conclude and implement the provisions of the agreement, 2) art. 6 (1) c) GDPR - legal regulations, 3) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) is of a contractual nature, but failure to provide personal data will result in the inability to conclude and perform the provisions of the agreement, 2) is of a statutory nature, and failure to provide personal data will result in the inability to meet the legal provisions imposed on the Controller,
2	To respond to User queries, feedback or issues including the technical issues (technical support) connected with games	1) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) is voluntary, and failure to provide personal data will result in the inability to respond the queries or providing the technical support,
3	To send periodic emails, such as updates on new games release dates via e-mail (including Newsletter)	1) art. 6 (1) a) GDPR - consent of the data subject, 2) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) is voluntary, and failure to provide personal data will result in the inability to prepare periodic emails, such as updates on new games release dates via e-mail, including Newsletter
4	To participate in the Forum section on the website	1) art. 6 (1) a) GDPR - consent of the data subject, 2) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) is voluntary, and failure to provide personal data will result in the inability to participate in the Forum
5	Personal data processed in connection with participation in the competitions	1) art. 6 (1) b) GDPR - processing necessary to conclude and implement the provisions of the contract (acceptance of the provisions of the Regulations), 2) art. 6 (1) c) GDPR - legal regulations (in the case of paid conferences), 3) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) is voluntary, but failure to provide personal data will result in the inability to participate in the competitions, 2) is of a contractual nature, but failure to provide personal data will result in the inability to participate in the competitions (in the event of the existence of the Rules of Participation in the competitions), 3) is of a statutory nature, and failure to provide personal data will result in the inability to meet the legal provisions imposed on the Controller (in the case of organizing a paid competitions),
6	Personal data processed in connection with the exercise of rights in the field of personal data protection	1) art. 6 (1) c) GDPR - legal provisions, 2) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	1) is voluntary, and failure to provide personal data will result in the inability to exercise the rights of the person in the field of personal data protection, 2) is of a statutory nature, and failure to provide personal data will result in the inability to comply with the provisions of the law in the area of personal data protection imposed on the Controller,

Processing of personal data based on the consent of the data subject

Please be advised that in the case of processing personal data based on the consent of the data subject (Article 6 (1) (a) of the GDPR):

No.	Purpose of processing	Lawfulness of processing	Art. 6 (1) a) GDPR
1	To send periodic emails, such as updates on new games release dates via e-mail (including Newsletter)	1) art. 6 (1) a) GDPR - consent of the data subject,	The data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawal of the consent granted should be reported to the e-mail address: iod_1csdp@1ce.games
2	To participate in the Forum section on the website	1) art. 6 (1) a) GDPR - consent of the data subject,	The data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawal of the consent granted should be reported to the e-mail address: iod_1csdp@1ce.games

The processing of personal data based on the legitimate interest pursued by the Controller (processing is necessary for the purposes of the legitimate interests pursued by the controller)

Please be advised that in the case of processing personal data based on the legitimate interest pursued by the Controller (Article 6 (1) f) of the GDPR processing is necessary for the purposes of the legitimate interests pursued by the controller):

No.	Purpose of the processing	Lawfulness of the processing	Art. 6 (1) f) GDPR
1	To conclude an agreement and to provide the service chosen by the User	1) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	The legitimate interest of the controller is the processing of personal data in order to administrative and internal management issues also in case of the claims - if applicable
2	To respond to User queries, feedback or issues including the technical issues (technical support) connected with games	1) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	The legitimate interest of the controller is the processing of personal data in order to providing the technical support, administrative and internal management issues also in case of the claims - if applicable
3	To send periodic emails, such as updates on new games release dates via e-mail (including Newsletter)	1) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	A legally legitimate interest is considered to be a binding relationship, including a business relationship, an ongoing contract with the data subject and data processing for internal administrative purposes, also in relation to the exercise of the rights of data subjects in connection with the possibility of exercising the rights of persons to whom data concern and provided for by law (e.g. documenting withdrawal of granted consent),
4	To participate in the Forum section on the website	1) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	The legitimate interest of the controller is the processing of personal data in order to administrative issues related to running the Forum, for administrative and internal management issues also in case of the claims - if applicable
5	Personal data processed in connection with participation in the competitions	1) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	The legitimate interest of the controller is the processing of personal data in order to administrative issues related to running the competitions, for administrative and internal management issues also in case of the claims - if applicable
6	Personal data processed in connection with the exercise of rights in the field of personal data protection	1) art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller,	A legally legitimate interest is to the exercise of the rights of data subjects in connection with the possibility of exercising the rights of persons to whom data concern and provided for by law and demonstrate the compliance with the GDPR regulations,

Disclosure of personal data by the Controller

We hereby inform that personal data is or may be disclosed by the Controller:

1. disclosed to data recipients providing services to the Controller pursuant to art. 28 GDPR – Data Processing Agreement. Depending on the purpose of personal data processing, the categories of data recipients may be: IT infrastructure providers (software and hardware), website hosting, tools for conducting meetings, conferences, online webinar, external recruiting companies. The list of the processors to whom the Controller entrusts the processing of personal data is available at the request of the data subject,
2. disclosure of data to recipients cooperating with the Controller. Depending on the purpose of personal data processing, the categories of recipients to whom personal data may be disclosed are entities operating in the field of audits, postal services, courier services, law offices. We would like to inform you that after disclosing personal data, the data recipient becomes the Controller. The list of recipients to whom the Controller discloses personal data is available at the request of the data subject,
3. disclosure of data to recipients who are public / state authorities. Depending on the purpose of personal data processing, the categories of data recipients may be such bodies as the Tax Office, Police, courts, the Supervisory Authority or other entities to which the Controller discloses personal data under applicable law. Please be advised that after disclosing personal data, their recipient becomes the Controller of the data. The list of recipients to whom the Controller discloses personal data is available at the request of the data subject,
4. disclosure of personal data to third parties. The list of third parties to whom the Controller discloses personal data is available at the request of the data subject.

Transferring personal data to a third country (i.e. outside the EEA)

1. Please be advised that personal data may be transferred to a third country, i.e. outside the EEA. In the event of transferring personal data outside the European Economic Area, such transfer may only take place on the terms set out in Chapter V of the GDPR:
2. pursuant to art. 45 GDPR - transfer based on an adequacy decision,
3. pursuant to art. 46 GDPR - transfer subject to appropriate safeguards, including the use of standard data protection clauses adopted by the European Commission,
4. We hereby inform that the transfer of personal data outside the EEA may involve the risk of not ensuring sufficient security of personal data. In the event of a risk related to the transfer of personal data outside the EEA, the Controller provides such information in this Privacy Policy,
5. Please be advised that the list of entities outside the EEA to which the Controller discloses personal data is available at the request of the data subject,
6. List of entities that may transfer personal data outside the EEA, which may not provide sufficient protection of personal data provided for in the GDPR:

No.	The name of the entity	Link to information	The risk related to the transfer of data outside the EEA and the negative effects that may arise for the data subject
1	Facebook	https://www.facebook.com/legal/terms	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
2	LinkedIn	https://www.linkedin.com/legal/user-agreement	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
3	Twitter	https://twitter.com/en/tos#intlTerms	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
4	YouTube	https://www.youtube.com/t/terms	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
5	Google	https://policies.google.com/terms?hl=en&gl=be	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
6	Google Maps	https://www.google.com/intl/en_be/help/terms_maps/	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,

What are the rights of the data subject?

We would like to inform you about the right to request the Controller to exercise the following rights:

1. the right to access personal data relating to the data subject,
2. the right to rectify personal data,
3. the right to delete personal data (erasure of personal data),
4. the right to limit the processing of personal data (restriction of processing),
5. the right to object to the processing,
6. the right to transfer data (the right to data portability),
7. the right to receive a copy of your personal data,
8. the right to lodge a complaint with the supervisory body.

Please be advised that due to the individual purposes of processing listed in this Cookie Policy, the exercise of the rights of data subjects may be fully or partially limited, e.g. due to applicable law, which obliges the Controller to process them. Please send inquiries regarding the protection of personal data to the Controller by traditional mail to the above-mentioned address or by e-mail to the address: iod_1csdp@1ce.games.   

Who is the supervisory authority?

We would like to inform you about the right to lodge a complaint to the supervisory body, President of the Personal Data Protection Office, contact to the supervisory body is available at: https://uodo.gov.pl/en/484.

Information on automated decision making, including profiling

Please be advised that by entering the Controller's website, you are not subject to automated decision making, including profiling. Information on the data cookies used by the Controller is available in the Cookie Policy available on the website as a separate document.

What is the source of the data?

Personal data may:

What scope of personal data is processed?

The Controller processes personal data to the extent necessary to achieve the purposes of processing indicated in the Privacy Policy. In accordance with the principle of minimization, we process only the scope of personal data necessary to achieve the purpose of processing.

How do we secure personal data?

Please be advised that in order to protect privacy and personal data, the Controller has implemented appropriate physical, technical, organizational and legal measures to ensure the security of personal data processing and to ensure the implementation of the rights and freedoms of natural persons.

Processing of personal data using social media or platforms

1. Facebook,

No.	Entity name	Link to information
1	Facbook	https://www.facebook.com/legal/terms
2	LinkedIn	https://www.linkedin.com/legal/user-agreement
3	Twitter	https://twitter.com/en/tos#intlTerms
4	YouTube	https://www.youtube.com/t/terms
5	VK	https://connect.vk.com/privacy

Information about Joint controllers

1. https://www.facebook.com/1COnlineGames). 
2. https://www.facebook.com/legal/controller_addendum,
3. iod_1csdp@1ce.games,
4. iod_1cog@1ce.games, 
5. https://www.facebook.com/privacy/explanation.
6. that due to the co-administration, the supervisory authorities competent for the Controllers are:
7. http://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/contact_en/contact_en?opendocument, 
8. https://www.dataprotection.ie/.

References to other sites

1. Please be advised that the website of the Controller may contain references to other websites (e.g. business partners cooperating with the Controller).
2. Please be advised that the Controller is not responsible for the processing of personal data of other websites. Information on the processing of personal data is made available by the Controllers to which the abovementioned websites belong.

Processing of personal data via sales platforms

1. Please be advised that the Controller, as part of cooperation with sales platforms, may process personal data in connection with the offer of products and services.
2. Information on the processing of personal data to the extent to which the Controller determines the purposes and means of the processing of personal data, is available in the dedicated Privacy Policy provided by the Controller on the sales platform - if applicable.

Personal data breach notifications

We hereby inform that pursuant to Art. 34 GDPR, in the event of a breach of personal data protection that may result in a high risk of violation of the rights or freedoms of natural persons, the Controller shall notify the data subject of such a personal data breach without undue delay. Please be advised that pursuant to Art. 34 GDPR, personal data may be processed in connection with the personal data breach referred to above. Please be noted that the legal basis for the processing of personal data is art. 6 sec. 1 lit. c) GDPR. Please be advised that in the event of a personal data breach, the Controller will take all possible and available technical and organizational measures to meet the requirements set out in art. 33 and art. 34 GDPR.

Cookies policy

What are the legal basis for processing personal data?

The rules on the protection of personal data (hereinafter referred to as the GDPR^[1]) are set out, inter alia, in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance) and country related special acts (lex specialis).

Important terms

1. "Personal data" - means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person,
2. "Cookies" - a cookie is a small text file that the website saves on the user's computer or mobile device when browsing the website,
3. "Website" - website provided at the link https://souldanceparty.com/#home or other websites provided by the Controller,
4. "Processing" - means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction,
5. “Controller”- means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law,
6. "Joint controller(s)" – Joint controller(s) occurs when at least two Controllers jointly determine the purposes and means of processing, they are Joint controllers (art. 26 GDPR),
7. "Third party" - means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data,
8. "Supervisory authority" - means an independent public authority which is established by a Member State,
9. "Consent" - the consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her,
10. "Profiling" - means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements,
11. "Cookies Policy" - information on the use of cookies on the website run by the Controller. The cookie policy is available on the Controller's website. Cookies may belong to the Controller or to third parties,
12. "GDPR" - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation): https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=celex%3A32016R0679

Who does this Cookie Policy apply to?

This Cookie Policy (hereinafter CP) concerns the processing of personal data of natural persons, website users, collected using cookies on the website or subpages belonging to the Controller.

Who is the Controller?

Please be advised that Controller is 1C SPD Sp. z o.o., Krakowiaków 36 Str., 02-255 Warsaw, Poland, KRS: 753542.

Contact details to the Controller

Please send inquiries regarding the protection of personal data to the Controller by traditional mail to the above-mentioned address or by e-mail to the address: iod_1csdp@1ce.games..   

Data Protection Officer

Please be advised that the Controller has not appointed a Data Protection Officer. Inquiries regarding the protection of personal data should be directed to the Controller by traditional mail to the Controller's address or by e-mail to the following address: iod_1csdp@1ce.game.

Who is the supervisory authority?

We would like to inform you about the right to lodge a complaint to the supervisory body, President of the Personal Data Protection Office, contact to the supervisory body is available at: https://uodo.gov.pl/en/484.

What types of cookies are used?

The following types of cookies are or may be used on the website and subpages of the Controller’s website:

• technical, operational, optimizing navigation and display of content posted on the website,
• analytical, profiling, tracking,
• scripts and third party cookies,
• cookies of other websites.

Operational, technical and optimization cookies

Please be advised that the Controller uses the operational, technical and optimization cookies described below on the website. Please be advised that in the case of the following cookies, the legal basis for the processing of personal data is Art. 6 (1) f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller. Please be noted that the actions described below are considered as the legitimate interest of the Controller:

No.	The name of the cookie	Description	Validity period
1.	PHPSESSID	System cookie, binds client and server session	Active for one session
2.	cookie_success	Stores the status of accepting cookies	1 year
3.	lang_id	System cookie, contain language of portal	1 year
4.	rmb_code_login	System cookie, contain status for remember user auth	1 year

The use of analytical, profiling, tracking cookies and scripts

Please be advised that the Controller uses the analytical, profiling and tracking cookies and scripts described below on the website. Please be advised that in the case of the following cookies, the legal basis for the processing of personal data is Art. 6 (1) a) GDPR - consent of the data subject. Please be advised that consent is voluntary, and failure to do so will mean that cookies will not be used for the purposes for which they were provided. Withdrawal of the consent granted for analytical, profiling and tracking cookies is carried out by deleting them in the web browser:

No.	The name of the cookie	Description	Validity period
1.	Cookies starting with_ym & _ym_d & _ym_uid	Yandex Metrics is being created https://yandex.com/legal/confidential/?lang=en	Active for one session or up to 1 day
2.	_ga & _gid & _gat	The id is assigned by google analytic https://policies.google.com/terms?hl=en&gl=be	Active for one session or up to 1 day
3.	1cgames-pixel	Defining the user's browser	Installed by the browser (from 3 months to ~)
4.	rpt_code	ID for Internal Analytics	Up to 3 months
5.	consent_id & xsollauid & first_visit & corpsite_visit & SnapABugHistory & locale & intercom-id	xsolla payment system https://xsolla.com/cookie	1 day - 1 year
6.	VISITOR_INFO1_LIVE & CONSENT & GPS & PREF	YouTube https://www.youtube.com/t/terms	1 day - 1 year
7.	Cookies starting with_ym & _ym_d & _ym_uid	Yandex Metrics is being created https://yandex.com/legal/confidential/?lang=en	Active for one session or up to 1 day

The use of analytical, profiling and tracking third party cookies

Please be advised that the Controller uses the analytical, profiling and tracking third party cookies described below on the website. Please be advised that in the case of the following cookies, the legal basis for the processing of personal data is Art. 6 (1) a) GDPR - consent of the data subject. Please be advised that consent is voluntary, and failure to do so will mean that cookies will not be used for the purposes for which they were provided. Withdrawal of the consent granted for analytical, profiling and tracking cookies is carried out by deleting them in the web browser:

No.	The name of the cookie	External site	Description	Validity period
1.	consent_id	xsolla cookie	Used for GDPR consent https://xsolla.com/cookie	18 days
2.	xsollauid	xsolla cookie	This cookie contains a unique user ID. It allows to group actions made on website or application by one person and analyze the service's usability https://xsolla.com/cookie	10 year
3.	Cookies starting with_ym	xsolla cookie	Yandex Metrics is being created https://xsolla.com/cookie	Active for one session or up to 1 day
4.	_ga & _gid & _gat	xsolla cookie	The id is assigned by google analytic https://policies.google.com/terms?hl=en&gl=be	Active for one session or up to 1 day
5.	first_visit	xsolla cookie	This cookie contains the name of the first visited product https://xsolla.com/cookie	1 year
6.	corpsite_visit	xsolla cookie	This cookie contains the flag of the corporate site visit https://xsolla.com/cookie	1 year
7.	SnapABugHistory	xsolla cookie	Used for correct operation of the customer support chat in Pay Station https://xsolla.com/cookie	1 year
8.	locale	xsolla cookie	User localization https://xsolla.com/cookie	1 year
9.	intercom-id	xsolla cookie	This cookie contains an ID of the Intercom session https://xsolla.com/cookie	1 year
10.	VISITOR_INFO1_LIVE	YouTube	https://www.youtube.com/t/terms	6 months
11.	CONSENT	YouTube	https://www.youtube.com/t/terms	17 year
12.	GPS	YouTube	https://www.youtube.com/t/terms	Active for one session or up to 1 day
13.	PREF	YouTube	https://www.youtube.com/t/terms	2 year

Third party cookies

On some webpages or subpages belonging to the Controller, cookies from other parties may be used, and content from external entities, such as Facebook, YouTube, LinkedIn, Twitter, may also be displayed. To view third party content, you must first agree to their specific terms and conditions. Part of these conditions is the cookie policy, over which the Controller has no control and is not responsible for the processing of personal data collected via cookies of these websites:

No.	Third party name	Link to information
1.	Facebook	https://www.facebook.com/legal/terms
2.	YouTube	https://www.youtube.com/t/terms
3.	LinkedIn	https://www.linkedin.com/legal/user-agreement
4.	Twitter	https://twitter.com/en/tos#intlTerms
5.	Google Maps	https://www.google.com/intl/en_be/help/terms_maps/
6.	VK	https://connect.vk.com/privacy

How to manage cookies?

Cookies can be managed freely and can be deleted. Individual browsers or devices may offer settings that allow you to choose whether browser cookies are to be set and also to delete them. These settings vary from browser to browser, and manufacturers can change both the settings they provide and the way they work at any time. Additional information on the settings offered by individual browsers can be found on the pages under the following links:

No.	Third party name	Link to information
1.	Google Chrome	https://support.google.com/chrome/answer/95647
2.	Internet Explorer	https://support.microsoft.com/en-ie/help/17442/windows-internet-explorer-delete-manage-cookies
3.	Firefox	https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop?redirectslug=enable-and-disable-cookies-website-preferences&redirectlocale=en-US
4.	Opera	https://blogs.opera.com/news/2015/08/how-to-manage-cookies-in-opera/
5.	Safari	https://support.apple.com/en-ie/guide/safari/sfri11471/mac

Transferring personal data to a third country (i.e. outside the EEA)

1. Please be informed that due to the use of cookies on the website, personal data processed via cookies may be transferred to a third country, i.e. outside the EEA. In the case of transfer of personal data outside the European Economic Area,

2. Please be advised that the transfer of personal data outside the EEA may involve the risk of not ensuring sufficient security of personal data,

3. List of entities that may transfer personal data outside the EEA, which may not ensure sufficient protection of personal data provided for in the GDPR:

No.	Name of the entity	Link to information	Possible negative consequences for the data subject
1.	Facebook	https://www.facebook.com/legal/terms	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR,
2.	YouTube	https://www.youtube.com/t/terms	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
3.	Google	https://policies.google.com/terms?hl=en&gl=be	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
4.	LinkedIn	https://www.linkedin.com/legal/user-agreement	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
5.	Twitter	https://twitter.com/en/tos#intlTerms	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
6.	Google Maps	https://www.google.com/intl/en_be/help/terms_maps/	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,

Disclosure of personal data

Please be advised that personal data is disclosed to data recipients. The categories of recipients are entities that provide marketing services, advertising agencies, marketing agencies with which the Controller has concluded Data Processing Agreement based on art. 28 GDPR. The list of entities to which personal data is entrusted is available at the request of the data subject.

Implementation of the rights of data subjects

We would like to inform you about the right to request the Controller to exercise the following rights:

1) the right to access personal data relating to the data subject,

2) the right to rectify personal data,

3) the right to delete personal data (erasure of personal data),

4) the right to limit the processing of personal data (restriction of processing),

5) the right to object to the processing,

6) the right to transfer data (the right to data portability),

7) the right to receive a copy of your personal data,

8) the right to lodge a complaint with the supervisory body.

Please be advised that due to the individual purposes of processing listed in this Cookie Policy, the exercise of the rights of data subjects may be fully or partially limited, e.g. due to applicable law, which obliges the Controller to process them. Inquiries regarding the protection of personal data should be directed to the Controller by traditional mail to the Controller's address or by e-mail to the following address: iod_1csdp@1ce.games.

Information about Joint controllers

1. 1. Please be advised that the Controller, as part of cooperation with business partners, may run a fanpage on social media through them, including on Facebook (hereinafter FB) fanpage(https://www.facebook.com/1COnlineGames).

2. Please be advised that in connection with running a fanpage on FB as part of cooperation with business partners, there is co-administration (Article 26 of the GDPR). The Joint controllers with regard to personal data processed on the fanpage are or may be:

1) 1C SDP Sp. z o.o.,

2) 1C Online Games Limited,

3) Facebook Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland,

3. Please be advised that the Joint controllers made common arrangements. Information on co-administration and responsibilities is available at: https://www.facebook.com/legal/controller_addendum,

4. Please be advised that regardless of the arrangements made between the Joint controllers, the data subject may exercise his rights under the GDPR with respect to each of the data, Controllers separately,

5. Contact details to the Data Protection Officer:

1) please be informed that the Controller 1C SDP Sp. z o.o. did not appoint the Data Protection Officer. Inquiries regarding the protection of personal data should be directed to the Controller by traditional mail to the Controller's address or by e-mail to the following address iod_1csdp@1ce.games,

2) please be informed that the Controller 1C Online Games Limited did not appoint the Data Protection Officer. Inquiries regarding the protection of personal data should be directed to the Controller by traditional mail to the Controller's address or by e-mail to the following address iod_1cog@1ce.games,

3) contact details to the Data Protection Officer on behalf of Facebook Ireland Limited are available at: https://www.facebook.com/privacy/explanation.

6. We hereby inform that due to the co-administration, the supervisory authorities competent for the Controllers are:

1) For 1C SDP Sp. z o. o. - President of the Personal Data Protection OfficeOffice of the Commissioner for Personal Data Protection, contact to the supervisory body is available at: https://uodo.gov.pl/en/484,

2) for 1C Online Games Limited – Office of the Commissioner for Personal Data Protection, contact to the supervisory body is available at: http://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/contact_en/contact_en?opendocument,

3) for Facebook Ireland Limited - Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland: https://www.dataprotection.ie/.

Data Protection Impact Assessment (i.e. DPIA)

1. If a given type of processing - in particular with the use of new technologies - due to its nature, scope, context and purposes, is likely to result in a high risk of violating the rights or freedoms of natural persons, the Controller, prior to processing, shall assess the effects of the planned processing operations for the protection of personal data,

2. Please be informed that that due to the use of analytical, profiling and cookies on the website, personal data processed through the above-mentioned cookies may be transferred to a third country, i.e. outside the EEA. In the event of transfer of personal data outside the European Economic Area, a given country may not provide sufficient protection of personal data, may not ensure the implementation of rights under the GDPR, personal data protection may be violated. Please be advised that the transfer of personal data outside the EEA may involve a high risk of not ensuring sufficient security for the personal data being processed,

3. List of entities that may transfer personal data outside the EEA, which may not ensure sufficient protection of personal data provided for in the GDPR:

No.	Name of the entity	Link to information	Possible negative consequences for the data subject
1.	Facebook	https://www.facebook.com/legal/terms	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR,
2.	YouTube	https://www.youtube.com/t/terms	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
3.	Google	https://policies.google.com/terms?hl=en&gl=be	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
4.	LinkedIn	https://www.linkedin.com/legal/user-agreement	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
5.	Twitter	https://twitter.com/en/tos#intlTerms	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,
6.	Google Maps	https://www.google.com/intl/en_be/help/terms_maps/	1) unauthorized access to data, 2) loss of control over your data, 3) no possibility of exercising the rights under the GDPR, 4) other, negative effects indicated in recital (75) of the preamble to the GDPR: material and non-material effects,

[1] GDPR: https://uodo.gov.pl/en/514