GDPR Compliance Statement

Introduction:

FantasyCraft Market acknowledges the importance of data protection and privacy rights of individuals, especially in today's digital age. This GDPR Compliance Statement sets forth our commitment to adhering to the standards and principles established by the General Data Protection Regulation (GDPR), a regulatory framework introduced by the European Union in 2018. Through this statement, we aim to outline our data handling practices, ensuring they meet the requirements of the GDPR.

Data Protection Principles:

FantasyCraft Market is dedicated to maintaining the integrity of personal data. Our commitment revolves around the following principles of the GDPR:

• Lawfulness, Fairness, and Transparency: We process personal data lawfully and transparently, ensuring fairness to the data subjects.
• Purpose Limitation: We collect data only for legitimate purposes, clearly specified upon collection, and will not process data in a manner incompatible with those purposes.
• Data Minimization: We ensure that personal data is adequate, relevant, and limited to what is necessary.
• Accuracy: We take steps to keep personal data accurate and up-to-date.
• Storage Limitation: We retain personal data no longer than necessary, based on the purposes for which they were collected.
• Integrity and Confidentiality: Through advanced security measures, we protect data against unauthorized or unlawful processing, loss, destruction, or damage.

Lawful Bases for Processing:

Our processing of personal data is anchored in lawful bases as defined by the GDPR. This includes:

• Obtaining explicit consent from data subjects.
• Processing is necessary for the performance of a contract.
• Compliance with legal obligations.
• Protection of vital interests.
• Performance of a task carried out in the public interest.
• Legitimate interests pursued by FantasyCraft Market or third parties.

Data Subject Rights:

We recognize and uphold the rights of data subjects under the GDPR:

• Right to be informed: Individuals have the right to know how their data is being processed.
• Right of access: Individuals can request copies of their personal data.
• Right to rectification: Corrections can be made if personal data is inaccurate or incomplete.
• Right to erasure ('right to be forgotten'): Under certain conditions, individuals can request their data be deleted.
• Right to restrict processing: Individuals can request that their data usage be limited.
• Right to data portability: Individuals can request their personal data for their use or for transferring to another service.
• Right to object: Objections to data processing for marketing, research, or specific purposes can be made.
• Rights related to automated decision-making and profiling: Individuals can object to decisions made solely based on automated processes.

Data Collection, Use, and Retention:

Details regarding the types of personal data we collect, our purposes for processing, and our retention practices can be found in our Privacy Policy.

Data Transfers:

For comprehensive information about how we handle data transfers, especially those outside the European Economic Area, please refer to our document on Data Transfer & Storage.

Cookies and Web Beacons:

We use cookies and similar tracking technologies to improve user experience and for analytical purposes. Full details are available in our Cookies Policy.

Data Protection Measures:

FantasyCraft Market employs state-of-the-art security measures, both technical and organizational, to safeguard personal data against unauthorized access, alteration, or destruction.

Children's Privacy:

We are committed to protecting the privacy of children. Our services are not exclusively designed for or directed at individuals under 16 years of age. This means that while our services are not explicitly designed for children or those under 16 years of age, they are not prohibited from purchasing our digital products on our website.

To clarify:

• Product Suitability: We do not offer any products that are explicitly inappropriate for children, nor do we portray anything that would be considered unsuitable or illegal for this age range.
• Analytics Tools: We employ analytics tools to monitor the activities of all visitors or customers on our site, which may inadvertently include individuals under 18 years of age. Access to this data is global, and we frequently filter out data pertaining to those under the age of 18, as they are not our primary target audience.
• Access and Participation: We recognize that individuals under the ages of 18 or 16 can actively participate in our Market, Community, or other projects. We do not have age restrictions in place, meaning we allow their participation, but our services are primarily tailored for those above 18 years of age.
• Privacy Prioritization: We place paramount importance on the privacy of children and individuals under 18/16 years of age. Efforts are consistently made to exclude them from targeted advertisements and other promotional material.
• Target Audience: It's essential to note that our primary target audience is individuals above 18 years old. We don't have any mechanisms specifically aiming or tailored for those under 18 years of age.

By engaging with our platform, users affirm their understanding and compliance with our stance on children's privacy.

Data Breaches:

In the event of a data breach, FantasyCraft Market will act promptly to mitigate the impact and notify affected individuals as well as the relevant data protection authorities, in line with GDPR requirements.

Amendments & Updates:

Our GDPR Compliance Statement, like our other policies, is subject to periodic review and modification. We encourage users to check this statement regularly to stay informed. Significant changes will be communicated to our users.

For any questions regarding our GDPR practices or to exercise your rights as detailed above, please contact us directly.

Last Updated: 16.09.2023