Privacy Policy

1. Data Controller The controller of your personal data collected via the ninergames.com website is: Niner Games sp. z o.o. ul. Nowa 7/38, 41-600 Świętochłowice, Poland KRS (National Court Register Number): 0000872268 NIP (Tax Identification Number): 7922311226 REGON (National Business Registry Number): 38765120000000

In all matters related to personal data protection, you can contact the Controller electronically at the following e-mail address: hello@ninergames.com.

2. Purposes and Legal Bases for Data Processing Your personal data is processed securely and in compliance with the requirements of the General Data Protection Regulation (GDPR). The data may be processed for the following purposes:

• Handling inquiries and communication: Processing data provided in e-mail correspondence (e.g., e-mail address, name) to respond to submitted inquiries (Art. 6(1)(f) GDPR - legitimate interest of the Controller).
• Provision of services and performance of contracts: In the event of establishing business cooperation or using our services, the data is necessary to take steps at the request of the data subject prior to entering into a contract, and for its subsequent performance (Art. 6(1)(b) GDPR).
• Fulfillment of legal obligations: Fulfilling obligations resulting from legal provisions, including tax and accounting law, such as issuing and storing invoices (Art. 6(1)(c) GDPR).
• Defense or pursuit of claims: In order to establish, exercise, or defend legal claims, which constitutes a legitimate interest of the Controller (Art. 6(1)(f) GDPR).

3. Data Recipients Your personal data is not sold or shared with third parties without a clear legal basis. The recipients of the data may only be trusted entities processing data on behalf of the Controller, such as:

• IT and website hosting service providers,
• entities providing accounting, legal, or advisory services,
• software and e-mail service providers. These entities process data solely on the basis of relevant data processing agreements and are strictly obliged to maintain confidentiality and the highest security standards.

4. Data Retention Period Your data will be processed only for the time necessary to achieve the purpose for which it was collected:

• Correspondence data - until the end of the message exchange in a given matter, and then for the period necessary to secure potential claims.
• Data related to the performance of contracts - for the entire duration of the contract, and then until the expiration of claims arising from it.
• Accounting and tax data - for the period required by applicable law (e.g., 5 years from the end of the calendar year in which the tax payment deadline expired).

5. Rights of Data Subjects Every data subject has a broad catalog of rights provided for by the GDPR:

• Right of access to data and to receive a copy of it.
• Right to rectification (correction) of your data.
• Right to erasure ("right to be forgotten"), provided there are no overriding legal grounds requiring its further processing.
• Right to restriction of processing.
• Right to data portability to another controller.
• Right to object to the processing of data based on the legitimate interest of the Controller. To exercise your rights, simply contact us at: hello@ninergames.com.

You also have the right to lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office - PUODO) if you consider that our processing of your data violates personal data protection regulations.

6. Data Security The Controller implements the necessary technical and organizational measures to prevent unauthorized access to your personal data, its modification, loss, or destruction (including, among others, encrypting connections with an SSL certificate). Access to the data is granted only to authorized persons.

7. Data Transfer Outside the EEA As a rule, users' personal data is not transferred outside the European Economic Area (EEA). However, if there is a need to use the services of IT infrastructure providers based outside the EEA, we will ensure that the transfer is based on appropriate legal safeguards (e.g., standard contractual clauses approved by the European Commission).

8. Changes to the Privacy Policy We strive to ensure that our Privacy Policy is always up to date and in compliance with applicable law. Therefore, the Controller reserves the right to make changes to it. The new content of the document will always be published on this page.