Your GDPR Rights

The General Data Protection Regulation (GDPR) gives you important rights over your personal data. This page explains these rights and how to exercise them when using War and Peace: Civil War and our related services.

These rights apply to residents of the European Economic Area (EEA), United Kingdom, and Switzerland. We extend similar rights to all our users where possible.

Data Controller Information

The data controller responsible for your personal information is:

As the data controller, we decide how and why your personal data is processed. We are responsible for ensuring your data is handled lawfully and securely.

Your Rights Under GDPR

Under the GDPR, you have the following rights:

1. Right of Access (Article 15)

You have the right to:

• Know if we are processing your personal data
• Receive a copy of your personal data
• Know the purposes of processing
• Know the categories of data we hold
• Know who we share your data with
• Know how long we keep your data
• Know the source of your data (if not from you)
• Know if automated decision-making is used

How to exercise: Send an email to support@arvolumen.com with the subject "Data Access Request". Include your account email and username.

2. Right to Rectification (Article 16)

You have the right to:

• Have inaccurate personal data corrected
• Have incomplete data completed
• Update your information at any time

How to exercise: You can update most information through your account settings. For other corrections, email support@arvolumen.com.

3. Right to Erasure / Right to be Forgotten (Article 17)

You have the right to request deletion of your personal data when:

• The data is no longer needed for its original purpose
• You withdraw consent (and no other legal basis exists)
• You object to processing and there are no overriding grounds
• The data was processed unlawfully
• Deletion is required by law

Exceptions: We may retain data when required for:

• Compliance with legal obligations
• Establishment or defense of legal claims
• Public interest purposes

How to exercise: Email support@arvolumen.com with the subject "Deletion Request". We will process your request within 30 days.

4. Right to Restriction of Processing (Article 18)

You have the right to restrict how we use your data when:

• You contest the accuracy of your data (while we verify)
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you need it for legal claims
• You have objected to processing (while we consider your objection)

When processing is restricted, we will only store your data. We will not use it without your consent (except for legal claims or protecting others' rights).

How to exercise: Email support@arvolumen.com explaining which data you want restricted and why.

5. Right to Data Portability (Article 20)

You have the right to:

• Receive your personal data in a structured, common, machine-readable format
• Transfer your data to another service provider
• Have us transfer your data directly to another controller (where technically possible)

This right applies to data you provided to us that we process based on consent or contract, using automated means.

How to exercise: Email support@arvolumen.com with the subject "Data Portability Request". We will provide your data in JSON or CSV format.

6. Right to Object (Article 21)

You have the right to object to processing based on:

• Legitimate interests (including profiling)
• Public interest or official authority
• Direct marketing (including profiling for marketing)

For direct marketing objections, we must stop processing immediately. For other objections, we will stop unless we have compelling legitimate grounds.

How to exercise: Email support@arvolumen.com stating what processing you object to and your reasons.

7. Rights Related to Automated Decision-Making (Article 22)

You have the right to:

• Not be subject to decisions based solely on automated processing that significantly affect you
• Obtain human intervention in automated decisions
• Express your point of view on automated decisions
• Contest automated decisions

We do not currently use automated decision-making that produces legal or similarly significant effects. If this changes, we will update this page and notify you.

How to Withdraw Consent

Where we process your data based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Ways to Withdraw Consent:

Marketing Communications:

• Click "Unsubscribe" in any marketing email
• Update preferences in your account settings
• Email support@arvolumen.com

Cookies:

• Use our cookie consent banner to manage preferences
• Click "Cookie Settings" in our website footer
• Adjust your browser cookie settings

Account Data:

• Delete your account through settings or by contacting support
• Email support@arvolumen.com with your request

How to Manage Cookies

Cookies are small files stored on your device. You can control them through:

Our Cookie Tool

Use the cookie banner when you first visit our site, or click "Cookie Settings" in our footer at any time to:

• Accept all cookies
• Reject non-essential cookies
• Choose specific cookie categories

Browser Settings

Most browsers let you:

• See what cookies are stored
• Delete cookies individually or all at once
• Block cookies from specific sites
• Block all cookies (may affect site functionality)
• Set preferences for first-party vs third-party cookies

Cookie Categories We Use

Category	Purpose	Can Opt Out?
Essential	Site functionality, security, login	No
Analytics	Understanding site usage	Yes
Marketing	Relevant content and ads	Yes

Response Times

We aim to respond to all rights requests within:

• Standard requests: 30 days
• Complex requests: Up to 60 days (we will inform you of the extension)

There is no fee for most requests. We may charge a reasonable fee for:

• Manifestly unfounded requests
• Excessive or repetitive requests
• Additional copies of data

Verification

To protect your data, we may need to verify your identity before processing requests. We may ask for:

• Confirmation of your account email
• Answers to security questions
• A copy of government-issued ID (for sensitive requests)

Right to Lodge a Complaint

If you believe we have not handled your data correctly, you have the right to complain to a supervisory authority.

For EU residents, you can complain to the data protection authority in your country of residence. A list of authorities is available at: European Data Protection Board

For UK residents, contact the Information Commissioner's Office (ICO).

We encourage you to contact us first so we can try to resolve your concerns.

Legal Basis for Processing

We process your data under these legal bases:

Purpose	Legal Basis
Providing game services	Contract performance
Processing payments	Contract performance
Customer support	Contract performance
Marketing emails	Consent
Analytics	Legitimate interests
Fraud prevention	Legitimate interests
Legal compliance	Legal obligation

International Transfers

Your data may be transferred outside the EEA. When this happens, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with adequacy decisions
• Binding Corporate Rules where applicable

You can request a copy of the safeguards we use by contacting us.

Updates to This Page

We may update this GDPR information from time to time. Changes will be posted on this page with an updated date. For significant changes, we will notify you by email or in-game notification.