PLAION wants to understand how social media users discuss our games and products, as well as other topics relevant to PLAION, so that we can take into account your opinion and feedback and improve our games. To this end, like many other companies and public institutions, we analyse social media activity related to our games and monitor the use of our own social media channels. The conclusions drawn from the analysis help shape the PLAION’s communication and development strategy.
Data protection legal framework applicable to the PLAION
All personal data will be processed in line with European Union data protection legislation.
Who is responsible for the processing of personal data?
PLAION is the controller for the processing of personal data. We use an external provider to process and analyse public social media data on our behalf and according to our instructions.
Legal basis for the processing of personal data
We collect and process personal data to learn about our followers and improve our games. As such, we have legitimate interests to process your personal data that is publicity available on social media. We ensure that adequate and specific safeguards are implemented for the processing of personal data, in line with the applicable data protection legislation.
Origin and type of the data processed
The external provider collects and analyses data from public posts by social media users on different social media channels, and tracks different online sources including forums, blogs and online news websites. The external provider only processes information that is publicly available.
The external provider processes the following personal data on our behalf:
- identification data (name, username, user identification and geographical area)
- personal characteristics (age, gender and family status)
- consumer habits
- hobbies and interests
- professional and educational background
- pictures and videos
- any other information published on a website that is analysed or on a third-party platform.
While the external provider collects the personal data listed above, we only analyse some of these data. We mostly use aggregate data for this analysis. However, individual quotes may be captured as examples and used to describe the general attitude towards PLAION in social media.
We have set up strict limitations on the topics we monitor and have ensured that our staff, when accessing and using the external provider’s database, are bound by clear instructions and confidentiality obligations.
Who will receive personal data?
Only authorised PLAION staff will be recipients of the personal data.
How long will PLAION keep personal data?
Reports containing personal data will be stored for a maximum of five years and will then be destroyed/deleted. Upon the instructions of PLAION, the external provider will delete the results of searches after a period of six months. Automatic backups will also be deleted from the provider’s servers after six months.
Your rights
You have the right to object against our processing activity, access and rectify your personal data, to restrict the processing of your data and, under certain conditions, to ask for your data to be deleted. Since we do not directly interact with social media users whose data are being processed and, in principle, do not have access to their contact details, it is impossible or would involve a disproportionate effort to inform those users individually. We therefore inform social media users via this privacy statement.
Exercising your rights
You can exercise your rights by emailing the Data Protection Officer of PLAION at dpo@plaion.com. For more details retarding your rights and our contacts please see our Privacy Policy.
Further information
Further information and points of contact related to the processing of personal data can be found in Privacy Policy (https://plaion.com/en-de/privacy)
If you have further questions, you can also email the our Data Protection Officer at dpo@plaion.com.
Contacting the supervisory authority
Furthermore, without prejudice to any other administrative or judicial remedy, you have the right to file a complaint to a supervisory authority, in particular in the Member State of residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is violates the GDPR.