Privacy Policy

Use of Acquired Information 

We don’t sell neither distribute nor offer our customers information in any way. With these only exceptions and for their relative purposes 

• Third party service providers: We employ other companies and individuals to perform functions on our behalf. Examples include fulfilling orders for products or services, delivering packages, analysing data, providing marketing assistance, providing search results and links, processing payments, and providing customer service. These third-party service providers have access to personal information needed to perform only their functions but may not use it for other purposes. Further, they must process the personal information in accordance with this Privacy Policy and as permitted by applicable data protection laws.
• Business transfers: As we continue to develop our business, we might sell or buy other businesses or services. In such transactions, customer information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Policy (unless, of course, the customer consents otherwise). Also, in the unlikely event that horribleguild.com, or substantially all its assets are acquired, customer information will of course be one of the transferred assets.
• Other than as set out above, you will receive notice when personal information about you might be shared with third parties, and you will have an opportunity to choose not to share the information.
• Subsidiaries-Group: your data can be shared by us with our subsidiary companies and companies being part of the same group (companies controlled or owned by Horrible Games S.r.l.).

Information security

Our systems are designed with your security and privacy in mind.

• We work to protect the security of your personal information during transmission by using encryption protocols and software.
• We follow the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data.
• We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal customer information. Our security procedures mean that we may ask you to verify your identity before we disclose personal information to you.
• It is important for you to protect against unauthorised access to your password and to your computers, devices, and applications. We recommend using a unique password for your account that is not utilized for other online accounts. Be sure to sign off when you finish using a shared computer.

What Information Can I Access?

You can access your information, including your name, address, payment options, profile information, and purchase history in the “Account” section of www.horribleguild.com.

Mode and place of processing and storing the Data

The Data Controller processes the Data of Users in a proper manner and takes any appropriate security measures (as described) to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

The Data are transferred from the website to Owner office computers to be managed with its managing software.

The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time.

The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved with the processing are located.

Data are stored (depending on their purposes) within the website, on sendinblue.com and owner office computers.

For further information, please contact the Data Controller.

Retention time

The Data is kept for the time necessary to provide the service requested by the User, or stated by the purposes outlined in this document, and the User can always request that the Data Controller suspend or remove the data.

EU General Data Protection Regulation

The EU GDPR requires a legal basis for our use of your personal information. Our basis varies depending on the specific purpose for which we use personal information. We use:

• Performance of a contract: when we provide you with products or services or communicate with you about them. This includes when we use your personal information to take and handle orders, deliver products, and process payments.
• Our legitimate business interests and the interests of our customers: when we improve our services, when we detect and prevent fraud and abuse to protect the security of our customers, ourselves, or others.
• Your consent when we ask for your consent to process your personal information for a specific purpose that we communicate to you. When you consent to our processing your personal information for a specified purpose, you may withdraw your consent at any time, and we will stop processing of your data for that purpose.
• Compliance with a legal obligation: when we use your personal information to comply with laws.

This privacy statement has been prepared in fulfilment of the obligations under Art. 10 of EC Directive n. 95/46/EC, and under the provisions of Directive 2002/58/EC, as revised by Directive 2009/136/EC, about Cookies.

This privacy policy relates solely to www.horribleguild.com.

Contacts, Notices & Revisions

If you have any concern about privacy at Horrible Games S.r.l. or want to contact one of our data controllers, please contact us with a thorough description and we will try to resolve the issue for you.

Our business changes constantly and our Privacy Notice will change also. You should check our website frequently to see recent changes. Unless stated otherwise, our current Privacy Notice applies to all information that we have about you and your account. We stand behind the promises we make, however, and will never materially change our policies and practices to make them less protective of customer information collected in the past without the consent of affected customers.