Privacy Policy

  1. Introduction

This Privacy Policy describes how TIBI GAMES S.L.U. (“we”, “our”, “us”) collects and uses certain information (Personal Data) when you use our mobile game Rainbow Rush, available on iOS and Android platforms. When you download, access and/or play our Game, you acknowledge the collection and use of your information in accordance with this Privacy Policy. Please read this privacy policy carefully. If you have any concerns about providing information to us, or it being used as described in this Privacy Policy, you should not use our Game.

This Privacy Policy is in compliance with the current data protection regulations, such as the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (2020) and the Organic Law 3/2018 of December 5 on Protection of Personal Data and Guarantee of Digital Rights

  1. What does this privacy policy cover?

The privacy practices and policies that we outline in this Privacy Policy will apply to the way that we use your Personal Data as a user of our Game. 

  1. Who is the Data Controller?

A data controller is the natural or legal person who determines the purposes and means of the processing of Personal Data.

  • Data Controller: TIBI GAMES, S.L.U. 
  • CIF. B19925957
  • Headquarters: C/ Diputació 303, Primera Planta 08009 Barcelona

Email: privacy@tibigames.com

  1. Personal Data that we will collect

When you use the Game, we collect certain information about you and your device.

Category (Personal Data type) Example
Non-Personal Information
  • Device information (type, operating system, unique device identifiers)
  • IP address
  • Game progress and scores
  • Usage data (time spent in the game, features used)
  1. Where do we collect your data from?

We collect data directly from you or your device when you use our Game. 

  1. Use of your Personal Data

6.1.  The Personal Data for the users that we may process can fit in the following categories:

Purpose/Activity Legal Base
To operate and maintain the Game
  • Execution of the Terms and Conditions
To improve our gaming experience
  • Legitimate Interest
To provide customer support
  • Execution of the Terms and Conditions.
To send you updates, promotions and marketing information about the Game.
  • Legitimate Interest
Ensuring security, preventing and detecting fraud, and fix errors
  • Legal Obligation
To analyze usage and trends to improve the Game
  • Legitimate Interest
To send you updates, promotions and marketing information
  • Consent

WE DO NOT process Personal Data for the purposes described in Article 22 GDPR (“Automated individual decision-making, including profiling”).

  1. Advertising

Our Game includes advertising for third party products and services.

We and our advertising partners collect and use information about you to improve advertising, targeting and measurement systems so that we can show you relevant third party ads in our Games.

We participate in the IAB Europe Transparency & Consent Framework and comply with its Specifications and Policies. We use the Consent Management Platform (CMP) with the identification number 5.

Where applicable, we use a CMP to gather consent and permissions for our advertising based activity. 

To provide our Games, we use ad identifiers, cookies and similar technologies.

  1. Retention of your Personal Data

We will keep your data for as long as necessary to achieve the purpose(s) for which it was collected, including to provide you with the Game or to comply with any legal, accounting, or reporting requirements. We may periodically delete or de-identify inactive accounts or other data in our Game.

After the applicable retention period, we will either delete or de-identify your data or, if neither deletion or de-identification is possible (for example, due to data being stored on a backup server), isolate your data from further processing until deletion or de-identification is possible. We may continue to use data that is not identifiable to you (for example, aggregate data). We will not attempt to re-identify you when using such de-identified data.

  1. How we share your information

We do not share your personal information with third parties except in the following circumstances:

  • With your consent
  • With service providers or other group entities who perform services on our behalf (e.g., analytics, hosting)
  • If required by law or to protect the rights and safety of our users and others
  • In connection with a merger, sale, or other transfer of all or part of our business.
  1. How do we keep your data secure?

We have adopted measures to provide your data a level of security appropriate for the degree of risk involved with the processing activities described in this notice. These measures are designed to protect your data against accidental or unlawful destruction, loss, or alteration as well as unauthorized disclosure or access. The specific measures we employ vary, but typically include, for example, encryption in transit, pseudonymization of identifying data where feasible, controls to limit access to services or systems that contain personal data, and maintaining procedures to handle any suspected security incidents. 

  1. Where will collected Personal Data be processed?

Whenever we transfer Personal Data out of the EU, EEA, Switzerland & UK we ensure that at least one of the following safeguards is implemented:

  • We may transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data by the European Commission. 
  • We may transfer data subject to specific contracts approved by the European Commission, which ensures that Personal Data the same protection it has in Europe regardless of where it is processed (Standard contractual clauses 2021).
  1. Your Personal Data Rights

12.1. Your rights

If you are a resident within the European Economic Area (EEA), UK and Switzerland you will have the following rights: 

  • The right to be informed. You have the right to be informed about how we collect and use your Personal Data, how long we plan to keep that data, and who we will share it with. 
  • The right of Access. You have the right to know exactly what information we have collected about you, how we are storing and processing that data, and what we are going to do with it. 
  • The right to rectification (correction). You have the right to have incomplete data completed and incorrect data corrected. 
  • The right to erasure. You have the right to have Personal Data permanently deleted. This is also known as the “right to be forgotten.” Please note that this right doesn’t apply if the processing of data that’s subject to an erasure request is necessary to comply with a company’s legal obligations.
  • The right to restrict processing. If you can´t require that we erase your Personal Data, you have the right to restrict our ability to process that data, under certain circumstances.
  • The right to data portability. Individuals have the right to obtain and reuse their Personal Data for their own purposes across different services. Data subjects can request that data controllers send their Personal Data files electronically to third parties. If technically feasible, companies must provide the data in commonly used, machine-readable formats.
  • The right to object. You have the right to object to the processing of your Personal Data in certain circumstances. However, we may still process the data to establish or defend legal claims, or if we can demonstrate there are legitimate grounds that override individuals’ interests and rights.
  • The right to not be subject to automated decision making. You have the right to demand human intervention, rather than having important decisions made by algorithms. Companies are required to inform people that they will be subject to algorithmic decision-making and let them know that they can opt out of it.

To exercise any of these individual Privacy Rights, you can send an email to privacy@tibigames.com with your username and your email address.

In addition, you may also opt-out of receiving marketing communications from us. If you would like to exercise this right, please write to us at the contact details indicated.

12.2. If you are a resident of California, you may have the following additional rights with regard to the Personal Data we maintain about you:

California Individual Privacy Rights

(California residents can exercise these privacy rights with respect to their Personal Data)
  • Right to Access Personal Data. You have the right to know (i) the categories of Personal Info we have about you; (ii) the categories of sources from which that Personal Data was collected (iii) Our business or commercial purpose for collecting, selling, or sharing your Personal Data (iv) the categories of third parties to whom we disclose Personal Data(v) the specific pieces of Personal Data we have collected about you.
  • Right to Know What Personal Data is Sold or shared and to Whom. You have the right to know what Personal Data of yours is being sold or shared, and with whom. 
  • Right to Deletion: You have the right to request that we delete the Personal Data that we have collected or maintain about you. There may be circumstances under which we will be unable to delete such Personal Data, such as if we need to comply with our legal obligations. 
  • Right to Correct Inaccurate Personal Data. You have the right to request us if we maintain inaccurate Personal Data about you, taking into account the nature of this Personal Data and the purposes of the processing. To such extent, we shall use commercially reasonable efforts to correct the inaccurate Personal Data.
  • Right to Opt Out of Sale or sharing your Personal Data. You have the “right to opt-out” of sale or sharing of your Personal Data. If you do not affirmatively opt out, and you are not a minor (under 16), your Personal Data may be sold as disclosed in this Privacy Policy. You can submit your request to opt out of the sale or sharing of your Personal Data by completing our “California Right to Opt-Out of the Sale or Sharing Personal Data” request form available here.
  • Right to Limit Use and Disclosure of Sensitive Personal Data. You have the right to limit, at any time, the use and disclosure of your sensitive Personal Data, except when we use such Personal Data in a way reasonably expected by an average consumer.

              For information purposes, “sensitive Personal Data”  includes any private information that divulges any of the following: i) personal identification numbers, including social security, driver’s license, passport, or state ID card number; ii) account or debit or credit card numbers combined with passwords or codes that would enable access to the accounts; iii) a user´s exact geolocation; iv) a user’s racial origin, religious beliefs, or union membership; v) a user’s mail, email, or text message content unless the information was intentionally sent to the business; a user´s consumer’s genetic data, such as DNA simples; vi) the processing of any biometric data to identify a consumer, and vii) Personal Data concerning a user’s health or sexual orientation.

  • Right of No Retaliation. If you choose to exercise any of these rights, Entravision will not discriminate against you in anyway.

To exercise your California rights, complete our “California Consumer Request” form available here.

If we are unable to comply with your requests, we will let you know the reason why.

 We will take steps to verify your identity before processing your request, which may include requesting information from you to match with information we already have about you. 

  1. How do we protect minors?

Our Game is intended for adults and designed primarily with adults in mind. When you access and use the Game, we may ask you to confirm your age to us or your age may otherwise become known to us. If we discover that you are a minor or do not meet an age threshold we apply, we may take steps to limit, suspend, or terminate your access to the Game where we believe that to be necessary due to applicable regulatory or platform requirements or to provide you with an appropriate experience. If your access to the Game is not suspended or terminated, we will limit the use of your personal data to what is necessary for the internal operation of our Game and other uses permitted by applicable laws, regulations, and platform policies.

  1. Use of cookies and other technologies

We use cookies and other standard web technologies to collect information, which include the following:

Technology Purpose of Use
  • “Cookies”: data files that often include a unique identifier and are placed on a visitor’s device or computer.
To operate our technology and collect user information. 

-For more information about cookies, and how to disable cookies, visit 

http://www.allaboutcookies.org
  • “Tags and Pixels”: blocks of code that we and our customers may use to track your navigation of websites or apps using our technology, and your browsing behaviour.
 To synchronize information that we have collected with information independently collected by our suppliers, advertisers, and other third parties that are interested in providing you with ads.
  • Other: locally stored objects
 to collect user information with the aim of assisting with the delivery of ads and to provide reporting to the advertisers
  1. How long is this Privacy Policy updated?

We reserve the right to amend this Privacy Policy at any time to reflect changes to our practices or for other operational, legal or regulatory reasons, which will be posted on this page. Please check this Website periodically for updates.

The date of this Privacy Policy was last revised is identified at the top of the page. 

If we make material changes to how we treat your Personal Data, we will notify you to the e-mail address provided by you or through a notice on the Website home page.  Your continued use of our Website after such amendments will be deemed your acknowledgement and consent of these changes to this Privacy Policy.