What kind of data is processed by us and why?

Sharing your personal data

Any data you provide will not be publicly displayed or shared to others. Our employees and business partners have access to personal data to the extent necessary for the performance of their work duties and are covered with confidentiality obligations. 

We use third party processors to help provide our service.

International transfers

We may use service providers that process your data outside the European Union. While doing this we make sure that the transfer of your personal data is carried out in accordance with applicable privacy law and, in particular, that appropriate contractual, technical, and organisational measures are in place (e.g. additional safeguards through Standard Contractual Clauses). 

Ensuring the security of personal data

We have taken necessary technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss or alteration and against the unauthorized disclosure, abuse or other processing in violation of applicable law.

Retention and deletion of personal data 

The storage period of personal data depends on the purpose we process the data. 

Your rights and preferences

Under data protection law, you have rights including:

1. Right to be informed and to access. You may get information regarding your personal data processed by us.

2. Right to data portability. You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to independently transmit those data to a third party. 

3. Right to erasure. You have the right to have personal data we process about you erased from our systems if the personal data are no longer necessary for the related purposes. 

4. Right to object and restrict. You have the right to object to the processing of your personal data and restrict it in certain cases.

5. Right to rectification. You have the right to make corrections to your personal data. 

6. Right to withdraw consent. When you have given us consent to process your personal data, you may withdraw said consent at any time.

To exercise any of the abovementioned rights, please contact maret@gameupacademy.eu. We will respond to your requests within 30 days. 

Personal data of minors

We may process data of underage people. In this case we do so with the knowledge of a parent/legal guardian. We follow data protection requirements applicable for processing child’s personal data (if any).

Social media and marketing

We may process personal data of users who visit our profiles held in social media (Facebook, LinkedIn, Instagram, YouTube, TikTok). The data is processed solely in connection with running the profile, including for the purpose of informing the users about our activity and promoting our services and products. The legal basis for processing the personal data for this purpose is our legitimate interest.

Regarding processing purpose and scope of collecting of personal data by respective social media platforms, please read their separate privacy notices. As social media providers may act as data controllers or joint controllers, there might be consent or opt-out requirements also on their side.

With your explicit consent, we may send you our newsletters and marketing communication. You may opt out of these messages. Please note that email marketing messages include an opt-out mechanism within the message itself (e.g. an unsubscribe link in the email). Clicking on the link in an email will opt you out of further messages. You can also write to us by e-mail to request the opt-out from messages.

Dispute resolution

If you have questions or concerns about our use of your personal information, please feel free to contact us at maret@gameupacademy.eu . You may also lodge a complaint to the supervisory authority, the Estonian Data Protection Inspectorate,  info@aki.ee .

This Privacy Notice was updated March 2025.