Following the principles of lawfulness, fairness, and transparency, we provide you with this Privacy Policy.
Who is the Data Controller?
| CONTROLLER | GAMESTRATEGIES S.L. | |
|---|---|---|
| TAX ID | B75697011 | |
| REGISTERED ADDRESS | C/ Segundo Mata 6, 28224 Pozuelo de Alarcón, (Madrid) | |
CONTACT | dpo@gamestrategies.io | |
| Phone | 913519089 | |
| DPO | dpo@gamestrategies.io | |
What data may we collect?
You may register on our website to use various services: requesting a demo, contacting us for additional information, accessing the virtual campus, requesting technical access, and/or downloading free content.
As part of the registration process and when filling out forms, we may collect and process the following personal data:
REQUIRED DATA | Interested parties | First and last name, email address, phone number, professional information |
|---|---|---|
| Registered users | First and last name, email address, password, National ID number (when it involves courses subsidized by Fundae) | |
| OPTIONAL DATA | Consent to receive advertising, with the ability to withdraw it
|
We may also collect data through cookies. You can find additional, detailed information on our cookie practices in the Cookie Policy, available in the footer of our website.
For what purposes do we process your personal data?
At GAMESTRATEGIES S.L., depending on the category of data subject, we process the information you provide for the following purposes:
| DATA SUBJECT | PURPOSE OF PROCESSING |
|---|---|
| PROSPECTIVE CLIENTS | Managing potential game-based training, sending requested information and/or resolving inquiries raised, providing offers of our services and/or products of interest. |
| CLIENTS | Managing game-based employee training, creation of custom training video games, providing offers of our products that may be of interest. |
| VIDEO-GAME TRAINEES (STUDENTS) | Managing identifying and professional data of trainees for access to and participation in training video games. Providing offers of our products that may be of interest. |
| SUPPLIERS | Managing the business and/or professional relationship. |
| JOB CANDIDATES | Managing the personnel selection process. |
| EMPLOYEES | Managing obligations arising from the employment relationship (human resources, time and access control, hiring/termination, vacation, payroll and contract preparation, staff training, union dues, occupational risk prevention, and Social Security contributions). |
| WEB USERS | Analyzing browsing data. Providing offers of our products that may be of interest. |
What is the legal basis for processing your data?
The legal basis for processing your personal data, depending on the category of data subject, may be:
| DATA SUBJECT | LEGAL BASIS |
|---|---|
| PROSPECTIVE CLIENTS | Art. 6.1.b GDPR: application, at the data subject’s request, of pre-contractual measures (quotes, engagement letters, service offers, etc.). Art. 6.1.f GDPR: legitimate interest (sending requested information, responding to inquiries). Art. 6.1.a GDPR: the data subject’s own consent (providing offers of our services and/or products). |
| CLIENTS | Art. 6.1.b GDPR: performance of a contract to which the data subject is a party (managing game-based employee training, creation of custom training video games). Art. 6.1.f GDPR: legitimate interest (providing offers of services and products similar to those contracted). |
| VIDEO-GAME TRAINEES | Art. 6.1.b GDPR: performance of a contract to which the data subject is a party (managing identifying and professional data of trainees for access to and participation in training video games). Art. 6.1.a GDPR: the data subject’s own consent (providing offers of our services and/or products). |
| SUPPLIERS | Art. 6.1.b GDPR: performance of a contract to which the data subject is a party (managing the business and/or professional relationship). |
| JOB CANDIDATES | Art. 6.1.a GDPR: the data subject’s own consent (selection processes). |
| EMPLOYEES | Art. 6.1.b GDPR: performance of a contract to which the data subject is a party (payroll and contract preparation, training). Art. 6.1.c GDPR: existence of a legal obligation applicable to the controller (time control, hiring/termination, occupational risk prevention). |
| WEB USERS | Art. 6.1.a GDPR: the data subject’s own consent. |
The data we request is adequate, relevant, and strictly necessary, and you are never obligated to provide it to us; however, failure to do so may affect the purpose of the service or make it impossible to provide it.
Acting as data processor
Regarding the processing activity involving VIDEO-GAME TRAINEES data, we expressly inform you that GAMESTRATEGIES S.L. will act as data processor. In order to comply with the provisions of Art. 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, a corresponding data processing agreement will be signed with the controller.
Likewise, we inform you that we rely on the support of certain technology service providers. Below is a list of sub-processors involved in the VIDEO-GAME TRAINEES processing activity:
How long will we keep your personal data?
Your data will be kept for the minimum time necessary to properly provide the service offered. As a general rule, data of registered users will be stored until the service with the client ends, and GAMESTRATEGIES S.L. may keep a copy of the data, duly blocked, to address any liabilities that may arise from it and any other legal requirement.
Who will your data be shared with?
Your data may be shared with, where applicable, banks and financial institutions for the collection of payment for contracted services and/or purchased products, as well as with public administrations with jurisdiction over GAMESTRATEGIES S.L.’s areas of activity, when required by applicable regulations.
Personal data will not be transferred or disclosed to third parties, except in cases of: legal obligation, when we obtain your express consent, or when we understand there is a legitimate interest on our part, which will be duly communicated to you.
However, please note that we are present on the following social networks: Facebook, LinkedIn, Twitter, and YouTube, in order to keep our followers informed about company news and services. You may access these social networks voluntarily via the links available on our website, or by accessing them directly on your own through your browser or an installed app.
Please note that this website is not responsible for the use these social networks may make of your data. However, when such data is generated on the social network and derives from an interaction with our official account, we will be jointly responsible for the processing along with the social network.
To consent to our data transfer from this website and the processing carried out on your data, you should carefully read the privacy policy of the social network you wish to access:
- Facebook: https://es-es.facebook.com/privacy/explanation
- LinkedIn: https://es.linkedin.com/legal/privacy-policy
- YouTube: https://www.youtube.com/intl/es/about/policies/#community-guidelines
- Twitter: https://twitter.com/es/privacy
This way, before clicking on the social media logos on our website, you can inform yourself and be redirected with prior knowledge of how your data will be processed, and voluntarily.
Are there international data transfers?
GAMESTRATEGIES S.L. will only carry out international data transfers — for example, to data processors located outside our borders — that meet one of the following requirements:
- The destination country has been declared adequate by the European Commission.
- The transfer is governed by binding corporate rules.
- The transfer is governed by the standard contractual clauses adopted by the European Commission dated June 4, 2021.
- The transfer is governed by standard clauses adopted by a supervisory authority and approved by the European Commission.
- Explicit consent has been obtained from the data subject.
- The transfer is necessary for the performance of a contract between the data subject and GAMESTRATEGIES S.L.
What are your rights when you provide us with your data?
The data protection rights that data subjects may exercise, where applicable, are:
- Right to request access to personal data concerning the data subject.
- Right to rectification or erasure.
- Right to object.
- Right to request restriction of processing.
- Right to data portability.
- Right not to be subject to decisions based solely on automated processing of data.
If the requested data is rectified or deleted at the request of its owner, GAMESTRATEGIES S.L. will proceed to block the data, adopting the technical and organizational measures established by regulations to prevent its processing, except when required by judges and courts.
In any case, owners of the personal data obtained may exercise their personal data protection rights by sending written communication to GAMESTRATEGIES S.L.’s registered address or to the email address enabled for this purpose, dataprotection@gamestrategies.io, indicating the right they wish to exercise and providing identifying documentation (national ID, first and last name, and address for notifications).
GAMESTRATEGIES S.L. will address the request and inform the data subject of the measures adopted within one month of receipt. This period may be extended by a maximum of two additional months if necessary, taking into account the complexity and number of requests.
Any such extension will be communicated within one month of receipt of the request, and requests will be answered through the same channel used by the data subject, unless the data subject indicates otherwise.
Templates, forms, and further information about your rights are available on the website of the national supervisory authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), at www.aepd.es.
Can I withdraw my consent?
You have the right to withdraw consent for any specific purpose granted at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Where can I file a complaint if I believe my data is not being processed correctly?
If any data subject believes their data is not being processed correctly by GAMESTRATEGIES S.L., or that requests to exercise their rights have not been satisfactorily addressed, they may file a complaint with the relevant data protection authority — the AEPD being the competent authority at the national level, www.aepd.es.
Security and updating of your personal data
To safeguard the security of your personal data, please note that GAMESTRATEGIES S.L. has adopted the necessary measures to ensure the security of personal data and to prevent its alteration, loss, and/or unauthorized processing or access, as required by applicable regulations.
It is important that, in order for us to keep your personal data up to date, you inform us whenever any changes to it occur.
Confidentiality
GAMESTRATEGIES S.L. informs you that all personal data collected will be treated with the utmost care and confidentiality by all personnel involved in any stage of processing.
This also applies to internal client documents, such as the Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement