Customer (B2C) Privacy Notice

Your privacy is important to Asmodee. This Privacy Notice explains how we handle and treat your personal data when you use the products or services that Asmodee provides.

This Privacy Notice explains our approach to any personal data that we collect from you or that we have obtained about you from a third party and the purposes for which we process your personal data. It also sets out your rights in respect of our processing of your personal data.

We may collect personal data from you in the course of our business, including when you use our applications and websites, when you enter in our competitions or participate in tournaments, or when you contact or request information from us.

1. Who is responsible for your personal data?

2. Minimum age

3. What personal data do we collect about you?

4.How do we use your personal data?

5. Who do we disclose your personal data to?

6. How long do we retain your personal data?

7. Right to unsubscribe from marketing messages

8. Security of your personal data

9. What are your rights?

10. What are your rights as a parent?

11. What are your rights as a California resident?

12. Contact and complaints

13. Changes to this Privacy Notice


1. Who is responsible for your personal data?

Asmodee Group, with registered office in 18 rue Jacqueline Auriol – 78280 Guyancourt (France) and company number 399 899 806 (“Asmodee” or “we”), is the controller of your personal data.

2. Minimum age

Protecting the safety and privacy of children is very important to us. We do not knowingly collect or use personal data from anyone under the age of 18 years old, without the consent of both the child and the holder of parental responsibility. Therefore, you represent that you are at least 18 years old or above when you provide your personal data in relation to our products or services. If you are not at least 18 years old, you must ask the consent of your parent or legal guardian to provide us with your personal data. In this case, please contact the contact details indicated in Article 9 below.

3. What personal data do we collect about you?

We collect information regarding you, such as:

  • Identification data such as your first and last names,
  • Data relating to your personal life such as your personal email address,
  • Your connection data when you access our applications and websites,
  • Your personal habits with respect to the use of our games, and
  • Other information necessary to provide our products and services, and to respond to your queries.

4. How do we use your personal data?

We use your personal data for the purposes listed below. Whenever we process your personal data, we do so on the basis of a lawful “justification” (or lawful basis) for processing, which we have identified in the table below.

Purpose for processing Lawful basis
1 To fulfil your requests for certain products and services. This processing is necessary to perform the contract between you and Asmodee.
2 To manage your personal Asmodee account. This processing is necessary to perform the contract between you and Asmodee.
3 To administer promotional offers, contests or other promotional events, such as tournaments, and notify winners. This processing is necessary to perform the contract between you and Asmodee.
4 To respond to your queries or complaints. This processing is based in your consent.
5 To send you marketing communications regarding our services and products. We consider that we have a legitimate interest in ensuring that our customers are kept up to date with information about our products and services, as this helps us to preserve our business operations or grow our business.
However, where we are required by law to obtain your consent before sending you such information, we will rely upon such consent as our basis for processing.
6 To comply with any applicable law, court order, other judicial process, or the requirements of a regulator. This processing is necessary to comply with our legal obligations.
7 To enforce our agreements with you. We consider that we have a legitimate interest in ensuring that our contracts are performed correctly and in defending our rights where necessary.
8 To enforce our legal rights and obligations, and for any purposes in connection with any legal claims made by, against or otherwise involving you. We consider that we have a legitimate interest in protecting our organization from breaches of legal obligations owed to it and to defend itself from litigation.
9 To protect the rights of third parties. This processing is necessary for the compliance with legal obligations to which Asmodee is subject.
This processing is also necessary for the purpose of the legitimate interests pursued by Asmodee. We consider that we have a legitimate interest in ensuring our activities do not violate any third parties’ rights.
10 In contemplation of and/or in connection with a business transaction such as a merger, or a restructuring, or sale. We consider that we have a legitimate interest as we need to be able to make decisions relating to the future of our business in order to preserve our business operations or grow our business.

 

5. Who do we disclose your personal data to?

We may share your personal data with a variety of the following categories of third parties as necessary:

  • Other entities of the Asmodee group (the list of Asmodee affiliates is available here),
  • Third party service providers (maintenance, storage, payment, logistics, marketing services, etc.), for the purposes described in Section 4 above,
  • Our professional advisers such as lawyers and accountants, auditors,
  • Shareholders,
  • Government or regulatory authorities,
  • Professional indemnity or other relevant insurers,
  • Regulators/tax authorities/corporate registries, and
  • Banks.

Please note this list is non-exhaustive and there may be other examples where we need to share with other parties.

Please note that, while we provide tools to manage your privacy as described in this Privacy Notice, we do not support “Do Not Track” browser settings at this time.   If you would like additional information about online tracking and various opt-out mechanisms, please see https://youradchoices.com/

Because we link to social media sites, other parties may collect your personally identifiable information about your online activities over time and across different web sites when you visit this website.  Please note that not all tracking will stop even if you delete cookies.

6. How long do we retain your personal data?

Our general approach is to retain your personal data only for as long as required to fulfill the purposes for which it was collected. We generally retain your personal data for the duration strictly necessary for the management of our relationship with you. However, unless you object, we retain your personal data used for marketing purposes for an additional 3-years period after the end of our relationship with you.

However, we may in addition retain personal data for longer periods of time, for instance where we are required to do so in accordance with legal, tax and accounting requirements, or where such data is necessary to establish the existence of a right or contract. In that case, your personal data will be archived and retained for the duration imposed by applicable law, or for the duration of the applicable statute of limitations.

When your personal data will no longer be necessary, we will delete or anonymize them.

7. Right to unsubscribe from marketing messages

You have the right at any time to stop receiving marketing emails from us.  You can either simply click the “unsubscribe” feature at the bottom of the email or contact us at donneespersonnelles-group@asmodee.com.  Please note that if you unsubscribe, we will continue to send you responses to your inquiries and administrative messages.

8. Security of your personal data

We are committed to keeping your personal data secure and we have implemented appropriate information security policies, rules and technical measures to protect it from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss.

All of our partners, employees, consultants, workers and data processors, who have access to, and are associated with the processing of personal data, are obliged to respect its confidentiality.

9. What are your rights?

In the E.U., you have a number of rights in relation to your personal data. More information about each of these rights is set out below:

  • Withdrawal of consent. You can withdraw at any time your consent in respect of any processing of personal data based on your consent, without affecting the lawfulness of processing based on your consent before its withdrawal.
  • Access. You can ask us to confirm whether we process your personal data and, as the case may be, inform you of the characteristics of such processing, allow you to access such data and give you a copy of it.
  • Rectification. You can ask us to rectify or complete inaccurate or incomplete personal data.
  • Erasure. You can ask us to erase your personal data in the following cases: where it is no longer necessary for the purposes for which it was collected; you withdrew your consent; you objected to the processing of your personal data; your personal data has been processed unlawfully; or to comply with a legal obligation. We are not required to comply with your request notably if the processing of your personal data is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.
  • Restriction. You can ask us to restrict the processing of your personal data (i.e., keep but not use your personal data) where: the accuracy of your personal data is contested; the processing is unlawful, but you do not want it erased; it is still necessary to establish, exercise or defend legal claims; to verify the existence overriding grounds following the exercise of your right of objection. We can continue to use your personal data following a request for restriction, where: we have your consent; to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.
  • Portability. You can ask us to provide your personal data to you in a structured, commonly used, machine-readable format, or you can ask to have it ‘ported’ directly to another data controller, but only where the processing is based on your consent or on the performance of a contract with you, and the processing is carried out by automated means.
  • Right to object to processing justified on legitimate interest grounds. Where we are relying upon legitimate interest to process personal data (see Section 2), then you have the right to object to that processing. If you object, we must stop that processing unless we can either demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or where we need to process the data for the establishment, exercise or defense of legal claims.
  • Right to object to processing for marketing purposes. Where we process personal data for direct marketing purposes, then you have the right to object to that processing at any time.

You also have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes applicable law. In France, the supervisory authority for the protection of personal data is the CNIL (www.cnil.fr).

To exercise your rights regarding your personal data, please send us this duly completed form at the following e-mail address: donneespersonnelles-group@asmodee.com.

10. What are your rights as a parent?

We do not knowingly collect information from anyone under age 18.  If we collect information of a child in the U.S. under age 18, as a parent or guardian of the child, you have the following rights:

  • As parents, you have the right to ask that Asmodee not require a child to disclose more information than is reasonably necessary to participate in an activity;
  • You can review your child’s personal information, direct Asmodee to delete it, and refuse to allow any further collection or use of your child’s information;
  • You can agree to the collection and use of your child’s information, but still not allow disclosure to third parties unless that’s part of the service (for example, social networking); and
  • If you would like to exercise any of these rights or have a question about our privacy practices, please contact us at 855-382-8880 or https://asmodee. helpshift.com /a/asmodee-net/.

Before we are able to process your request, we are required by law to verify your identity.  If you are a parent/guardian making a request on behalf of your child, we may require and request additional information to verify that you are authorized to make that request.

11. What are your rights as a California resident?

If you live in California, we do not “sell” your data, and you have some additional rights when it comes to your data, including the right:

  • To know the categories and/or specific pieces of personal information collected about you, the categories of sources from which the personal information is collected, the business or commercial purpose for the processing of personal information, and the categories of third parties with whom your personal information was shared;
  • To request deletion of personal information; and
  • To non-discrimination based on the exercise of your privacy rights.

California law gives you the right to opt out of the sale of your personal information.

To exercise any of these rights, you (or your authorized agent) can contact us through the method indicated below. You will receive a confirmation notice within 10 days after submitting the request in which we may request additional information to verify your identity.  We will do our best to respond within 45 days though in some exceptional cases it might take longer (if that happens, we’ll let you know).

Before we are able to process your request, we are required by law to verify your identity.  If you are an authorized agent or parent/guardian making a request on behalf of a consumer or your child, we may require and request additional information to verify that you are authorized to make that request.

We reserve the right to deny your request if we cannot verify your identity or an exemption applies like for example, where fulfilling your request would adversely affect other individuals or where we have a conflicting legal obligation. That said, we will not discriminate against you for exercising any of your privacy rights.  Where we deny your request in whole or in part, we will inform you of the denial, provide an explanation of our actions, and the reason(s) for the denial.  In the event your request is incomplete or deficient, we will endeavor to inform you how it may be corrected.

We keep record of requests for at least 24 months as required by law.

We will not restrict or deny you access to our services because of choices and requests you make in connection with your personal information.

Lastly, California residents also have the right to request this information in an accessible alternative format. If you have a disability and would like to access this privacy policy in an alternative format, please contact us by email or mail as detailed below.

12. Contact and complaints

For further information regarding your rights, to exercise any of your rights, or if you have any complaints or questions regarding the processing of your personal data, please contact donneespersonnelles-group@asmodee.com or call the following toll-free number: 855-382-8880.

13. Changes to this Privacy Notice

We may occasionally change this Privacy Notice, for example, to comply with new requirements imposed by the applicable laws, technical requirements or good commercial practices. We will notify you in case of material changes by posting a notice on our website.

Date of the update : 2020/06/29