<p>
<br>
<br>
<br>
</p>
<p>CCP ehf.
(hereinafter referred to as “CCP”, “we,” “our,” “us”) recognizes that you care how your personal data is collected and used.
CCP has created this Privacy Policy to inform you of our practices regarding collection, use, and sharing of personal data.
Please read the following carefully to understand our views and practices regarding your personal data and how it will be treated.</p>
<p>The practices described in this Privacy Policy apply to our processing of personal data of:</p>
<ul>
<li>Our customers collected through our websites eveonline.com, gunjack.com, gunjack2.com, evevalkyrie.com, playsparc.com, ccpgames.com (each, a “Site”, collectively, the “Sites”) and our games EVE Online®, Gunjack™, Gunjack 2: End of Shift™, EVE: Valkyrie™, and Sparc™ (each, a “Game”, collectively, the “Games”).
and</li>
<li>Individuals other than our customers, employees and job applicants, including our contact points with vendors and other third parties which we do business with (“business partners”) and guests at the CCP headquarters in Reykjavik, Iceland (“CCP Headquarters”) (collectively, referred to as “business contacts”).</li>
</ul>
<p>Sites and Games are collectively referred to as “Services”.
Your use of Services can also be subject to any applicable Terms of Service, including but not limited to the relevant End User License Agreement (“EULA”).
This privacy policy forms part of our Terms of Service.</p>
<p>For the purpose of any applicable data protection and privacy legislation, the data controller is CCP ehf.
of Bjargargata 1, 102 Reykjavík, Iceland.</p>
<p>We have appointed a Data Protection Team to oversee compliance with this Privacy Policy.
The Data Protection Team may be contacted at request@privacy.ccpgames.com.
Furthermore, we have appointed Áslaug Björgvinsdóttir, lawyer, as our Data Protection Officer.
The Data Protection Officer can be contacted at dpo@ccpgames.com.</p>
<p>This Privacy Policy will be published in English but may be translated into additional languages for convenience of the reader.
If this Privacy Policy is published in any language other than English, the English language version will be the governing agreement and shall control interpretation of all matters discussed below.</p>
<p>This Privacy Policy is based on the General Data Protection Regulation 2016/679 (“GDPR”) and Icelandic data protection legislation (collectively referred to as “European Data Protection Legislation”), as CCP is established in Iceland.</p> Processing Of Personal Data Of Customers A.
What personal data do we collect and why? <p>We collect personal data from the users of our Services.
What personal data is collected about you depends on your use of our Services.</p> Sites <p>When you use our Sites, we gather information about your computer, including the following personal data:</p>
<ul>
<li>IP address;</li>
<li>operating system.
and</li>
<li>browser type.</li>
</ul>
<p>We also collect information regarding customer traffic patterns and Site usage, which may be stored with an IP address, including details of:</p>
<ul>
<li>transactions you carry out through our Sites;</li>
<li>fulfilment of your orders;</li>
<li>your visits to our Sites, such as location data, traffic, weblogs, referring web addresses and resources you access, including pages visited and search terms entered.</li>
</ul>
<p>Please read our Cookie Policy to learn more about how we use cookies and web analytics.
You can find our Cookie Policy at www.ccpgames.com/cookie-policy.</p> Account And Purchasing <p>When you create an account or otherwise purchase Services from CCP or our business partners, you are required to submit the following personal data:</p>
<ul>
<li>name;</li>
<li>age;</li>
<li>valid email address;</li>
<li>phone number;</li>
<li>payment method.
and</li>
<li>other information necessary to confirm ownership of account, such as a credit card number.</li>
</ul>
<p>During the registration process you are also asked to select a password and you are assigned with a login name and a character name.
We also store your transaction data and subscription status.</p>
<p>If you do not provide the above listed data, we may not be able to provide you with the requested products or services.
We may also ask you for personal data when you enter a competition or promotion sponsored by us, or our business partners, or when you report a problem with our Services.</p>
<p>When account creation and purchasing relating to our Games takes place via our third-party business partners, such as PlayStation®, Steam, Google and Oculus, we receive the account and purchasing data from those third parties.</p> Games <p>When using a Game, we collect the following personal data relating to your player account:</p>
<ul>
<li>first and last name, profile name or other identification;</li>
<li>email address;</li>
<li>age and date of birth;</li>
<li>country of residence;</li>
<li>preferences and settings, including communication or content restrictions and parental control settings;</li>
<li>language selection;</li>
<li>activity of an account;</li>
<li>transactions carried out through using stored tokens;</li>
<li>friends and block lists, where applicable.
and</li>
<li>any other information you voluntarily provide in relation to your player’s account.</li>
</ul>
<p>We also collect your gameplay information, meaning any information relating to your play or use of a Game, including your:</p>
<ul>
<li>gameplay statistics;</li>
<li>in-game transaction history and trends;</li>
<li>history of technical issues and support usage.
and</li>
<li>History of contributed and received user content, such as messages in chat rooms, on bulletin boards and other user-to-user areas.</li>
</ul>
<p>We may monitor your game hardware, solely for the purpose of establishing whether in playing the game you are using software created or approved by ccp, or whether you are using unauthorized software created by you or a third party in contravention of the applicable terms of service, including your:</p>
<ul>
<li>Ip address;</li>
<li>operating system;</li>
<li>browser type;</li>
<li>CPU/processor;</li>
<li>memory;</li>
<li>graphics card;</li>
<li>network adapter;</li>
<li>MAC address.
and</li>
<li>local/regional settings.</li>
</ul>
<p>We may also use your IP address to monitor your compliance with the Terms of Service, including to connect your different accounts.</p>
<p>For the purposes of monitoring compliance with the applicable Terms of Service, we also keep a description of your breaches of the Terms of Service.
This may include information on inappropriate and/or restricted conduct, complaints involving your actions from other players, whether you have been banned from specific Games, whether your account/s has/have been suspended or the EULA terminated and for what reason.
In limited cases we may also process data regarding your conduct outside the Games where such data is relevant to the respective breach of the Terms of Service.</p>
<p>As a general rule we collect personal data directly from you or indirectly, such as from your activity on our Sites and Games.
We may however collect personal data about you from third parties through Web Analytics, as further described in our Cookie Policy at https://www.ccpgames.com/cookie-policy.
In relation to refunds or ownership verification we may also request your credit card information from our payment service provider.
The same can apply if we need to verify that an account has been hacked.
In case we receive a complaint about your activities in the Games, such data is usually received from other players.</p> Customer Support &.
Quality Assurance <p>We use the following personal data when providing support to our customers:</p>
<ul>
<li>IP addresses;</li>
<li>in-game activity;</li>
<li>player’s communication with CCP and with each other.
and</li>
<li>other data voluntarily submitted by the data subject or another customer.</li>
</ul>
<p>We assure the quality of our Services by testing the Games and carrying out bug reporting, during which we may also process the following data, in addition to the above:</p>
<ul>
<li>hardware information.
and</li>
<li>player account data.</li>
</ul> Volunteer Program <p>When applying to become a volunteer in the EVE Online® volunteer program you are required to provide the following personal data:</p>
<ul>
<li>name and contact data;</li>
<li>professional experience.
and</li>
<li>relevant skills and qualities.</li>
</ul>
<p>We also ask you to answer questions regarding your use of EVE Online® as well as other questions which are necessary for us to choose the right candidates for the volunteer program.
If you do not provide the above data, we may not be able to consider you for a position in the volunteer program.
Volunteers at a Lead or Senior Lead level have access to the questionnaire data of players who apply to the EVE Online® volunteer program.</p>
<p>The following information is processed on successful candidates who become a part of the volunteer program:</p>
<ul>
<li>scan of ID;</li>
<li>credits received for use in game.
and</li>
<li>registry of support activities undertaken by the volunteer.</li>
</ul> B.
How do we use your data and on what ground? To Contact You <p>We may use your personal data to contact you.
For example, we may send you e-mail messages under the following circumstances:</p>
<ul>
<li>to respond to an inquiry or request for information;</li>
<li>to thank you for contacting us;</li>
<li>to welcome you to our Services;</li>
<li>to communicate with you regarding your use of the Services.
and</li>
<li>to notify you about changes to our Services.</li>
</ul>
<p>It may be necessary for us to contact you for the performance of our Services, but also for the purposes of our legitimate interests of maintaining our business relationship.</p> To Provide And Receive Services <p>When you create an account or otherwise purchase Services from CCP we use the personal data provided to verify your identity and age and to provide services and carry out our obligations arising from any contract between you and CCP.
The same applies to the personal data provided in relation to your player account.</p>
<p>The processing of players’ gameplay information is necessary for us to perform our contract with players of the respective Games.
The information may also be necessary for maintaining, operating, developing, administrating and supporting our Services, for example through Customer Support and Quality Assurance.</p>
<p>Moreover, the processing of gameplay information furthers CCP’s legitimate interests of reviewing, researching and developing our Services.</p>
<p>Our processing of personal data of applicants for the volunteer program is necessary to take steps prior to entering into a contract regarding volunteer services, while the processing of personal data of our volunteers is necessary for the performance of such a contract.</p> To Ensure Compliance With The Terms Of Service <p>The monitoring of your Game hardware, as described herein, furthers CCP’s legitimate interest of monitoring whether unauthorized software is being used in contravention of the applicable Terms of Service.</p>
<p>Processing of complaints from other players and information regarding breaches of the Terms of Service is also based on CCP’s legitimate interests to ensure the compliance of all players with the Terms of Service.</p> For Marketing Purposes <p>We may use your personal data for marketing purposes, based on our legitimate interest.
For example, we may use your e-mail address to send you messages about new offerings and features of CCP and to market and offer CCP’s products and services which we think you might be interested in, based on your actions and activity in our Games.
We may also use your e-mail address to enable us to display personalized ads to you via social media sites.</p>
<p>You can always opt-out of receiving marketing messages from us by contacting the Data Protection Team.</p>
<p>We may also ask for your consent to send you marketing for the products and services of our business partners.
When the collection and processing of your personal data is based on your consent, you can always withdraw the consent.
All communications relating to such withdrawal shall be directed to our Data Protection Team.</p> C.
To whom is your personal data disclosed? Disclosure To CCP Companies <p>As the CCP corporate group works closely together to create cutting edge games, we may share your personal data with our subsidiary companies and our parent company for the purpose of improving and developing our Services.
These companies are:</p>
<ul>
<li>CCP Games UK Limited, United Kingdom;</li>
<li>CCP Information Technology (Shanghai) Co.
Limited, People’s Republic of China;</li>
<li>Pearl Abyss Corporation, Republic of Korea.
and</li>
<li>CCP North America, Inc., USA.</li>
</ul> Disclosure To Third Parties <p>CCP may disclose your personal data to third party contractors, consultants and suppliers in relation to their work for us.
Personal data may for example be disclosed to external parties which provide us with IT services and third parties which assist us in administering, operating, maintaining and supporting the Services, based on our legitimate interests of outsourcing such services.
In these cases we ensure that these third parties process your personal data in accordance with this Privacy Policy based on a specific data processing agreement.</p>
<p>In the event you make a payment on our Sites through a payment service provider, we may transfer your contact details, that is name, address and e-mail address, to the applicable payment service provider, where it is necessary for the execution of payment.</p>
<p>We may also transfer the e-mail addresses of our players and account holders to social media platforms, such as Facebook’s Custom Audience’s platform, which enables us to display personalized ads to persons on our e-mail list.
This transfer is based on our legitimate marketing interests.</p>
<p>You can always opt-out of the transfer of your e-mail address to third parties by contacting the Data Protection Team.</p>
<p>CCP may disclose your personal data to law enforcement or other government officials, as CCP, in its sole discretion, deems necessary or appropriate to investigate or resolve possible crimes or to respond to judicial, regulatory, agency or similar inquiries.
Disclosure may also be necessary in emergency situations and to ensure the rights and safety of customers, CCP staff or third parties.</p>
<p>If the ownership or control of all or part of our Services changes, we may transfer your personal data to the new owner.</p> Aggregated Information <p>We may collect aggregated demographic information about our users, such as age, interests, etc.
We may share certain aggregated demographic information with our business partners regarding the users of the Services.
The aggregated information that we provide is not directly linked to you or any other identifiable person and is therefore not considered personal data.</p> International Transfer Of Data <p>The data we collect from you may be transferred to, stored and processed by CCP companies at one or more destinations both inside and outside the European Economic Area (“EEA”), including the United States of America, the Republic of Korea and the People’s Republic of China for any purposes set out in this Privacy Policy.</p>
<p>Our contractors, consultants and suppliers may also be located outside the EEA.</p>
<p>However, we only transfer your personal data to countries outside the EEA if such transfer is permitted under the applicable privacy legislation.
The transfer to CCP companies outside of the EEA is based on Standard Contractual Clauses adopted by the European Commission.</p> D.
Information about children <p>We do not knowingly collect any personal data from children under 13 years of age.
If you become aware that a child has provided us with personal data without necessary parental consent, please contact the Data Protection Team.</p> E.
How long do we keep your data? <p>Except as otherwise permitted or required by applicable law or regulatory requirements, we are committed to retaining your personal data only for as long as it is necessary for you to use our Services or until you request to have your personal data deleted, whichever comes first.</p>
<p>If you request to have your personal data deleted, we will delete your personal data from your Player Account, which will render other data, such as Gaming Data, anonymous and non-traceable to you as an individual.
The user generated content that you have created, such as your avatar, messages in chat rooms, on bulletin boards and other user-to-user areas may not be deleted, but you will not be associated with that content after the deletion of your Player Account personal data.</p>
<p>Data regarding permanent suspension of a player is kept for an unlimited period, as the player is permanently suspended from parts of our Services.
In such cases, Player Account data cannot be deleted, as it is necessary for CCP to keep a record of the ban in order to prevent the player from accessing specific Services again.</p>
<p>We may keep your personal data for longer for research or statistical purposes.
If we do, we will make sure your personal data is anonymised and non-traceable to you as a person.
We may also keep your personal data for longer if required to do so for legal or regulatory reasons.</p> Processing Of Personal Data Of Business Contacts A.
What personal data do we collect about our business contacts and why? <p>We collect and maintain different types of personal data on our business contacts, depending on our relationship with them.</p>
<p>For business management purposes and to be able to reach our business partners easily, we process the following personal data on our business contacts:</p>
<ul>
<li>contact details, including name, place of work, telephone and e-mail address.
and</li>
<li>communication between the business contact and CCP.</li>
</ul>
<p>The above personal data usually comes directly from you, or the entity you work for, i.e.
our business partner.
The processing of the data is based on the legitimate business interests of CCP to maintain a relationship with its business contacts as well as on CCP’s contract with its business partners where the communication is necessary for the performance of that contract.</p>
<p>When you visit the CCP Headquarters we may ask you to sign into our visitor management system, where you are asked to provide the following information:</p>
<ul>
<li>contact details, including name, place of work and e-mail address;</li>
<li>photograph.
and</li>
<li>who you are meeting with.</li>
</ul>
<p>You will also be asked to sign a confidentiality and non-disclosure agreement regarding any proprietary information you may become aware of during your visit.</p>
<p>The reason we ask you for the above personal data is for us to maintain a safe work environment at the CCP headquarters, for both our employees and guests, by being able to identify our guests at any given time.</p>
<p>At the CCP Headquarters, we also use video surveillance, which may record your presence during your visit.</p>
<p>Our processing of personal data via the visitor management and video surveillance systems are based on our legitimate interests of maintaining a safe work environment, as well as safeguarding networks, devices and other property of CCP.</p> B.
To whom is the personal data of business contacts disclosed? <p>We may share your personal data with contractors, consultants and other third parties who require such data to assist us with managing our relationship with you.
Third parties who provide us with information technology and data processing services may also have access to your data, as necessary.</p>
<p>These third parties may be established outside the EEA.
However, we only transfer your personal data to countries outside the EEA if such transfer is permitted under applicable privacy legislation.</p>
<p>Your personal data may also be disclosed to third parties as permitted or required by applicable law.</p>
<p>Moreover, your personal data may be disclosed to third parties due to regulatory requirements or in order to comply with valid legal processes such as search warrants, subpoenas or court orders.
In addition, personal data may be disclosed or transferred to a third party in the event of a change in ownership of CCP.</p> C.
For how long does CCP keep data of business contacts? <p>We keep the contact data of our business contacts for four (4) years after the end of our contract with a business partner.
If data relating to our business contact falls under book-keeping laws, such data is kept for seven (7) years, in accordance with Icelandic book-keeping laws.</p>
<p>As regards personal data collected and processed via video surveillance, we keep the data for no longer than ninety (90) days, unless the data is necessary to establish, exercise or defend against legal claims.
Backup files of video surveillance data may however be kept for longer.</p>
<p>We keep personal data collected via our visitor management system data, and the confidentiality and non-disclosure agreements signed in that system, for as long as we deem necessary based on the nature of our relationship with you.</p> How Is Your Data Protected? <p>We take precautions to protect your personal data from loss, unauthorized access, copying, use, modification or disclosure.</p>
<p>CCP’s security measures include industry-standard technology and equipment to help protect your personal data, and we maintain security measures to allow only the appropriate personnel and third parties access to your personal data.</p>
<p>Where we have given you (or where you have chosen) a password that enables you to use/access the Services, you are solely responsible for keeping this password confidential.
We ask that you not share your password with anyone.</p> How Can You Exercise Your Rights Provided Under Data Protection Legislation? <p>CCP is committed to ensuring your rights under the European Data Protection Legislation.</p>
<p>Customers can view and rectify some elements of their personal data on their online account system, or request that our Data Protection Team rectify their data.
Should business contacts require the rectification of their data, a request should be submitted to the Data Protection Team.</p>
<p>You have the right to access the personal data CCP has collected about you and to be informed about the purpose of its collection.
You may also be entitled to a copy of the personal data undergoing processing.
Furthermore, you may under certain circumstances and where technically feasible, have the right to request us to transfer your personal data to a third party.</p>
<p>You may also have the right to request us to restrict the processing of your personal data, for example if you object to its processing, but prefer the data not to be erased.</p>
<p>If the processing of your personal data is based on CCP’s legitimate interests, you have the right to object to the processing, following which we must stop the processing unless we demonstrate a compelling legitimate ground for the processing which override your interests.</p>
<p>In certain instances, you have the right to have your personal data erased, such as where the data is no longer necessary in relation to the purpose for which they were collected or otherwise processed, or if you withdraw your consent for the processing of your personal data.</p>
<p>Your rights to access, erasure, restriction and portability of data are however not absolute.
In those instances where we cannot accept your request, we will inform you of the reasons why, subject to any legal or regulatory restrictions.</p>
<p>Please refer all requests concerning your rights to our Data Protection Team, contactable via request@privacy.ccpgames.com.
In general, we keep requests from data subjects for a year from their receipt.
Disputed requests may however be kept for longer, if deemed necessary.</p> Change Of Control <p>If CCP experiences a “Change of Control” (defined below), then we may amend our privacy practices as described in this Privacy Policy.
We will disclose your personal data to the company or other legal entity that succeeds our operation of the Services.
The privacy policy of the succeeding legal entity will then govern the personal data that we have collected from you under this Privacy Policy.
However, if applicable law prohibits the succeeding legal entity’s privacy policy from governing your personal data, then this Privacy Policy shall continue to govern.
“Change of Control” means any of the following events:</p>
<ul>
<li>a reorganization, merger, consolidation, acquisition or other restructuring involving all or substantially all of our voting securities and/or assets, by operation of law or otherwise;</li>
<li>insolvency;</li>
<li>a general assignment for the benefit of creditors;</li>
<li>appointment of a receiver for our business or assets;</li>
<li>we become subject to any bankruptcy or insolvency proceedings, whether domestic or foreign.
or</li>
<li>our liquidation, voluntarily or otherwise.</li>
</ul> Links To Other Websites <p>The Sites may contain links to other websites.
We are not responsible for and shall not have any liability arising from the privacy practices or the content of other websites.</p> Questions About Our Privacy Policy <p>If you have any questions about this Privacy Policy or how we manage your personal data, please contact our Data Protection Team at request@privacy.ccpgames.com.</p>
<p>If you are unsatisfied with our response, you are entitled to make a written submission to the respective data protection authorities, including the Icelandic Data Protection Authority (www.personuvernd.is).</p> Data Protection Officer And Contact Information <p>We have appointed an external Data Protection Officer (“DPO”) to oversee compliance with this Privacy Policy.
The contact information for our DPO is as follows:</p>
<ul>
<li>Áslaug Björgvinsdóttir</li>
<li>Efstaleiti 5, 103 Reykjavík, Iceland</li>
<li>Tel.: +354 540 0300</li>
<li>Email: dpo@ccpgames.com</li>
</ul>
<p>The CCP Data Protection Team can be contacted at the following address:</p>
<ul>
<li>CCP ehf.</li>
<li>Data Protection Team</li>
<li>Bjargargata 1, 102 Reykjavík, Iceland</li>
<li>Tel.: +354 540 9100</li>
<li>Email: request@privacy.ccpgames.com</li>
</ul> Revisions To This Privacy Policy <p>CCP may make changes to this Privacy Policy to reflect changes to our legal or regulatory obligations or to the manner in which we process your personal data.
Any changes to this Privacy Policy will be effective from the time they are posted on the Sites or under our Terms of Services, as applicable.</p>