Effective May 25, 2018
By “Personal Data”, we refer to data that relates to you as an identified or identifiable natural person. The term “Personal Data” may include your name, your address, your telephone number, your e-mail address, your age, your gender, your game preferences, for instance. Anonymous information, which we are not in a position to relate to you, does not qualify as “Personal Data”.
1. CONTROLLER’S NAME AND CONTACT DETAILS
Controller in the sense of the General Data Protection Regulation (GDPR) and other data protection or data privacy laws in the Member States of the European Union and other guidelines with a data protection nature regarding our online and mobile games including, but not limited to, "World of Tanks", "World of Warplanes", "World of Warships", "World of Tanks Blitz", "World of Warships Blitz", "Total War: Arena", associated web-sites as http://worldoftanks.eu, http://worldofwarplanes.eu, http://worldofwarships.eu, https://wotblitz.eu, https://wowsblitz.eu, http://totalwararena.net, http://wargaming.net, as well as any other Wargaming games and Wargaming web-sites on which this Policy is posted:
Wargaming Group Limited
105, Agion Omologiton Avenue
Controller in the sense of the General Data Protection Regulation (GDPR) and other data protection or data privacy laws in the Member States of the European Union and other guidelines with a data protection nature regarding "World of Tanks" on Xbox 360 and Xbox One, "World of Tanks" on PlayStation®4 (“Console Games”), for example, in relation to the https://console.worldoftanks.com/ website, is:
Wargaming World Limited
105, Agion Omologiton Avenue
Both entities are referred to as “Wargaming”, “we”, “our” and “us” in this Policy. The term “Services” refers to the act of providing you with the opportunity to use the named games (“Games”), websites (“Sites”), Wargaming account ("Account"), any of our other products and services (including support services, forums) related to the Games ("Ancillary Services"), for example, the “World of Tanks Assistant” application.
2. CONTACT DETAILS OF THE DATA PROTECTION OFFICER (DPO)
The contact details of Data Protection Officer of Wargaming are:
Wargaming Data Protection Officer
105, Agion Omologiton Avenue
3. GENERAL INFORMATION IN BRIEF
We process personal data only when necessary for the performance of a contract with you. Processing is necessary for compliance with a legal obligation to which we are subject, or based on our legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms for which require the protection of your Personal Data.
Our legitimate interests are to provide our Services in an effective, safe and harmless manner. We want to provide everyone with a fair and balanced experience when using our Services.
3.1. YOUR PREFERENCES
You can choose how we use your Personal Data using our Account Management Tool. As we need to verify your identity before we follow your instructions on Personal Data use, you need to have a registered Account in order to access the Account Management Tool. This means that if you are using a demo version of the Account, you will only be able to fully control our use of your data after you complete the Account here.
For example, through the Account Management Tool you can:
3.2. INFORMATION SECURITY
We and our employees understand the need for user privacy, and we maintain reasonable and appropriate security procedures to protect your information from loss, misuse and unauthorised access, disclosure, alteration and destruction, taking into due account the risks involved in the processing and the nature of the Personal Data.
3.3. PROCESSING INFORMATION BY THIRD PARTIES
We may share Personal Data with our affiliates, subsidiaries, vendors or agents working on our behalf for the purposes described in this Policy. For example, we may hire companies to assist with protecting and securing our systems or services. Any vendor or agent that we retain must comply with our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. Those companies may be located outside of the European Economic Area. Read more in Section 6 “How we share your information”.
We recognise that we have a special obligation to protect personal information obtained from children. We will not knowingly collect Personal Data from any child, or process such information, without parental consent. For the purpose of this Policy, a child means any individual who is under the age of 18 (or the minimum legal age to consent to the collection and processing of Personal Data where this is different under applicable law).
3.5. DATA RETENTION
We keep most of your Personal Data gathered and processed for the purposes described in this Policy for as long as you continue to use our Services, e.g. you have an activated Account in one of our Games. We will delete your Personal Data after you request your Account deletion and the grace period of 45 (forty-five) calendar days, during which we can restore your Account, expires. The process of erasing your Personal Data can take up to one month from expiry of the grace period and, considering the complexity and number of requests, may be extended by a further two months. Read more in Section 7.3 “Right to erasure”.
3.6. GAMES NOT USING THE ACCOUNT
Some of the Games do not use the Account. You will not be able to exercise your rights with regard to those Games through the Account Management. For this reason, we are offering you other tools to export your Personal Data, delete it, and object to our use of your Personal Data in accordance with Section 7 “Your rights”, as well as to manage your subscriptions.
Also, there are some differences in the Personal Data that we collect about users of the Games for which the Account is created and users of other Games. For example, we do not collect your phone number and email address if you use the Games for which the Account is not created.
With regard to the Games that do not use the Account, you can exercise your rights by filing a request to that effect to Customer Support or as otherwise indicated in the respective Game.
Finally, you may link some of the Games that do not use the Account to your Account (where such function is available). Please note that control over your Personal Data in such Games is separate from control over your Personal Data relating to your Account. For example, to delete your Personal Data in “World of Warships Blitz” you will need to contact Customer Support as suggested in this Game, while deletion of the Personal Data relating to your Account shall be performed through the Account Management.
4. INFORMATION WE COLLECT
In relation to your use of our Services, we gather information either directly from you (when you provide information to us) or indirectly (e.g. through our Site’s technology).
4.1. INFORMATION WE COLLECT DIRECTLY
We collect Personal Data and other information that you voluntarily provide. It is entirely your decision to provide the requested information. However, your use of certain Services is possible only if you provide required information, e.g. while creating an Account.
When setting up an Account, you may be asked to provide Personal Data including, but not limited to, your name, email address and telephone number.
We may obtain your Personal Data when you register for and use our other Services, e.g. game forums, chats, or when you provide feedback about our Services. This data includes:
4.2. INFORMATION WE COLLECT INDIRECTLY
We indirectly collect a variety of information through your interaction with and use of our websites. This information may include, but is not limited to, browser and device information, data collected through automated electronic interactions, application usage data, demographic information, geographic, geo-location information, statistical and aggregated information (“Other Information”). Statistical or aggregated information does not directly identify a specific person, but it may be derived from Personal Data. For example, we may aggregate Personal Data to calculate the percentage of users in a particular country. If we combine Other Information with Personal Data, we will treat the combined information as Personal Data.
4.2.1. Tracking Data and Cookies
Website traffic volume and patterns, such as the number of visitors to a given website or page on a daily basis is typically referred to as “Tracking Data”. This type of indirectly collected information is gathered through various means, such as an IP address, which is a number that is automatically assigned to your computer whenever you are surfing the web. Web servers, the computers that “serve up” web pages, automatically identify your computer by its IP address. When you visit any of our Sites, our servers log your computer’s IP address.
We use the following Google Analytics cookies:
_ga (also known as _rollupGa). The cookie is used to collect information and report website usage statistics. It expires after 2 years.
_gid (also known as _rollupGa_gid). The cookie is used to distinguish users. It expires after 24 hours.
_gat. The cookie is used to throttle request rate. It expires after 1 minute.
_gac_. This cookie contains campaign related information for the user. AdWords website conversion tags will read this cookie in an anonymous form. It expires after 90 days.
_dc_gtm_. This cookie is used to throttle request rate in an anonymous form. It expires after 1 minute.
We use the following Google Optimize cookies, which are used to determine your inclusion in an experiment (e.g. an A/B test on button colours our users prefer, which we use for UX improvement of our interfaces) and the expiry of experiments a user has been included in.
__utmx. It expires after 18 months.
__utmxx. It expires after 18 months.
_gaexp. It typically expires after 90 days.
We use the following Doubleclick cookies:
IDE and DSIS. This cookie enables features in Google Analytics that are not available through standard implementations. Advertising features include: remarketing with Google Analytics, Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers. The cookies expire after 2 years.
You can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout. Further information can be found under http://www.google.com/analytics/terms/gb.html (Google Analytics Terms of Service & Privacy). Please note that on our Sites, Google Analytics, Google Optimize and Doubleclick code is supplemented by "gat._anonymizeIp();" to ensure an anonymised collection of IP addresses (so called IP-masking). Also, you can prevent Google Analytics, Google Optimize and Doubleclick to collect such data on behalf of Wargaming by clicking on the following link: https://tools.google.com/dlpage/gaoptout.
We use the following Yandex.Metrica cookies:
_ym_isad. This cookie helps to check if AdBlock is enabled in user browser. It expires after 24 hours.
_ym_uid. This cookie is used to collect information and report website usage statistics. We use these cookies to improve user experience. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. It expires after 2 years.
_ym_visorc. This cookie enables session replays. These cookie is used for Webvisor feature in Yandex.Metrica reports, which enables "Sessions replays" (https://yandex.com/support/metrica/general/counter-webvisor.html). Yandex ensures that all collected information is depersonalised. The cookie expires after less than 1 day.
We also use some additional Yandex.Metrica cookies with the following expiry terms: sync_cookie_csrf expires after 1 day, i expires after 10 years, yandexuid expires after 10 years, yp expires after 10 years, sync_cookie_ok expires after 2 days.
While you can disable Yandex.Metrica cookies through your browser settings, you can also block collection of any data related to you using this add-on: https://yandex.com/support/metrica/general/opt-out.html.
tspaid. This cookie allows identification of a user by a click and indicates whether the person who has clicked on an advertisement already has a registered Account. It expires after 1000 days.
enctid. This cookie makes it easier to link users’ clicks with their subsequent creation of Account. It expires after 30 days.
stidrefferal. This cookie is used to send us a bundle of SPA ID and Wargaming tracking id. It expires after 30 days.
slpsets. The server uses it to issue new landing page settings. It expires after 30 days.
teclient. This cookie is necessary for us to track how many accounts are created from one computer (browser). It expires after 10 years.
4.2.2. Game-Related Information, Device Information, Geo-Location
In order to provide you with efficient services, we need to collect, store and use various information about your activity in our Games. “Game-Related Information” includes your in-game identifier, which for most of our Games is known as “Wargaming ID”, as well as what is usually referred to as “game statistics”. By game statistics we mean information about your Games preferences, progress in the Games, participation in clans, frequency of playing, as well as information about the device you are using the Services on, including what type of device it is, what operating system you are using, device settings, unique device identifiers, and crash data. Whether we collect some or all of this information often depends on what type of device you are using and its settings. Precise GPS location from mobile devices is collected only with your permission. Wi-Fi and IP addresses received from your browser or device may be used to determine approximate location.
4.2.3. Information required for fraud and violations detection
We may also collect certain data (like IP address, username, etc.) that is required for our detection, investigation and prevention of cheating in the Game and EULA violations. This data is used only for the purposes of detection, investigation and prevention of cheating in the Game, and is deleted six months after its collection, unless the data can be used to prove that cheating has occurred. If the data can be used to prove that cheating or another fraud or EULA violation has occurred, we will further store the data for the establishment, exercise or defence of legal claims during the applicable statute of limitations. Please note that the specific data stored for this purpose may not be disclosed to you or any third parties, since the disclosure will compromise the mechanism through which we detect, investigate and prevent cheating in the Game, as well as other EULA violations.
4.2.4. Information from publicly available online resources
We may use the information made publicly available, e.g. through YouTube, vk.com, Facebook, Instagram and Twitter, in order to find out your opinion about Games and Services, so that we could take them into account while improving our Services.
4.2.5. Information from our partners
In order to fulfil our obligation under the EULA and when processing is required in order to comply with a legal obligation to which we are subject, we may also obtain information about you from our partners, e.g. from our payment and advertising partners. We also use your identifiers on other platforms like PlayStation®4, Xbox 360 and Xbox One, so that you can play our games through these platforms. We only use the data controlled by our partners in accordance with their instructions and applicable laws. When you purchase virtual items, virtual currency (so-called "gold") or time-limited premium memberships with your credit card, we may receive from our payment partners and process a part of your credit card number, information about your credit card issuer, as well as your full address for billing purposes.
5. HOW WE USE YOUR INFORMATION
We need to process your Personal Data in order to fulfil the contract with you according to Article 6(1)(b) of the GDPR. As a user, we will use your Personal Data, unless otherwise prohibited by law, for the following purposes:
5.1. COMMUNICATION PURPOSES
We will use your Personal Data for our legitimate interests according to Article 6(1)(f) of the GDPR to notify you and provide you with information about features on our Sites, new product releases and service developments and to advertise our products and services in accordance with this Policy. Namely, once you have created an Account we may use your email address, nickname, IP address, mobile phone number, in order to send you emails, messages and targeted in-game and web offers about Games. Also, if you opt-in, we will send you emails, messages and targeted in-game and web offers about Wargaming offline events, co-projects of Wargaming and its partners, as well as about Wargaming games, not using Wargaming ID.
5.2. SERVICES IMPROVEMENT PURPOSES
We analyse the Tracking Data, Content Data and Game-Related Information to identify how to improve the Services and our operations to make them more interesting for our players in general. You are not obligated to respond to polls or surveys and you have choices about the information you provide.
5.3. TARGETED IN-GAME OFFERS
We may also use the Game-Related Information to send you certain in-game offers that we believe are the most useful to you. To make the offer we first collect Game-Related Information from various players, identify patterns in their behaviour, and create algorithms that identify whether you follow the pattern, if we apply the algorithm and it says that you do actually follow the pattern – we send the in-game offer to you. We make sure that such offers never have any significant impact on you or our other players. For example, we may notice that you are a player who is very good at playing with French vehicles and has registered the account more than five years ago: so, we may specifically offer you the new French vehicle for rent, but in any case not more expensively than it is offered to other users. You can unsubscribe from in-Game offers through our Account Management tool.
5.4. FRAUD AND EULA VIOLATIONS DETECTION
We use the information required for our detection, investigation and prevention of cheating in the Game and violations of EULA and Game rules and policies only for the purposes of such detection, investigation and prevention of cheating in the Game. If the data can be used to prove that cheating or another fraud or EULA violation has occurred, we will further store the data for the establishment, exercise or defense of legal claims during the applicable statute of limitations.
6. HOW WE SHARE YOUR INFORMATION
For the performance of a contract with you, compliance with a legal obligation to which we are subject, and based on our legitimate interests, we may share your personal data with the following categories of third parties:
When your personal data is shared with Wargaming affiliates and subsidiaries, as well as third parties outside the European Union or the European Economic Area, Wargaming guarantees an adequate level of personal data protection, including but not limited to, by entering into standard data protection clauses adopted by the European Commission with Wargaming affiliates and subsidiaries, as well as such third parties. We will provide you with a copy of the standard data protection clauses upon your request.
Sharing anonymous information. We also may share anonymous information, i.e. information which does not directly or indirectly disclose your identity, and aggregated information (meaning information about groups and categories of users, including game statistics and behaviour, but which does not identify and that cannot reasonably be used to identify any individual user) with our advertising partners. We may also allow our advertisers to collect anonymous information and aggregated information within the Services and they may then share that information with us. Our advertisers may collect this information through the use of tracking technologies like cookies and web beacons. This enables our advertisers to develop and deliver targeted advertising in the Services and on the websites of third parties, so that they can try to serve you with advertisements for products and services that are most likely to be of interest to you. Advertisers will also use this information to monitor, improve or modify their operations.
7. YOUR RIGHTS
To allow you to exercise your data protection rights in a simple way we have improved the Account Management. If you are using a demo account, you will only be able to fully control our use of your data after you create the Account here or – for Console Games – here. This means that if you are using a demo version of the Account, you will only be able to fully control our use of your data after you complete the Account here.ef="http://wargaming.net/">here. Please visit it to make choices about which direct communications you would like to receive, as well as to exercise your rights to data access, data erasure and objection to data processing.
7.1. OPT-OUT OF DIRECT MARKETING AND RIGHT TO OBJECT
You can opt-out of interest-based advertising on mobile applications, including our mobile Games, by checking the privacy settings of your Android or iOS device and selecting "limit ad tracking" (Apple iOS) or "opt-out of interest-based ads" (Android).
Where processing of your Personal Data is based on legitimate interests according to Article 6(1)(f) of the GDPR, you can use your right to object at any time. If you object we will no longer process your Personal Data unless there are compelling and prevailing legitimate grounds for the processing or the data is necessary for the establishment, exercise or defense of legal claims.
7.2. RIGHT OF ACCESS
You have the right to access your Personal Data that we hold about you, i.e. the right to require free of charge (i) information whether your Personal Data is retained, (ii) access to and/or (iii) duplicates of the Personal Data retained. You can use the right to access to your Personal Data through the “Data Export” tool available in the Account Management tools. Normally, we provide the duplicate of the Personal Data retained within 30 (thirty) days upon your request. Once the archive with the Personal Data we retain is ready, you will be able to download in it from our resources. If the request affects the rights and freedoms of others or is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee (taking into account the administrative costs of providing the information or communication or taking the action requested) or refuse to act on the request. We also will not be able to provide you with some Personal Data that you may post or provide using our Services regardless of our request not to provide the Personal Data in this particular field, website, etc.
7.3. RIGHT TO RECTIFICATION
You control which nickname, email, phone number, country, social networks accounts, trusted sites and payment methods we associate with your Account. If they change, please modify the data in the Personal Account directly. Please inform us if any of the Personal Data we retain about you is inaccurate.
7.4. RIGHT TO ERASURE
You have the right to obtain deletion by us of Personal Data concerning you by deleting your Account via our “Account Deletion” tool available in the Account Management tools.
As a result of deleting your Account, you will lose access to most Services, including the Account and Game-Related Information linked to the Account, subscriptions to Wargaming forums and the possibility to access other services you are using the Account for.
Grace period. We allow you to restore your Account during a grace period of 45 (forty-five) days from the moment you request deletion of your Account. This functionality allows you not to lose various Game-Related Information and other important information and options by mistake. During the suspension period, we will be able to finalise financial and other activities that you may have initiated before sending the Account deletion request.
Complicated Account deletion. In some cases, deletion of your Account, and therefore Personal Data deletion, is complicated. Namely, if you are a clan commander in the Games, it is highly likely that you will only be able to delete your Account after you have transferred the clan and placed it under the command of another user or dissolve the clan. In some cases, considering the complexity and number of the requests, the period for Personal Data erasure may be extended, but for no longer than two further months.
Earlier Personal Data deletion. We store most Personal Data we retain about you until you request deletion of your Account through the Account Management tools. However, certain Personal Data is deleted even while you have a valid Account. For example, we will delete:
Information we retain. Upon expiry of the suspension period we will delete all Personal Data about you, except for the data that are required for our compliance with the requirements of applicable laws (e.g. tax and accounting requirements) or for our detection, investigation and prevention of cheating in the Game and EULA violations. We will retain anonymous information after your Account has been closed. Information you have shared with others (e.g. through in-Games chats, updates or group posts) will remain visible after you closed your account or deleted the information from your own profile or mailbox, and we do not control data that other Members copied out of our Services. Groups content associated with closed accounts will show an unknown user as the source. Your profile may continue to be displayed in the services of others (e.g. search engine results) until they refresh their cache.
You also have the right to lodge a complaint at a supervisory authority.
8. WE CAN CHANGE THIS POLICY
We may change this Policy from time to time for various reasons, such as legal and regulatory changes, changes in industry practices and technological developments that need to be reflected.