Privacy Policy

Who Processes Your Data

Your personal data is processed by:

• Version Two s. r. o.
• Registered office: Zámocká 6619/3, 811 01 Bratislava, Slovak Republic
• Company ID (IČO): 51 636 549
• Email: info@versiontwo.sk

Data We Collect

When using our services, we may collect the following personal data:

• Steam profile – name, avatar, Steam ID (obtained via Steam OpenID login)
• IP address – when connecting to our game servers and website
• Game statistics – scores, playtime, ranks and activity on our servers
• Purchase information – order history, VIP membership status, billing details (payment details are processed directly by Stripe)
• Communications – support tickets, comments and messages sent through our website

Legal Basis for Processing

We process your personal data on the following legal bases under Article 6(1) GDPR:

• Performance of a contract (Art. 6(1)(b)) – processing necessary to provide services, manage your account and fulfil purchases
• Consent (Art. 6(1)(a)) – e.g. when logging in via Steam OpenID, marketing communications
• Legitimate interests (Art. 6(1)(f)) – service security, fraud prevention, anti-cheat, service improvement
• Legal obligation (Art. 6(1)(c)) – retention of accounting records, tax obligations

How We Use Your Data

We use your data for the following purposes:

• Managing your account and providing our services
• Tracking game statistics, leaderboards and progression
• Processing purchases, invoices and managing VIP membership
• Providing customer support
• Security and abuse prevention (anti-cheat, bans)
• Improving our services and user experience

Sharing Data with Third Parties

We do not sell your personal data to third parties. We may share data only with the following categories of recipients:

• Stripe, Inc. – for payment processing and invoice generation (based in the USA, transfer under Standard Contractual Clauses)
• Valve Corporation (Steam) – for authentication via Steam OpenID
• Hosting and infrastructure providers – for operating the website and game servers (within the EU/EEA)
• Public authorities – where required by law or court order

International Data Transfers

Some of our processors (Stripe, Valve) are based in the USA. Personal data transfers to the USA are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission in accordance with Article 46(2)(c) GDPR, ensuring an adequate level of protection for your personal data.

Cookies and Tracking

We use only essential (technical) cookies for website functionality – login sessions, language preferences, shopping cart contents. We do not use third-party tracking cookies for advertising purposes. These essential cookies do not require your consent under applicable EU law.

Data Retention

We retain your data only as long as necessary to fulfil the purpose of processing:

• Account data – for the duration of your account and 30 days after deletion
• Transactions and invoices – 10 years from the transaction date (legal obligation under Slovak Accounting Act)
• Game statistics – for the duration of your account
• Support tickets – 2 years after ticket closure
• Server logs (IP addresses) – 90 days

Your Rights

Under the GDPR, you have the following rights:

• Right of access to your personal data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure – "right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise these rights, contact us through the support system on our website. We will respond to your request within 30 days at the latest.

Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27, Slovak Republic
Phone: +421 2 3231 3214
Web: dataprotection.gov.sk

Automated Decision-Making

We do not use automated decision-making, including profiling, that would produce legal effects or similarly significantly affect you within the meaning of Art. 22 GDPR. The anti-cheat system may automatically restrict access to game servers, but this decision can always be contested through the support system.

Protection of Children

Our services are not intended for persons under 16 years of age. We do not knowingly collect personal data from children under 16. If you learn that a child under 16 has provided us with personal data, please contact us and we will delete the data without delay.

Changes to the Privacy Policy

We may update this policy from time to time. We will inform you of significant changes on our website or by email. By continuing to use the services after changes are published, you agree to the updated policy.