Privacy Policy

1. Introduction

RuneReels Oy ("we," "our," or "us") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and Finnish data protection laws. This Privacy Policy explains how we collect, use, and protect your personal data when you use our social casino services.

2. Data Controller

3. Data Categories We Process

3.1 Essential Service Data

• Age verification preferences: Stored locally to comply with 18+ requirements
• Cookie consent preferences: Your choices regarding analytics and marketing cookies
• Contact form submissions: Name, email, and message content when you contact us

3.2 Analytics Data (Only with Consent)

• Website usage patterns and page views
• Device and browser information
• General geographic location (country level)
• Session duration and interaction data

3.3 Marketing Data (Only with Consent)

• Marketing campaign performance data
• Advertisement interaction metrics
• User preferences for marketing communications

4. Legal Bases for Processing

• Legitimate interest: Age verification and essential website functionality
• Consent: Analytics tracking, marketing activities, and non-essential cookies
• Contract performance: Providing requested services and responding to inquiries
• Legal obligation: Compliance with Finnish gambling advertising regulations

5. Data Sharing and Processors

We only share data with third-party processors after you provide explicit consent for non-essential services:

5.1 Analytics Processors (Consent Required)

• Google Analytics (if analytics consent provided)
• Data processing location: EU/EEA with appropriate safeguards

5.2 Marketing Processors (Consent Required)

• Advertising platforms for campaign measurement
• Email service providers for marketing communications

Important: No third-party processors load or receive data until you explicitly consent to their respective categories.

6. Data Retention

• Age verification: Stored locally until browser data is cleared
• Cookie preferences: 12 months or until changed by user
• Contact inquiries: 2 years for customer service purposes
• Analytics data: 26 months (Google Analytics default)
• Marketing data: Until consent is withdrawn or 2 years, whichever is sooner

7. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: Request information about data we process about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Data portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Revoke consent for analytics and marketing at any time

To exercise these rights, contact us at privacy@runereels.online

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information about our cookie practices, please see our Cookie Policy.

You can manage your cookie preferences at any time using the "Cookie Settings" button in our footer or by revisiting our cookie consent banner.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Secure data processing agreements with all processors

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through our website or by email. The "Last updated" date indicates when the most recent changes were made.

11. Contact Information

For privacy-related questions or to exercise your GDPR rights:

Data Protection Officer:

Email: privacy@runereels.online

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman if you believe we have not handled your data appropriately.