As Lemon8games Software Technology Advertising Marketing Limited Company (“Lemon8games”), we present to the public and relevant individuals our Information Notice, which has been prepared in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“Law”) and contains details regarding personal data processing activities for all data categories and groups of individuals;

ARTICLE 1: DATA CONTROLLER

Your personal data may be processed by Lemon8games as the data controller within the scope explained below. The term data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

You can contact the data controller through the following channels:

Address : İsmet Kaptan Mah. Şehit Nevres Bul. Deren Plaza No: 10 İç Kapı No: 11 Konak/İZMİR

Email Address : contact@playlemon8.com

Data Controller Representative : Yiğit SÜRGEÇ

ARTICLE 2: DATA PROCESSOR

A Data Processor is defined in Article 3 of the PDPL as a natural or legal person who processes personal data on behalf of the Data Controller based on the authority granted by them.

Your personal data, which will be processed by Lemon8games as the data controller, will be processed by Limon Information Technologies Inc. ("Limonhost") in the capacity of data processor.

ARTICLE 3: PROCESSED PERSONAL DATA AND PURPOSE OF PROCESSING PERSONAL DATA

Your name, surname, date of birth, gender, address, phone number, email address, order information, request information, IP address, website login and logout details, game and website-specific passwords, images related to your game profile that you have determined and customized, and username are listed below. Each data category is processed for the purposes specified next to it:

Address, phone number, email address (Contact Information) - Conducting marketing processes for products/services, Managing post-sales support services for goods and services,

1. Name, surname, date of birth, gender (Identity) - Fulfilling obligations regulated under the Consumer Protection Law No. 6502 and the Distance Contracts Regulation, providing information to authorized persons, institutions, and organizations, conducting management activities, managing goods and service sales processes, following legal affairs, ensuring compliance with legislation, conducting marketing processes for products/services, performing the service, ensuring compliance with standards introduced for digital games,
2. Order information, request information (Customer Transaction) - Conducting marketing processes for products/services,
3. IP address, website login and logout information, passwords (Transaction Security) - Ensuring that activities are carried out in compliance with legislation, providing information to authorized persons, institutions, and organizations, performing the service, ensuring the security of the digital environment, performing the service,
4. Images (Visual and Audio Records) - Conducting marketing processes for products/services, performing the service,
5. Username (Other Information) – Performing the service.

ARTICLE 4: METHODS OF PERSONAL DATA COLLECTION AND LEGAL GROUNDS

For the Distance Sales Agreement, the buyer, and for the User Agreement, the user, whose personal data is processed (hereinafter referred to as the "user"), has their personal data collected automatically through digital channels when using our website.

The legal basis for the collection and processing of personal data regarding identity information under this Information Notice is as follows:

• It is explicitly stipulated by law, necessary for the establishment or performance of a contract provided that it is directly related to the parties of the contract, and essential for the establishment, exercise, or protection of a legal right.

 

For customer transaction information, the legal basis is as follows:

• It is explicitly stipulated by law, necessary for the establishment or performance of a contract, provided that it is directly related to the parties of the contract, and essential for the establishment, exercise, or protection of a legal right.

For transaction security information, the legal basis is as follows:

• It is essential for the establishment, exercise, or protection of a legal right, and necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

For visual and audio records, the legal basis is as follows:

• It is necessary for the legitimate interests of the data controller.

For visual and audio records, the legal basis is as follows:

• It is necessary for the legitimate interests of the data controller.

ARTICLE 5: PARTIES TO WHOM PERSONAL DATA MAY BE TRANSFERRED AND PURPOSE OF TRANSFER

The personal data subject to this Information Notice may be transferred in an anonymized form to Neosonyx Co. Ltd. ("License Holder") (A-1207, 606, Seobusaet-gil, Geumcheon-gu, Seoul, 08504, South Korea), which holds the license for the digital online game "Rakion", by the data controller Lemon8games, which operates under the licensee status. This transfer is carried out in accordance with the obligations set forth in the license agreement.

The personal data processed by the data controller will be processed by Limon Information Technologies Inc. ("Limonhost") (Merkez Mahallesi Bağlar Cad. No:14 C2 Blok K-4 Ofis C13, Ofispark, Kağıthane/İstanbul) for the purposes of storage on servers to ensure data protection and fulfillment of legal obligations.

 

ARTICLE 6: PERSONAL DATA RETENTION PERIOD

The retention periods for the personal data specified in this Information Notice are listed below according to data categories. Once the retention period expires, the personal data will be deleted, destroyed, or anonymized.

1. All personal data specified as processed in this Information Notice will be retained for 10 years from the termination of the agreement.

ARTICLE 7: RIGHTS OF THE DATA SUBJECT

A natural person whose personal data is processed is defined as the data subject and has the following rights, which they may exercise by applying to the data controller:

1. Learn whether personal data is being processed.
2. Request information if personal data has been processed.
3. Learn the purpose of processing personal data and whether it is used in accordance with that purpose.
4. Know the third parties, either domestic or abroad, to whom personal data has been transferred.
5. Request the correction of personal data if it has been processed incompletely or inaccurately.
6. Request the deletion or destruction of personal data.
7. Request that the actions taken pursuant to items (e) and (f) be notified to third parties to whom the personal data has been transferred.
8. Object to the emergence of a result against the person through the exclusive analysis of processed data by automated systems.
9. Request compensation in case of damage due to the unlawful processing of personal data.

You can check the "Data Owner Application Form" here.