Privacy policy

Latest updated 27 june, 2023

---

About

We are thrilled that you have expressed interest in our company. At CSMiddler AB, safeguarding data is a top priority for our management. Although visitors can access our website without revealing any personal information, using certain services may require the processing of personal data. In such cases, we adhere to the General Data Protection Regulation, the Federal Data Protection Act, and other relevant data protection laws. If the law necessitates the data subject’s consent, we will obtain it before processing their data.

We process personal data, such as names, addresses, email addresses, and telephone numbers, in compliance with the GDPR and the country-specific data protection regulations that apply to CSMiddler AB. Through this privacy policy, we aim to inform the public about the type, scope, and purpose of the personal data we collect, use, and process. Moreover, this policy informs data subjects of their entitlement to certain rights.

As the controller, CSMiddler AB has taken various technical and organizational measures to ensure the comprehensive protection of personal data processed on this website. However, because internet-based data transmissions may have security gaps, we cannot guarantee absolute protection.

---

General

1. CSMiddler AB is the data controller for the processing of your personal data and is responsible for ensuring that such processing complies with applicable legislation.

2. With this privacy policy, we want to demonstrate that we store and process your personal data in accordance with applicable personal data legislation, including the General Data Protection Regulation (GDPR) within the EU/EEA, among others.

---

What a personal data and its processing mean

3. Personal data refers to any kind of information that can be directly or indirectly attributed to a living individual. The processing of personal data includes any action taken with regard to personal data. Each action taken with personal data constitutes processing, regardless of whether it is performed automatically or not. Examples of common processing activities include collection, registration, organization, structuring, storage, processing, transfer, and deletion.

---

Different types of personal data categories

4. Profile: Including but not limited to Steam username, ID, profile picture and inventory.

5. User: Including but not limited to full name, email-address, phone number, nationality, language, currency, address and date of birth.

6. Payment and payout processing: Including but not limited to IBAN, social security number, account number and account currency.

7. Technical Including but not limited to IP-address and connection logs.

---

Data sharing with third parties

8. We only share data with third parties if it is necessary to provide our service. Third parties should be understood as follows:

9. Transaction processing: Trustly Group AB

10. Support Administrator: Intercom R&D Unlimited Company

11. Secure services that provide us with IT and other technical services.

12. Authorities or others in relation to legal requirements and obligations, or to protect our legitimate interests in a legal dispute.

---

Rights of the Data Subject

13. As a data subject, you have certain rights regarding the processing of your personal data by CSMiddler AB. These rights include:

14. Right to Access: You have the right to request and receive a copy of your personal data held by CSMiddler AB. To exercise this right, please contact us using the details provided in the “Contact Us” section of this privacy policy.

15. Right to Rectification: If you believe that any of your personal data held by CSMiddler AB is incorrect or incomplete, you have the right to request corrections or updates. Please contact us with the relevant information to enable us to make the necessary changes.

16. Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data held by CSMiddler AB. Please contact us if you wish to exercise this right, and we will evaluate your request on a case-by-case basis.

17. Right to Restriction of Processing: You have the right to request a restriction on the processing of your personal data in specific situations. To exercise this right, please contact us with the necessary details.

18. Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller without hindrance from CSMiddler AB.

19. Right to Object: You have the right to object to the processing of your personal data by CSMiddler AB in certain circumstances. To exercise this right, please contact us with the relevant details.

20. Right to Withdraw Consent: If you have previously given consent for the processing of your personal data, you have the right to withdraw that consent at any time. To do so, please contact us using the details provided in the “Contact Us” section of this privacy policy.

---

Routine Erasure and Blocking of Personal Data

21. CSMiddler AB routinely erases or blocks personal data that is no longer needed for the purposes for which it was collected or processed, in accordance with applicable data protection laws and regulations. This process involves reviewing our data storage and processing systems at regular intervals to ensure that outdated, irrelevant, or excessive data is securely removed or anonymized.

22. In the event that you exercise your right to erasure, we will take appropriate measures to delete your personal data from our systems, except where retaining the data is required for legal or regulatory purposes, or to fulfill our contractual obligations to you.

---

Backup Measures to Protect Against Data Loss & Data Theft

23. CSMiddler AB takes the security of your personal data very seriously. To protect against data loss, data theft, and unauthorized access, we have implemented the following backup measures:

24. Secure Data Storage: We use industry-standard encryption methods to store and protect your personal data. Access to stored data is restricted to authorized personnel only.

25. Regular Backups: We perform regular backups of your personal data to ensure it can be recovered in the event of accidental loss or technical failure.

26. Secure Data Transfers: We utilize secure protocols and encryption methods when transferring your personal data between our systems and third-party service providers.

27. Incident Management: In case of a data breach or security incident, we have established a response plan to promptly investigate, mitigate, and report any unauthorized access, data loss, or data theft.

28. Employee Training: Our employees are trained on best practices for data privacy and security, and they are required to follow strict guidelines when handling your personal data.

29. Continuous Improvement: We regularly review and update our security measures to ensure they remain effective and in line with industry standards and best practices.

30. If you have any questions or concerns about the privacy and security of your personal data, or if you would like to exercise any of your rights as a data subject, please contact us using the details provided in the “Contact Us” section of this privacy policy. We are committed to addressing your inquiries and resolving any issues related to the protection of your personal data.

---

Contact us

31. If you have any questions about this privacy policy, the data processing practices of CSMiddler AB, or your rights as a data subject, please contact our Data Protection Officer using the following information:

Data Protection Officer

CSMiddler AB

Stora Nygatan 31

Gothenburg, 411 08

Sweden

Email: support@csmiddler.com

We will make every effort to respond to your inquiries and resolve any concerns promptly and effectively.