1. Data Controller

NordicsSpin, located at Mannerheimintie 42, 00100 Helsinki, Finland, is the data controller for your personal information.

Contact: support@nordicsspin.com

Data Protection Officer: dpo@nordicsspin.com

2. Lawful Bases for Processing

We process your personal data based on:

• Legitimate Interest: To provide and improve our services
• Consent: For analytics and marketing (where you have opted in)
• Legal Obligation: To comply with applicable laws and regulations

3. Data We Collect

3.1 Information You Provide

• Contact information (email address, name)
• Account preferences and settings
• Communications with our support team

3.2 Technical Information

• IP address and device information
• Browser type and version
• Usage data and interaction patterns
• Cookies and similar technologies (with consent)

3.3 Game Data

• Game progress and virtual achievements
• Virtual credits and in-game purchases
• Gameplay statistics and preferences

4. How We Use Your Data

• Providing and maintaining our entertainment services
• Processing age verification (required by law)
• Customer support and communications
• Improving user experience and platform functionality
• Analytics and performance monitoring (with consent)
• Marketing communications (with explicit consent)

5. Data Retention

We retain your personal data only as long as necessary:

• Account data: Until account deletion or 3 years of inactivity
• Support communications: 2 years after resolution
• Analytics data: Maximum 26 months (with consent)
• Legal compliance data: As required by Finnish law

6. Your Rights Under GDPR

You have the right to:

• Access: Request information about data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Data Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Object: Object to processing based on legitimate interest
• Withdraw Consent: Withdraw consent for analytics/marketing

To exercise these rights, contact us at support@nordicsspin.com

7. Data Processors and Third Parties

We may share data with trusted processors for:

• Cloud hosting services (within EU/EEA)
• Analytics providers (with your consent)
• Customer support tools
• Payment processors (for virtual credit purchases)

All processors are bound by data protection agreements and GDPR compliance.

8. No Sale of Personal Data

We do not sell, rent, or trade your personal data to third parties for commercial purposes.

9. Minors

Our services are restricted to users 18+ only. We do not knowingly collect data from minors and actively work to prevent underage access.

10. International Transfers

Your data is processed within the EU/EEA. Any transfers outside this area are protected by appropriate safeguards such as Standard Contractual Clauses.

11. Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security assessments.

12. Changes to This Policy

We will notify you of significant changes to this privacy policy. Continued use of our services constitutes acceptance of the updated policy.

13. Complaints

If you have concerns about how we handle your data, you can:

• Contact us at dpo@nordicsspin.com
• File a complaint with the Finnish Data Protection Authority