#GDPR Compliance Statement

At Nurl, we are committed to protecting and respecting your privacy. This GDPR compliance statement explains how we comply with EU data protection law.

#Our Role and Responsibilities

Nurl acts as both a data controller and a data processor:

• As a controller for our users' account information
• As a processor for game data stored on behalf of publishers

#Data Protection Principles

We adhere to the principles set out in the GDPR:

1. Lawfulness, fairness, and transparency
2. Purpose limitation
3. Data minimization
4. Accuracy
5. Storage limitation
6. Integrity and confidentiality
7. Accountability

#Your Rights Under GDPR

Under GDPR, you have the following rights:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision making and profiling

#Data Processing Activities

#Data We Collect

• Account information
• Usage data
• Game system data
• Technical data

#Legal Basis for Processing

We process personal data on the following legal grounds:

• Consent
• Contract fulfillment
• Legal obligation
• Legitimate interests

#International Data Transfers

We ensure appropriate safeguards are in place when transferring data outside the EEA:

• Standard contractual clauses
• Privacy Shield certification (where applicable)
• Adequacy decisions

#Data Security Measures

We implement appropriate technical and organizational measures:

• Encryption at rest and in transit
• Access controls
• Regular security assessments
• Employee training

#Contact Information

For any GDPR-related queries:

Data Protection Officer Email: privacy@nurl.com

#Updates to This Statement

We regularly review and update this statement. Last updated: March 5, 2024