KCL DnD Society App Privacy Policy

KCL D&D Privacy Statement

Here is where we tell you how we handle your “Personal Data,” which is information that can be directly or indirectly linked to you. It applies to the Personal Data that KCL D&D (“Data Controller” or “We”) processes when you interact with our “Services.”

Personal Data We Collect

From You

  • Account Data: We collect information when you open an account like your name, username, email, K-number, and password.
  • User Content and Files: When you use our Services, we collect Personal Data included as part of the information you provided like character sheet details, images, files, etc.
  • Feedback Data: This consists of information you submit through surveys and reviews.
  • Profile Information: We collect information to create a user profile, which may include a photo, email addresses, or biography.
  • Support Data: When you seek customer support, we collect details like code, text, or multimedia files.

Automatically

  • Essential Cookies and Similar Tracking Technologies: We reserve the right to use cookies and similar technologies to provide essential functionality.

Third Party Services

There are two third party services we use to help us operate our Services: Hetzner (for hosting) and Cloudflare (for DNS resolving, DOS protection, and domain services). These third parties may have access to your Personal Data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose. Apart from them, we do not use any third-party services, as we host our Services ourselves.

Lawful Bases for Processing Personal Data (Applicable to EEA and UK End Users)

We processes Personal Data in compliance with the GDPR, ensuring a lawful basis for each processing activity.

Your Privacy Rights

Depending on your residence location, you may have specific legal rights regarding your Personal Data:

  • The right to access the data collected about you.
  • The right to request detailed information about the specific types of Personal Data we've collected over the past 12 months, including data disclosed for business purposes.
  • The right to rectify or update inaccurate or incomplete Personal Data under certain circumstances.
  • The right to erase or limit the processing of your Personal Data under specific conditions.
  • The right to object to the processing of your Personal Data, as allowed by applicable law.
  • The right to withdraw consent, where processing is based on your consent.
  • The right to receive your collected Personal Data in a structured, commonly used, and machine-readable format to facilitate its transfer to another company, where technically feasible.

To exercise these rights, please send a message to us at [email protected] and follow the instructions provided. To verify your identity for security, we may request extra information before addressing your data-related request.

TLDR

We collect data which you provide us in order to be able to make our services functional. We made the hard decision and decided not to sell any of it to advertisers (or hordes of orc). We hold your data until you delete your account, or we delete your account (either due to long term inactivity, our services go down, or a dragon attacked our database). Anything we do is our best effort to maximize your privacy and to make our services work :)