1. Controller
The controller responsible for data processing within this app is:
- R-MAS SpA
- Samotracia 2071, Vitacura, Santiago, Chile
- Email: info@rmas.cl
2. Collected Data & Purposes
We process personal data that you actively provide to us or that is automatically collected when using the app:
- Email address to participate in the trivia or receive notifications.
- Consent to receive information about offers and promotions.
- Technical data (IP address, browser type, date and time of access) to ensure security.
Purposes of processing: conducting the game, communicating with participants, sending information or offers (only with consent).
3. Legal Bases
- Art. 6 (1)(b) GDPR – for the fulfillment of contractual obligations (participation in the game).
- Art. 6 (1)(a) GDPR – based on your consent (newsletter, offers).
- Art. 6 (1)(f) GDPR – legitimate interest (security, prevention of misuse).
4. Disclosure of Data
Data will only be shared with third parties if:
- You have expressly consented,
- A legal obligation exists, or
- It is necessary for the technical operation of the app (e.g., hosting by AWS).
5. Retention Period
- Email addresses for marketing purposes: until you withdraw your consent.
- Server logs: typically 14–30 days.
- Game-related data: as long as necessary for providing the app.
6. Your Rights
You have the right to access, rectification, deletion, restriction, data portability, and withdrawal of your consent. You may also lodge a complaint with a supervisory authority in the EU (Art. 77 GDPR). In Germany: www.bfdi.bund.de.
7. Withdrawal of Consent
You may withdraw your consent to receive offers or newsletters at any time, e.g., via the “unsubscribe” link in each email or by sending a message to info@rmas.cl. After withdrawal, your data will be deleted for this purpose.
8. Data Security
We use technical and organizational measures (TLS/SSL encryption, access restrictions) to protect your data from loss, misuse, or unauthorized access.
9. Data Transfer to Third Countries
Your personal data is processed by R-MAS SpA based in Chile. The server infrastructure is provided by Amazon Web Services (AWS). Depending on the server location, data may be transferred to countries outside the European Economic Area (EEA), particularly the USA or South America.
For these transfers, we rely on the Standard Contractual Clauses of the European Commission (Art. 46(2)(c) GDPR), which are intended to ensure an adequate level of data protection. More information can be found at: AWS GDPR Center.
We implement additional organizational and technical safeguards (e.g., encryption, access control) to secure your data even during transfers to third countries. Nevertheless, in some cases, a level of protection fully equivalent to EU standards cannot be guaranteed.
10. Changes to this Privacy Policy
We reserve the right to update this privacy policy as necessary to reflect legal or technical changes. The current version is always available in the app.
11. Contact
- Email: info@rmas.cl
- Address: Samotracia 2071, Vitacura, Santiago, Chile