Privacy Policy

01

CONTROLLER

Controller responsible for data processing

Rise of Legends
Moos 19
6410 Telfs

Behörde: Bezirkshauptmannschaft Innsbruck
GISA-Zahl: 40238814

Behörde: Finanzamt Innsbruck
Steuernummer: 81 325/2228

Umsatzsteuerfrei aufgrund der Kleinunternehmerregelung gemäß § 6 Abs. 1 Z 27 UStG.
Austria
info@riseoflegends.net

02

SCOPE

Which services does this policy cover?

This Privacy Policy applies to riseoflegends.net, including login, registration, account area, rankings, WCoin purchases, vouchers, news, downloads, support, bug reports and other website functions, as well as technical data processed when using the game server and launcher.

03

ACCOUNT

Registration and game account

When you register and use an account, we process in particular your account name, password in the technically intended storage form, recovery data, email address where applicable, account status, security and moderation information, and timestamps of relevant account actions. This processing is used to create, manage and protect your account and provide the game.

04

GAME DATA

Character and game data

For game operation, we process data such as character name, level, class, guild, inventory, items, progress, currencies, quests, combat and PvP data, server events and similar game-related information. Parts of this data may be displayed in public rankings or player profiles where this is an intended game feature.

05

SERVER LOGS

IP address, logins and security logs

When accessing the website, launcher and game server, the IP address, date and time, requested resource, login attempts, technical error messages, connection information and security-related events may be logged. This data is processed in particular for troubleshooting, abuse detection, attack prevention and maintaining stable server operation.

06

SUPPORT

Support tickets and bug reports

If you create a support ticket or bug report, we process the associated account, category, subject, message, timestamps, status, replies and any screenshots you upload. This data is required to handle your request, investigate issues and prevent abuse of the support system.

07

PAYMENTS

WCoins, Stripe and PayPal

WCoin payments are processed through Stripe or PayPal. Information required to process the payment is sent to the selected payment provider. Rise of Legends does not store full payment-card details or PayPal login credentials. We may store an internal order reference, payment reference, amount, WCoin quantity, payment status, timestamp and, where applicable, the customer email returned by the payment provider. Depending on the specific service, Stripe and PayPal may act as processors and/or independent controllers.

08

COOKIES

Cookies and session data

The website uses technically necessary cookies and session information so that login, language settings, security functions and the admin area work correctly. If optional analytics, marketing or tracking services are used in the future, they will only be used on an appropriate legal basis and this Privacy Policy will be updated accordingly.

09

LEGAL BASES

Legal bases for processing

Depending on the processing activity, personal data is processed in particular to perform a contract or take pre-contractual steps, comply with legal obligations, pursue legitimate interests in security, abuse prevention, troubleshooting and stable operation, or on the basis of consent where consent is required for a specific processing activity.

10

RECIPIENTS

Recipients and service providers

Personal data is shared only with parties that need it for the relevant purpose. These may include hosting and infrastructure providers, payment providers such as Stripe and PayPal, technical service providers, and authorities or courts where disclosure is legally required. We do not disclose personal data for third-party advertising purposes.

11

THIRD COUNTRIES

Transfers outside the EU/EEA

Some service providers may process data outside the European Union or European Economic Area. In such cases, the relevant providers should use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or other mechanisms permitted under the GDPR. The provider’s own privacy information also applies to the specific processing.

12

RETENTION

How long do we keep data?

We retain personal data only for as long as necessary for the relevant purpose or while statutory retention obligations apply. Account and game data may generally be retained until the account is deleted or permanently closed. Security logs are kept only as long as necessary for protection, troubleshooting and abuse investigations. Payment and accounting records are retained in accordance with applicable statutory periods; in Austria, the general tax retention period for many business records is normally seven years.

13

YOUR RIGHTS

Access, rectification, erasure and other rights

Subject to the GDPR, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw that consent for the future. Statutory retention duties or compelling reasons may prevent immediate deletion of certain data.

14

AUTOMATION

Automated decisions

As a rule, we do not make decisions based solely on automated processing that produce legal or similarly significant effects within the meaning of Article 22 GDPR. Automated security checks, spam protection or technical blocking mechanisms may be used, but final moderation decisions can be reviewed.

15

SECURITY

Protecting your data

We use appropriate technical and organisational measures to protect data against loss, manipulation, unauthorised access and misuse. These include access restrictions, server and firewall protection, secured administration areas, logging of security-relevant activity and encrypted HTTPS connections on the website.

16

EXTERNAL LINKS

Discord and external websites

The website may contain links to Discord, Stripe or other external services. When you open an external service, that provider’s own privacy terms also apply. Rise of Legends does not have full control over how external providers design their systems or process data.

17

CHANGES

Changes to this Privacy Policy

We update this Privacy Policy when functions, service providers, legal requirements or processing activities change materially. The current version will be published on this page.