Privacy policy

---

Big Cliffs Software ( “Big Cliffs”, “Us”, “Our” or “We”) provides Privacy policy (this “Policy”) to describe the ways we collect, store, use and manage the information, including personal information, and data that our users (“Users” or “You”) provide we collect in connection with the Big Cliffs websites available at https://www.bigcliffs.com and any Big Cliffs game provided on mobile platform (each as “Service”, collectively the “Services”).

Services are free to play games (with optional in-game purchases) and in order to maintain high quality and a great game experience we process information from and about You in particular to improve the entire experience in the Services and support internal operations. 

This Privacy Policy is updated from time to time. If any changes are made, We will notify You by revising the date at the top of the Policy depending on the specific changes, We will provide You with additional notice or require renewed consent. 

We encourage You to review the Privacy Policy whenever you access the Services to stay informed about how we process your personal data and how you can protect your privacy.

INFORMATION AND DATA WE COLLECT FROM YOU

Information we collect automatically through the Services

When You access or use the Services, we automatically collect general information about You, including:

• Log Information: We log information about your use of the Services, including the type of device you use, the features you use, access times and your IP address.
• Device Information: We collect information about the device you use to access the Services, including information about the device’s software and hardware, unique device identifiers (i.e. Device ID and advertising ID), device tokens for push-messages, mobile network information and time zone.
• Usage Information: We collect information relating to your use of the Services, including your game progress, scores, achievements and interactions with other players.
• Consumption information: We collect information about your consumption habits relating to your use of the Services, including which purchases you make with both virtual and real currencies and the reception of virtual goods in-game.

Information we collect from other sources

If you log into the Services using a third party site or platform such as Facebook, Apple Game Center and Google Sign-In, we access information about you from that site or platform, such as your screen name, profile information and friend lists, in accordance with the authorization procedures determined by such third party site or platform provided that you have given the third party site in question such consent.

If you log into the Services using a third party site or platform, you represent and warrant that

      i.         your access and use of such features in connection with the Services will comply with the applicable terms and policies of such site or platform;

     ii.         that you are over the minimum age limit that is prescribed for such third party site or platform by the legislation in the individual jurisdictions.

HOW WE USE YOUR INFORMATION – PURPOSE AND LEGAL BASIS

We use information about you for the following purposes in accordance with the legal bases for each type of personal data as described below:

Log, device, usage and consumption information are being processed:

• to provide and deliver the products and services you request and send you related information as requested by you / as agreed with you;
• to provide and maintain the Services and the game experience; and
• to send you technical notices, updates, security alerts, and support and administrative messages;

Our processing for the above purposes is necessary for the performance of a contract to which you are party in order to support the operation of the Services, facilitate the delivery of requested products and services and enable maintenance and update of the Services, see Article 6(1)(b) of the GDPR.

• to provide news and information about the Services that we think will be of interest to you;
• to personalize and improve the Services and provide tailored content and features;
• to monitor and analyze trends, usage and activities in connection with the Services;
• to provide children (as this term is construed under GDPR in EU, COPPA in the US and relevant applicable legislation in other jurisdictions) with reasonable contextual advertisements in the Services.

Our processing for the above purposes is justified by our legitimate interests in providing advertisements and content of interest to you and improving our services in accordance with Article 6(1)(f) of the GDPR (also known as "the balancing-of-interest rule").

• to provide non-child users that have given us consent to share their advertising IDs with our ad network partners (as further specified under Sharing of Information) for the purpose of serving them with personalized advertisement in the Services (behavioral advertising).

Our processing for the above purpose is justified by our legitimate interests in providing advertisements and content of interest to you in accordance with Article 6(1)(f) of the GDPR. The disclosure of your advertising ID to third parties for the purposes of behavioral advertising is based on your consent in accordance with Article 6(1)(a) of the GDPR (see more below under Sharing of Information).

 Information from other sources are being processed:

• to provide and deliver the products and services you request and send you related information;

Our processing for the above purpose is necessary for the performance of a contract to which you are a party in order to facilitate the delivery of requested products and services, see Section 6(1)(b) of the GDPR.

• to link or combine information we get from others to help understand your needs and provide you with better service; and
• to provide news and information about the Services we think will be of interest to you;

Our processing for the above purposes is justified by our legitimate interests in providing content of interest to you and improving our services in accordance with Article 6(1)(f) of the GDPR.

We only process your information to the extent that is necessary to achieve the purposes for which the information has been collected.

STORAGE OF INFORMATION COLLECTED

Big Cliffs stores your personal data for a maximum duration of 18 months after collection. Beyond this term, data may be rendered anonymous and stored solely for statistical use and will not be exploited, in any nature whatsoever.

USE OF YOUR INFORMATION BY OTHERS

We disclose information about you to the following categories of recipients based on the legal bases in Sections 6(1)(b), 6(1)(c) and 6(1)(f) of the GDPR (see a description of the legal bases above):

• Social networks, see more under "Social Sharing features";
• Third parties if we are required to disclose your personal data by applicable law, rule, regulation, legal process or in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company;
• The authorities if we believe your actions are inconsistent with the spirit or language of our policies or if the disclosure is necessary to protect the rights, property and safety of  Big Cliffs or others;
• Other players in order to provide certain in-app features, such as leaderboards, if you log into the Services using a third-party service, such as Facebook or Apple Game Center;
• Advertising network companies in order to serve contextual advertisements (the data include your IP address, Device ID and advertising ID).

Furthermore, if you have given your consent in accordance with Section 6(1)(a) of the GDPR, we share your advertising ID to advertising network companies for the purpose of them serving behavioral advertisements to you within the Services. We use or may use the following advertising network companies:

• MoPub, Inc. https://www.mopub.com/legal/privacy/
• MoPub, Inc. Partners https://www.mopub.com/legal/partners/

The recipients' use of the disclosed information will not be covered by this Privacy Policy. If you have questions concerning the processing carried out by such third parties, you should review their privacy policy.

In connection with our processing, we use data processors such as server hosting providers, technical service providers for supporting internal operations, user login services and analytics service providers.

• GameAnalytics ApS https://gameanalytics.com/privacy
• Google Analytics (Alphabet, Inc.) https://www.google.com/intl/en/policies/privacy/partners/
• Facebook Analytics (Facebook, Inc.) https://www.facebook.com/about/privacy/

HOW WE MAY DISCLOSE YOUR INFORMATION TO OTHERS

In connection with the processing, we will in certain circumstances transfer your personal data to recipients in the U.S which has been declared an unsafe third country by the European Commission.

We only transfer personal data to entities in third countries that have provided appropriate safeguards to ensure that their level of data protection is in agreement with this privacy policy and applicable law.

Consequently, the transfers will only occur based on the following safeguards:

• If the entity is certified to comply with the principles for data protection under the US-EU Privacy Shield Framework ("Privacy Shield") (you can view the entities certified under Privacy Shield at https://www.privacyshield.gov/), or
• If we have entered into standard data protection clauses adopted by the Commission with the entity, which is deemed to offer sufficient safeguards with respect to the protection of the privacy and fundamental rights and freedoms of individuals (you can obtain a copy of the clauses by contacting  Big Cliffs).

YOUR RIGHTS CONCERNING DATA COLLECTED

If you wish to use any of the rights described below, you may contact us at any time by emailing us at contact@bigcliffs.com

We process and answer your requests without undue delay and in any event within one month of our receipt of the request unless a longer period is required due to the complexity of the request. In this case, our response time can be up to three months in total as permitted by Article 12 of the GDPR.

Right to request access

You have the right to request access into the data that we are processing on you, see Article 15 of the GDPR, including information about:

• the purposes of the processing
• the categories of personal data concerned
• the recipients or categories of recipient to whom the personal data have been or will be disclosed
• the envisaged period for which the personal data will be stored

Furthermore, you have the right to obtain a copy of the personal data undergoing processing. Please note that the access may be restricted due to intellectual property or trade secrets.

The right to object

You have the right to object to our processing of your personal data on grounds relating to your particular situation when the data are processed based on the balancing-of-interest rule in Section 6(1)(f) of the GDPR, see Article 21 of the GDPR. In this case, we will cease the processing unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is necessary for the establishment, exercise or defense of legal claims.

You have the right to object to our processing of your personal data for direct marketing purposes at any time. We will cease the processing of your personal data for this purpose after the objection. Please note that if you exercise this right, your user license to use the Services will cease automatically.

Right to rectification and erasure

You have the right to have inaccurate personal data rectified, see Article 16 of the GDPR.

Furthermore, you have the right to have your personal data erased where one of the following grounds applies, see Article 17 of the GDPR:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
• if you have withdrawn your consent and there are no other legal grounds for the processing,
• if you have objected to the processing and there are no overriding legitimate grounds for the processing,
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law,
• the personal data have been unlawfully processed or
• the personal data have been collected in relation to the offer of information society services.

Please note that your right to erasure may be limited if the data are necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims.

The right to restriction

You have the right to obtain restriction of processing in certain circumstances, see Article 18 of the GDPR. If you have the right to restriction, we will only process your data with your consent or for the establishment, exercise or defense of a legal claim or to protect a person or important grounds of public interest.

The right to withdraw consent

If we have asked for your consent to our processing of your data, you have the right to withdraw your consent at any time, see Article 7 of the GDPR.

If you withdraw your consent, we will cease processing of the data for which you have withdrawn consent, unless we have a legal obligation to keep some or parts of your data.

Please note that if you withdraw your consent, your user license to use the Services will cease automatically.

The withdrawal of your consent does not affect the lawfulness of processing based on your consent before its withdrawal.

The right to data portability

You have the right to receive the personal data you have provided us with which we process in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller if the processing is based on consent or contract performance, see Article 20 of the GDPR.

Push notifications

We send push notifications or alerts to your mobile device to provide game-related information, service updates, promotional communications and other related messages if you have agreed to such notifications. You can deactivate these notifications by changing your notification settings on your device.

PERSONAL DATA CONCERNING CHILDREN

You must be at least 16 years old to use the Services. If you are accepting these Terms and using the Services, you warrant that you state the correct age and you are 16 or more years old.

If you have additional questions about Big Cliffs' privacy practices related to children under the applicable minimum age, please contact us at contact@bigcliffs.com

PERSONAL DATA SECURITY

Big Cliffs takes reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction.

CONTACT AND COMPLAINTS

Big Cliffs has the following contact information:

Big Cliffs Software

Address: Çarşı Mah. Yenimahalle 06105 Ankara/Turkey

E-mail: contact@bigcliffs.com

If you wish to make a complaint about the processing of your personal data, you have the right to lodge a complaint to the relevant supervisory authority