Privacy Policy

  

About us

ADDONTOPIA website is operated by Balkan Business Bay Ltd., a private company incorporated under the laws of Bulgaria under company registration number 207658622 and having its registered office at Sofia, p.c. 1404 Triaditsa district, Manastirski Livadi Residential Area, bl. 200, entr. B, ap. 303. (further – “ADDONTOPIA”, “we”, “us”, “our”).

The website www.addontopia.com lists downloadable game titles and other downloadable content. We sell official keys on the site to unlock, access, and download the content from a platform that is not ours, but that of the developer or publisher (therefore we are not claiming ownership).

This privacy notice applies to:

The following privacy notice applies to individuals who visit our website. Its goal is to explain how we collect and process your personal data through your use of the website. We collect your personal data when you visit our website, make purchases through our website, and ask for marketing.

If you are an ADDONTOPIA partner, this privacy notice applies to you the same as any other user of the website. However, we will process certain personal data relating to you in order to perform our partnership agreement with you.

It’s important that you read this privacy notice together with any other privacy notices we have for specific occasions when we’re collecting or processing personal data about you so that you are aware of how and why we’re using it.

 

Links to third-party websites

When you click on links or enable connections to third-party sites, they may be able to share data about you. We do not control these third-party websites and are not responsible for their privacy notices. Furthermore, when leaving our site, we encourage you to read the privacy policies of every website visited. For details concerning cookies served by third parties.

 

Types of personal data we process

“Personal Data” is any information about an individual that will allow us to distinguish that person from other individuals, such as their name, contact details, or location. It does not include anonymized data.

In this Privacy Notice, we use the term “processing” to refer to all activities involving your Personal Data, including those related to collecting, handling, storing, sharing, accessing, and using it.

The personal data we collect about you will depend on the activities that have been performed through our website. Typical types of personal information include:

ID and contact data: Your name, address, email address, date of birth, and any personal information provided in communications with us.

Financial Data: Information necessary for processing payments and fraud prevention. ADDONTOPIA does not save your credit card numbers. If you pay us via your credit/debit card, we process your card details via our payment service providers.

Transaction Data: Payments and other details related to our products or services, and in the case of ADDONTOPIA partners, this data also includes administration-related information.

Technical Information: IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform to provide the necessary services.

Usage Data: Information about how you use the website, including services viewed or searched for. Page response times will be measured and download errors logged. Length of visit to a webpage as well as interactions such as scrolling, clicks, and mouse-overs are tracked.

Marketing and Communications Data: Preferences in receiving marketing communications, such as which contact information you would like us to use when communicating with you, and your communication preferences.

We also collect, use, and share aggregated data like statistics on groups or trends. Although these are not considered personal information in law because they do not directly reveal who you are, aggregate data is derived from your personal data. We may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect this aggregated data with personal data so that it can directly or indirectly identify you, we will treat the combined data as personal data and put it in accordance with your privacy notice.

 

We do not collect any personal data that is considered sensitive, like ethnic or religious information, or health-related. Nor do we collect any information about criminal convictions or offences. Please do not provide on the website or in any communications with us any special categories of personal data and/or personal data relating to criminal records.

If you choose not to provide the personal data we need, then we may be unable to carry out an obligation.

 

How we collect your personal information

When interacting with us, you will provide us with your contact details as well as personal and financial information. You can also share personal data when we interact by post, phone, email, or social media. This includes personal information, like your name and email address, that you provide on surveys, when you contact us for feedback on our products or online shopping experience.

 

This policy covers all automated technologies or interactions, which include:

As you interact with our website, we collect Personal Data including details about your device, browsing actions, and patterns (i.e. searches), sections viewed, traffic data (weblogs), weblogs (other communication), and any resources accessed. Personal Data is collected using cookies.

 

Third-Party Data: We receive personal data relating to you from third-party sources, as set out below.

(a) Data regarding your product key activation date from Developers.

(b) Technical Data for data analysis purposes from Google Analytics.

(c) Identity and Contact Data, Financial Data and Transaction Data from providers of payment services.

(d) Identity and Contact Data from publicly available sources such as a registrar of companies.

 

We don’t rely on consent as legal grounds for processing your data, but before we market our services to you via email or text message, we’ll ask for your permission.

We would like to send you marketing information, such as service updates, upcoming game releases, and other news via email.

Should you have any other privacy-related questions or concerns, please contact us at info@addontopia.com.

 

If you agree as part of our cookies framework, we will use certain technologies that allow us to see whether news updates and other communications we send to you have been viewed and read. We use this information for our legitimate interests to develop our products and services, direct market, and grow our business.

 

Disclosure of your personal data

Except as set out in this privacy notice, we do not disclose personal data about any individual to third parties. We will share personal data only with the third-party organizations listed below and only for purposes outlined in this document.

Companies that provide products and services to us such as professional advisors, IT systems suppliers and support, data storage, IT developers, web hosting, and analytics companies.

We will disclose personal data when legally obligated to do so by governmental authorities, law enforcement, or to protect our rights.

Our company may transfer or sell its assets. In the event of a sale, merger, or other transfer (hereinafter collectively “Change”) to a new owner, that Privacy Notice will no longer apply and you should consult the privacy notice of the acquiring entity for information on how your personal data may be used.

Any third party we share your personal data with is required to keep it secure and comply with the law. We do not permit our service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. Unless prohibited by applicable law, we will notify you when your personal data may be provided to third parties in ways other than listed above.

 

Data Transfer

We are located in Bulgaria and so your personal data will be received and processed by us in Bulgaria. It may be necessary for us to disclose some of your personal data to our trusted suppliers who provide us with products or services that help us provide you with the service we contract them to deliver for you.

 

Data risk & security

We take multiple measures to ensure your personal data is secure. We will never share or use your information without getting consent first—and only for the purposes outlined in this policy. If you are aware of any security breaches, please let us know immediately by contacting us using the contact information provided at the end of this document under the section “Contact Us.”

 

Retention of personal data

We will not retain your personal data for longer than necessary to fulfill the purposes we collected it for. In the event of a complaint or legal dispute, we may retain some of your personal data for a longer period. We determine an appropriate retention period for personal data based on the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, our goal in collecting the information, as well as any legal obligations we have to retain it.

 

The legal rights you have

Under certain circumstances, by law, you may have the right to:

Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate personal data we hold about you corrected.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below), where we may have processed your personal data unlawfully or where we are required to erase your personal data to comply with local law. We may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data which override your rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the personal data is unlawful but you do not want us to erase it; (c) where you need us to hold the personal data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your personal data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your personal data to you or to a third party. This enables you to ask us to provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the personal data to perform a contract with you.

Right to withdraw consent: If you provide your consent to the processing of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you wish to withdraw your consent, we will take steps to ensure we no longer process your personal data for the purpose(s) you originally agreed to, unless we have another legitimate basis for doing so in law. Withdrawal of consent will not affect the lawfulness of processing based on consent before withdrawal.

In order to exercise one or more of your rights in respect of your personal data, please contact us in writing at info@addontopia.com. We will need you to provide us with information to identify you on our records, we will also need proof of your identity and address and the information to which your request relates.

 

You have the right to make a complaint to the data protection supervisory authority. However, we would appreciate the chance to deal with your concerns before you contact the supervisory authority and therefore ask you please contact us in the first instance using the information provided in the section below.

 

3D-Secure and SCA

Please note that our website employs 3D-Secure as a part of Strong Customer Authentication (SCA) requirements. This security protocol provides an extra layer of protection for online transactions by requiring two forms of identification from the user, ensuring your transactions are secure.

 

Contact us

If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us via email at info@addontopia.com.

 

Changes to this privacy notice

We will change this privacy notice from time to time and any changes will be contained in a revised privacy notice posted on the website