What information we collect
We may collect, ourselves or through third parties, the following information about you:
Registration and contact information: We collect information about you when you register to use RAWG and otherwise provide contact information to us. This may include full name, username, email address, profile picture, profile description, Steam account ID, PlayStation Network account ID, Xbox account ID.
Information you create while using RAWG: We collect the information you post or otherwise generate on RAWG, such as list of your games, reviews, game ratings, discussions, collections and comments.
Technical, usage and location information: We automatically collect information on how you interact with RAWG. This may include registration referral, referrer URL, the features of the browser and the operating system, including the language used, the date of registration, the time of last log in and visit, cookies (more details) and other types of usage data (more object Object). We may also collect location information automatically provided by your device.
Information from third-party platforms: We may collect from gaming platforms, including Steam, PlayStation Network, Xbox Live, public information about your list of video games, in-game achievements and, in case of Steam, also about the time spent in each game. We may collect information when you interact with our content on third-party sites or platforms, such as social networks. This may include information such as “Likes”, profile information gathered from social networks or the fact that you viewed or interacted with our content.
Unless specified otherwise, all information requested by RAWG is mandatory and failure to provide it may make it impossible for us to provide our services. In cases where we specifically state that some information is not mandatory, you are free not to communicate it without consequences to the availability or the services.
How we use your information
Purposes of processing
We may process your information for the following purposes:
- to provide, facilitate and support the services we provide to you;
- to perform our obligations under the Terms;
- to manage your registered user account;
- to communicate with you and respond to your requests;
- to deliver marketing information;
- to improve our services;
- to provide you with a customised experience when you visit RAWG;
- to secure our systems and applications;
- to enforce our legal rights and comply with the law.
We may also process your information for the purposes and via the services listed below:
User database management:
These services allow to build user profiles and track user activities through analytics features. This information may also be matched with publicly available information about the user (such as social networks’ profiles). These services may also be used as a medium for communications.
Hosting and backend infrastructure:
These services host data and provide infrastructure that enable RAWG to run. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where your information is stored.
These services allow to monitor and analyse web traffic and keep track of user behavior.
Heat mapping and session recording:
These services are used to display the areas of a page where users most frequently move the mouse or click to reveal the points of interest. This makes it possible to monitor and analyse web traffic and keep track of user behavior.
Remarketing and behavioral targeting:
These services help to manage the tags or scripts needed on RAWG in a centralised fashion. This results in the users’ information flowing through these services, potentially resulting in the retention of this information.
We may use your information for automated decision-making, including profiling (more details here). We may also use your information to create and update user profiles. This allows us to evaluate your choices, preferences and behaviour for the purposes outlined in the section Purposes of processing.
We may engage in this type of data processing only if it is necessary to enter into or perform an agreement with you, or on the basis of your explicit consent.
The rationale behind the automated decision-making is:
- to enable or otherwise improve the decision-making process;
- to grant all our users fair and unbiased treatment based on consistent and uniform criteria;
- to reduce the potential harm derived from human error and personal bias, which may potentially lead to discrimination or imbalance in the treatment of users.
Users, whose information is processed as part of the automated decision-making, have the right:
- to obtain an explanation about any decision taken as a result of automated decision-making and express their point of view regarding this decision;
- to challenge a decision by asking us to reconsider it or take a new decision on a different basis;
- to request and obtain human intervention on such processing;
- to object to profiling activity.
How we share your information
We may share your information with a third party only to the extend it is necessary to achieve the purposes outlined in the section Purposes of processing.
We may be allowed to retain your information for a longer period when you have given consent to such retention. We may also retain your information if required to do so by law or upon an order of a state authority.
How you can control your information
You have the following rights in relation to the processing of your information:
- to obtain confirmation as to whether or not we process your information, learn about certain aspects of such processing and obtain a copy of your information that we process;
- to verify the accuracy of your information and ask us to update or correct it;
- to withdraw consent where you have previously given your consent to the processing of your information;
- to object to the processing of your information. Where your information is processed for direct marketing purposes, you can object at any time to its processing for such marketing, which includes profiling to the extent that it is related to such direct marketing;
- to restrict, under certain circumstances, the processing of your information;
- to obtain, under certain circumstances, the erasure of your information;
- to receive, under certain circumstances, your information in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance;
- to lodge a complaint before a competent data protection authority.
You can direct any requests related to the exercise of your rights to us at [email protected] We will process them free of charge and as early as possible, but always within one month.
Please note, that RAWG does not support “Do Not Track” requests. To determine whether any of the third-party services we use honor the “Do Not Track” requests, please read their privacy policies.
Effective Date: 25/05/2018
Behind the Games, UAB Jovaro g. 7-2, 03104 Vilnius, Lietuva
Definitions and legal references
Automated decision-making: A process by which a decision which produces legal effects concerning a user or similarly significantly affects him or her, is taken solely by technological means, without any human intervention. Automated decisions are mostly based on algorithms subject to predefined criteria, which may also be provided by third parties.
Cookies: A piece of text entered into the memory of your browser by a website, allowing the website to store information on your device and later retrieve it. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer.
Data processor: The natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.
Legal bases for personal data processing: The grounds for lawful processing of personal data listed below. Processing shall be lawful only if and to the extent that at least one of the following applies:
- a. the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
- b. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
- c. processing is necessary for compliance with a legal obligation to which the controller is subject;
- d. processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- e. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- f. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Personal data, personal information: Any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Profiling: Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Services: The services provided by RAWG, as described in the Terms.
Usage data: Information collected automatically through RAWG or third-party services employed in RAWG, which can include: IP addresses, URI addresses (Uniform Resource Identifier), the time of the request, the method utilised to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system used, the various time details per visit (e.g., the time spent on each page) and the details about the path followed with special reference to the sequence of pages visited, and other parameters about the device operating system, browser and IT environment.