This Privacy Policy informs you about our policy concerning the protection of personal data ("Personal Data") collected and processed when playing Hot Candy Land “the Game” (www.hotcandyland.com).

Please read the Privacy Policy and do not hesitate to contact us if you have any questions.

Access to and/or use of the Game implies you agree to the conditions provided for in the Privacy Policy concerning, in particular, the collection and use of your Personal Data as described below.

The present Privacy Policy may be updated at any time by Hot Candy Land. It's recommended that you consult it regularly. We collect and process your e-mail address and country of residence, connection and browsing data.

This Personal Data may be collected:

• when you register to play or play Hot Candy Land,
• when you identify yourself on a social network such as facebook.com

For the requirements of the Game, certain information like your score, your level or ranking, may be accessible and visible to Hot Candy Land and all other users. When you invite new members to play the game, or when you send messages using our services, we collect and store the information associated with these exchanges on our secure servers, in particular their content and e-mail addresses.

Hot Candy Land may:

• contain links to third-party websites and
• include content hosted by third-party websites

Hot Candy Land may not be held responsible for the non-respect of Personal Data protection on these websites and/or by these entities. We recommend that our users consult the section concerning privacy and Personal Data protection before using these websites and/or online payment solutions. Hot Candy Land may also not be held responsible for practices concerning how Personal Data is processed by the platforms (especially social networks) on which Hot Candy Land is available. Hot Candy Land contains explicit content that should only be viewed by adults. Therefore players are required to ensure that they are at least 18 years old at account registration. The Personal Data collected and processed by Hot Candy Land enables you to access and/or use our game. It also enables us to:

• analyse users' trends and behaviours with a view to improving the Game,
• ensure maintenance for the Game,
• target the advertising content present on our Game,
• communicate with you, in particular by e-mail, in order to inform you about new features or evaluate your satisfaction.

The e-mails we send you contains information on how to unsubscribe if you do not wish to receive further e-mails from us. Hot Candy Land is using cookies to keep track of user sessions. You may, at any time, choose to delete or refuse these cookies. To find out how to do this, we recommend that you consult your Internet browser's "Help" section.

Should you chose to disable cookies, the Game will not work. Your Personal Data will not be communicated to third parties except in the following cases:

• The communication of your Personal Data to any competent authority in application of a regulatory or legal provision and/or by virtue of any legal or administrative ruling.

You may choose to voluntarily share and make your Personal Data public in the Game by posting messages or content. When you do this, you are responsible for any damages which may arise as a result of this disclosure.

You may close your account at any time and this will delete your profile and make all of your personal details invisible. However, Hot Candy Land may conserve your Personal Data for a reasonable period of time even once your account has been closed. Users' rights concerning the Data Protection Act

In accordance with Act No. 78-17 of 6 January 1978 concerning information technology, files and civil liberties, modified by Act No. 2004-801 of 6 August 2004, you have the right to access, modify, rectify, delete and oppose information which concerns you. To exercise this right, just send an e-mail to: info@hotcandyland.com Hot Candy Land accords particular importance to the security of your Personal Data and takes all the necessary precautions to limit the risk of loss, deterioration or improper use of it. Your account data is stored on a secure server equipped with a firewall.

We recommend that you do not send Personal Data using non-secure communication methods, such as e-mails and instant messages. Do not hesitate to contact us by e-mail at info@hotcandyland.com if you have any questions about how Hot Candy Land uses your Personal Data, and, in particular, about the provisions of the present Privacy Policy. Hello!

If you came here, it must mean that you value your privacy. We understand this perfectly, that's why we have prepared this document for you. Here you will read about the rules for processing personal data and the use of cookies in connection with the use of the https://hotcandyland.com website.

The administrator of the website is TIMELESS LLC, based in Kraków (31-144), Poland, Ostatnia 1c, entered into the Register of Entrepreneurs of the National Court Register under the number 0000334566 which registration file is kept by the District Court for Krakow-Śródmieście in Kraków, XI Commercial Division of the National Court Register, NIP (Tax Identification Number): 9452129866, REGON ( National Business Registry Number): 12099738000000.

If you have any questions regarding our Privacy Policy remember that you can contact us at any time by writing us an e-mail to info@hotcandyland.com We care about your privacy and value your time. That is why we have prepared a short version of the most important rules related to privacy protection.

1. By placing an order, filing a complaint, withdrawing from a contract, subscribing to a newsletter or simply contacting us, you provide us with information about you that includes your personal data. We guarantee that your data will remain confidential, secure and will not be made available to any third party without your explicit consent.
2. We entrust the processing of personal data only to verified and trusted entities providing services related to the processing of personal data.
3. We use Google Analytics tools that collect information about your visits to the website such as the subpages that you have viewed, the time you spent on the website or the transitions between individual subpages. For this purpose, Google LLC cookies are used for the Google Analytics service.
4. Advertisements are displayed on the website as part of the AdSense adverstising network. For this purpose, Google LLC cookies are used for the Google AdSense service.
5. We provide the opportunity to use social media functionalities such as sharing content on social media sites and subscribing to a social media profile. Using these functionalities may involve the use of cookies of social media sites such as Facebook, Instagram, Youtube, Twitter, Google+, LinkedIN.
6. We use first-party cookies in order for the site to function properly, in particular to manage user’s account and order's process.

If the above information is not enough for you, you will find further details below. The Administrator of your personal data, in accordance with the Act on the Protection of personal data is TIMELESS LLC, based in Kraków (31-144), Poland, Ostatnia 1c, entered into the Register of Entrepreneurs of the National Court Register under the number 0000334566 which registration file is kept by the District Court for Krakow-Śródmieście in Kraków, XI Commercial Division of the National Court Register, NIP (Tax Identification Number): 9452129866, REGON ( National Business Registry Number): 12099738000000, share capital: PLN 294,000.00.

Purposes, legal bases and specified period of personal data processing are described separately for each purpose of data processing (see the provisions below for a detailed description of the different purposes of data processing). Rights of the data subject. RODO (GDPR) grants you the following potential rights related to the processing of your personal data:

1. the right of access to your personal data,
2. the right to rectification of your personal data,
3. the right to erasure of your personal data,
4. the right to restriction of processing of your personal data,
5. the right to object to processing of your personal data,
6. the right to data portability,
7. the right to lodge a complaint to the supervisory authority,
8. the right to withdraw consent for the processing of personal data, if such consent has been previously given.

The above mentioned rights can be exercised in accordance with the regulations described in art. 16 - 21 of RODO (GDPR). We encourage you to read these regulations. It is necessary to explain that the above mentioned rights are not absolute and you are not entitled to all of them when processing of your personal data is concerned. For your convenience, we have made every effort to indicate the rights to which you are entitled as part of the description of individual data processing procedures.

We emphasize that you always have one of the rights indicated above - shall you decide that during processing of personal data we have violated the provision concerning the protection of personal data, you have the opportunity to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection)..

You can also always ask us to provide you with information about what data we have and the purposes of the processing for which the personal data are intended. Just send a message to the following e-mail address info@hotcandyland.com We 2have made every effort to ensure that relevant information in this privacy policy is described in a comprehensive manner . If you have any questions related to the processing of your personal data, you can use the e-mail address given above to send us a message. We guarantee the confidentiality of any personal data made available to us. We ensure that all security measures and personal data protection required by provisions of the Act on the Protection of personal data are taken. Personal data is collected with due diligence and adequately protected against access by unauthorized persons. We may share your personal data with our subcontractors; that is entities whose services we use when processing the personal data.

1. OVH Sp. Z o.o.(LLC), ul. Szkocka 5/1, 54-402 Wrocław, Poland – for the purpose of storing personal data on the server,
2. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – for the purpose of storing data on the mailbox server,
3. Lijin Sp. Z.o.o. (LLC), ul. Łagiewnicka 33b, 30-417 Kraków, Poland - for the purpose of using accounting services provided by an external entity, which processes your personal data when we issue an invoice,
4. our partners cooperating with us to provide services to you.

All entities entrusted with processing of personal data guarantee the use of adequate security measures and personal data protection required by law.

As part of using Google services, you personal data may be transferred to USA as they are stored on servers located in the USA. Google joined Privacy Shield programme, which means that it guarantees an adequate level of protection of personal data required by European regulations. User account. While creating an account you have to provide all of the necessary information. Data provision is voluntary, but necessary for creating the account.

The data provided to us when creating the account are processed in order to create and maintain the account under a contract for the provision of electronically supplied services which is concluded by account registration (art. 6, paragraph 1, point b of the GDPR).

Personal data included in your account is processed for the period of your account activity You can decide to delete your account which will also result in the removal 3of your personal data assigned to it. However, deleting the account does not result in the removal of information about your orders placed while using the account.

You have the right to rectification of your personal data assigned to the account at any time. You can delete your account at any time. You also have the right to transfer the data referred to in art. 20 of GDPR.

Orders. When placing an order, you must provide data necessary to complete the order. Data provision is voluntary, but necessary for placing the order. Data provided in the order are processed for the purpose of executing the order (art. 6 paragraph 1, point b GDPR), issuing an invoice (art. 6 paragraph 1, point c GDPR), including invoices in our accounting documentation as well as for archival and statistic purposes (art. 6 paragraph 1, point f GDPR).

Orders’ data shall be processed in the time necessary to execute the order and then until the expiry of the limitation period for claims under the contract. In addition, upon the lapse of that period, the data may still be processed for statistical purposes. Please, keep in mind that we are under obligation to store invoices containing your personal data for a period of 5 years from the end of the tax year in which the tax obligation occurred.

In the case of orders’ data the data are not subject to rectification after the order has been executed. You also cannot object to the processing of data and require erasure of the data until the expiry of the limitation period for claims under the contract. Likewise, you cannot object to the processing of data and request erasure of the data contained in the invoices. After the expiry of the limitation period for claims under the contract, you have the right to object to processing of personal data for statistic purposes, as well as to request erasure of your data from our database.

In relation to the orders’ data, you also have the right to transfer the data referred to in art. 20 of GDPR.

Complaints and withdrawal from the contract. If you make a complaint or withdraw from the contract, you provide us with the personal data contained in the content of the complaint or a statement of withdrawal, which should include your name, address, telephone number, e-mail address, bank account number. Data provision is voluntary, but necessary for making a complaint or withdrawing from the contract.

The data provided to us in connection with the submission of the complaint or declaration of withdrawal from the contract are used to implement the complaint procedure or the withdrawal procedure (art. 6 paragraph 1, point c of GDPR). 4The data will be processed in the time necessary to carry out the complaint procedure or the withdrawal procedure. Complaints and declaration of withdrawal from the contract may also be archived for statistic purposes.

Data contained in complaints and declarations of withdrawal from the contract are not subject to rectification. You also cannot object to the processing of data and require erasure of the data until the expiry of the limitation period for claims under the contract. After the expiry of the limitation period for claims under the contract, you have the right to object to processing of personal data for statistic purposes, as well as to request erasure of your data from our database.

Newsletter. If you want to subscribe to the newsletter you have to provide your e- mail address by filling in the subscription form. Data provision is voluntary, but necessary for subscribing to the newsletter.

Data provided during newsletter subscription are processed in order to send you the newsletter. The legal basis for the processing of data is your consent (art. 6 paragraph 1, point a of GDPR) given when subscribing to the newsletter. The data are processed in the database of the mailing system for the duration of the newsletter, unless you unsubscribe, which will cause deletion of the data from the database.

The data stored in the newsletter database are subject to rectification at any time. You can also request erasure of the data by unsubscribing. You also have the right to transfer the data referred to in art. 20 of GDPR.

Contact. By contacting us through e-mail, as well as sending messages through the contact form or or on-line chat, you provide us with your e-mail address which shall be associated with the sender. What is more, in the message you can include other personal information. Data provision is voluntary, but necessary for contacting us.

In this case, your data are processed in order to contact you. The basis for processing the data is art. 6 paragraph 1, point a of GDPR, or your consent resulting from initiating contact with us. The legal basis for processing the data after the end of the contact is a justified purpose that is archiving correspondence for internal needs (art. 6 paragraph 1, point c of GDPR).

The content of the correspondence may be archived and we cannot clearly determine when it will be deleted. You have the right to request a history of the correspondence that you carried out with us (if it was subject to archiving), as well as request its deletion, unless its archiving is justified by our precedent interests, e.g. protection against potential claims on your part.

5Our website, like almost all other websites, uses cookies. Cookies are small pieces of text information stored on your end device (computer, tablet, smartphone) that can be read by our ICT system (first-party cookies) or third-party ICT systems (third-party cookies).

Some of our cookies are deleted after the web browser session ends, i.e. after the browser is closed (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser the next time you access the site (persistent cookies).

More details can be found below.

Agreeing to cookies. When you visit the website for the first time, you are shown a message about the use of cookies. Thanks to a special tool you have the possibility to manage cookies from the site. In addition, you can always change cookie settings or delete them from your browser. Internet browsers manage cookie settings in various ways. Information about cookie settings can be found in the browser menu.

However, remember that disabling cookies may cause difficulties in using our website as well as many other websites. First-party cookies. We use first-party cookies in order to ensure proper functionality of the website, in particular managing user’s account and proper operation of the cart and the ordering process Third-party cookies Our website, like most of today's websites, uses functions provided by third parties which involve the use of third-party cookies. The use of these types of files is described below.

Google Analytics. We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The scope of our operations is executed based on our legitimate interest in the creation of statistics and their analysis in order to optimize our websites.

Google Analytics automatically collects information about the use of our site. The information collected is most often transmitted to a Google server in the United States and stored there.

Due to the IP anonymization applied by us, your IP address is altered and shortened before being sent further. Only in exceptional cases the full IP address is forwarded to a Google server in the United States and shortened there. The anonymized IP address provided by your browser as part of Google Analytics is not combined with 6other Google data as a matter of principle.

Due to the fact that Google LLC has a registered office in the USA and uses technical infrastructure located in the USA, they joined the EU-US-Privacy Shield program to ensure an adequate level of data protection required by European law. Under the agreement between the USA and the European Commission, the latter has declared companies with a Privacy Shield certificate as providing an adequate level of data protection.

You can prevent the data collected by cookies from being used by Google, as well as the processing of the data by installing the browser plug-in at the following address: https://tools.google.com/dlpage/gaoptout.

If you are interested in the details related to the processing of personal data within Google Analytics, we encourage you to read the guidelines prepared by Google: https://support.google.com/analytics/answer/6004245.

Google AdSense. We display ads on the site as part of the AdSense advertising network managed by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The scope of our operations is executed based on our legitimate interests in ensuring the maintenance of the website provided free of charge thanks to advertisements being displayed on it.

When visiting our website, Google's cookie remarketing file will be left on your device automatically, which allows for interest-based ads to be displayed with the help of a pseudonymous identifier (ID) and based on the websites you visit.

Further processing of the data occurs only if you agree for Google to combine your browsing and use of the application history with your account and to use the information from your Google account to personalize ads that are displayed on the websites. If in this case you are logged into your Google account when you visit our website, Google will use your data together with Google Analytics data to create and define lists of target groups for remarketing purposes on different devices. Google temporarily combines your personal information with Google Analytics data to create target groups.

Due to the fact that Google LLC has a registered office in the USA and uses technical infrastructure located in the USA, they joined the EU-US-Privacy Shield program to ensure an adequate level of data protection required by European law. Under the agreement between the USA and the European Commission, the latter has declared companies with a Privacy Shield certificate as providing an adequate level of data protection.

You can deactivate cookies used for remarketing as part of your Google account settings: https://adssettings.google.com. In addition, as part of the cookie settings, you can disable the use of cookies for remarketing directly on our website.

If you are interested in the details related to the processing of personal data by Google Adsense, we encourage you to read Google's privacy policy: https://policies.google.com/privacy Social Media tools. Our websites use plug-ins and other social media tools provided by social networking sites, such as Facebook, Twitter, Instagram, Google, LinkedIN. By viewing our website which contains such a plug-in, your browser will establish a direct connection to the servers of social network administrators (service providers). The content of the plug-in is forwarded by the given service provider directly to your browser and integrated into the website. Thanks to this integration, service providers receive information that your browser has displayed our website, even if you do not have a profile registered at the specific service provider’s website or if you are not logged in at that time. This information (along with your IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there. If you have logged in to one of the social networking sites, then this service provider will be able to directly assign a visit to our website to your profile at a given social network.

If you use a given plug-in, for example by clicking on the "Like" or "Share" button, then the relevant information will also be sent directly to the server of the given service provider and stored there.

In addition, this information will be published on your social network and will appear to people added as your contacts. The purpose and scope of the data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this area and the possibility of changing settings to protect your privacy are described in the privacy policy of the individual service providers.

• Facebook - https://www.facebook.com/legal/FB_Work_Privacy,
• Instagram - https://help.instagram.com/519522125107875?helpref=page_content,
• Twitter - https://twitter.com/en/privacy,
• Google - https://policies.google.com/privacy?hl=pl,
• LinkedIN - https://www.linkedin.com/legal/privacy-policy.

If you do not want the social networking sites to assign the data collected during the visit to our website directly to your profile at a given website, then you have to log out of this site before visiting our website. You can also completely prevent loading of the plug-ins on our website by using the appropriate extensions for your browser, e.g. blocking scripts. Use of the Website involves sending queries to the server on which the Website is hosted. Each query sent to the server is stored in server logs. Logs include User’s IP address, server date and time, browser and operating system information. Logs are saved and stored on the server. Data stored in the server logs is not associated with specific entities using the Website and is not used by the Administrator to identify any User. Server logs are stored solely for the purposes of administration of the Website. Their content is not revealed to any other entity beside persons authorized to administer the server.