Welcome to Crimson Pine Games. We respect your privacy and are committed to protecting your personal data in full compliance with the European Union General Data Protection Regulation (EU GDPR) and applicable national data protection laws.
This Privacy Policy explains how we collect, use, process, and safeguard your personal data when you visit our website (www.crimsonpinegames.com) or request our specialized appliance maintenance and sanitization services.
1. Data Controller
The Data Controller responsible for your personal data under this Privacy Policy is:
- Company Name: Crimson Pine Games Sp. z o.o.
- Brand Name: crimsonpinegames
- Registered Address: Zwycięstwa 10, 44-100 Gliwice, Poland
- Phone Number: +48 502 069 180
- Official Contact Email: appliance@crimsonpinegames.com
2. Personal Data We Collect
To provide our localized sanitization services and operate our platform, we may collect and process the following categories of personal data:
- Identity & Contact Data: Name, service address within supported European regions, email address, and phone number.
- Service & Booking Data: Details of the equipment requiring sanitization, preferred service schedules, and special access instructions.
- Technical & Usage Data: IP address, browser type, device information, and website interaction log files.
- Financial Data: Payment status, transaction history, and payment tokenization details (processed securely via Stripe).
3. Third-Party Payment Processing (Stripe)
We do not collect, store, or process your full payment card credentials or banking details on our servers. All financial transactions are handled directly by our payment processor, Stripe Payments Europe, Ltd. (and its affiliates).
- Role of Stripe: Stripe acts as an independent data controller/processor regarding payment transactions and fraud prevention.
- Data Transferred: When you complete a booking, your billing information, transaction amount, and payment details are encrypted and transmitted directly to Stripe via secure API protocols.
- Privacy Terms: The processing of your payment data is governed by Stripe’s privacy policy, available at: https://stripe.com/privacy.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
- Performance of a Contract: Processing your contact and service address details is necessary to perform our service contract or process your bookings.
- Legal Obligation: Processing accounting, tax, and transaction logs to comply with Polish and European tax and commercial regulations.
- Legitimate Interests: Improving our website performance, security measures, and operational support.
- Consent: Where applicable (e.g., non-essential cookies or communications).
5. Data Retention Period
In strict compliance with EU GDPR and applicable Polish commercial laws, we retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Service & Order Records: Retained for the duration of the service contract plus 5 years following the end of the calendar year in which the tax obligation arose (in accordance with Polish Accounting and Tax regulations).
- Payment Records: Retained by Stripe in accordance with financial regulatory compliance, anti-money laundering (AML) laws, and statutory retention periods.
- Customer Support Records: Retained for up to 12 months from the date of ticket resolution unless legal claims require longer preservation.
- Technical Logs: Retained for a maximum of 6 months for security and audit purposes.
Once the retention period expires, your data will be permanently deleted or irreversibly anonymized.
6. International Data Transfers & Service Area
Our services are directed to customers located within supported European regions. If any data is processed outside the European Economic Area (EEA) through essential service infrastructure, such transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent legal adequacy frameworks.
7. Your GDPR Data Subject Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data where legal grounds allow.
- Right to Restrict Processing: Request limited processing of your data under specific conditions.
- Right to Data Portability: Receive your personal data in a structured, commonly used machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.
To exercise any of these rights, please contact our Data Controller at appliance@crimsonpinegames.com. You also have the right to lodge a complaint with the Polish Data Protection Authority (Urząd Ochrony Danych Osobowych – UODO) or your local supervisory authority.
8. Cookies & Tracking Technologies
Our website uses essential cookies required for core site operations. Non-essential performance, analytics, or functional cookies will only be deployed with your explicit consent obtained via our cookie management banner.
9. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in legal standards or operational practices. Any updates will be posted on this page with a revised “Effective Date.”