Rules of Confidentiality
Date of the latest change: 24 May 2018
1. Why Rules of Confidentiality?
1.1 These Rules of Confidentiality are designed to tell you what
personal information we collect, why, and how we use it.
1.2 Our Rules of Confidentiality also explain how to access your personal information and how to update it.
2. The personal data which we collect
2.1 When creating your account, you provide us with personal
information, your username and your email address, which are saved in your account
(hereinafter your ‘Personal Data’).
2.3 Except for the information mentioned in paragraph 2.1 above and the postal address of the person making payment by PayPal, no other personal information about your payment is provided to us.
2.4 Your Personal Data will be destroyed within the year following closure of your account or at the expiry of the statutory deadlines.
3. How we use the data which we collect?
3.1 The data we collect allows us only to provide, manage,
protect and improve our Game.
3.2 We may use your email address to keep you informed, for example, of future changes or improvements. Any use of data for purposes other than those mentioned here will require your explicit consent.
3.3 We process your Personal Data on servers located in France and the European Union. Your personal data are therefore unlikely to be processed on a server located outside the European Union.
4. How should you manage your player account and Personal Data?
4.1 In accordance with the French Data Protection Law of 6 January 1978,
all Players have a right to access and correct the information which
concerns them, and they may exercise this right by contacting [email protected]
You may also, for legitimate reasons, object to the processing of data
which concerns you. The Player is warned that it is only possible to change
a username for legitimate reasons.
4.2 You may access your Player account at https://undercards.net/Settings to update, correct or delete your Personal Data and to terminate your account if you wish.
5. Information you share with third parties thanks to Undercards
5.1 Our instant messaging service (Chat) enables you to share
your data with other people, entirely at your own risk.
5.2 Remember that when you share information publicly on Chat, it can be collected and indexed by third parties.
6. Personal Data which we share with third parties
6.1 No data will be communicated to third parties for the purposes
of advertising purposes as part of our Game.
6.2 We will share your data only in the following circumstances:
- With your express prior consent, or;
- In our dealings with our subcontractors, who may need to know your Personal Data but uniquely in accordance with our instructions, in a safe and confidential setting, or;
- To fulfil statutory and regulatory obligations, for legal proceedings, or to respond to requests from government authorities, or;
- To guard against any infringement of the rights of other players or the public, in accordance with French law.
7. Security of your Personal Data
7.1 We implement all necessary safety measures to protect
our Players against any unauthorized access and modification,
unauthorized disclosure, or destruction of, the Personal Data we
hold for you.
7.2 We encrypt our services thanks to an encryption certificate from cloudflare.com. The connection is encrypted and authenticated using a protocol (TLS 1.2), an exchange of keys (ECDHE_ECDSA with P-256) and encryption (AES_128_GCM).
7.3 We conduct internal audits of our data collection, storage and processing of data, including physical security measures to prevent unauthorized access to our services.
7.4 Access to personal data is restricted to our employees or sub-contractors who need access to them in order to process them on our behalf. These people are subject to strict confidentiality obligations and may be subject to penalties for failure to observe them.
8. What cookies do we use?
9. Compliance with French law
9.1 We observe French regulations concerning the personal data of our Players. Undercards has disclosed to the CNIL its exploitation of personal data, under number 2047366 v 0. 9.2 This Confidentiality Charter is issued pursuant to Simplified Regulation No. NS-048 concerning the automated processing of personal data relating to customer and prospects management, which can be consulted at https://www.cnil.fr/fr/declaration/ns-048-fichiers-clients-prospects-et-vente-en-ligne