Privacy Policy

1. Introduction and Data Controller

This Privacy Policy describes how Nordivesi Entertainment Oy, operating as Quanttstorydock ("we," "our," or "us"), collects, uses, stores, and protects your personal data when you visit our website at quanttstorydock.com and use our social casino entertainment services.

We are registered in Finland and operate under Finnish and European Union data protection law, specifically the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Finnish Data Protection Act (1050/2018).

Data Controller: Nordivesi Entertainment Oy, Aleksanterinkatu 17 B, 00100 Helsinki, Finland. Business ID: 3142897-5. Email: [email protected].

We take your privacy seriously. This policy is written in plain language to help you understand exactly what data we collect and why, and what rights you have over that data.

2. Platform Nature and Data Processing Context

Quanttstorydock is strictly an entertainment platform. Our Crystal Depths game and all other games we offer use virtual coins only. These virtual coins have no real-world monetary value and cannot be redeemed, sold, transferred, or exchanged for cash, goods, prizes, or any other benefit with monetary value.

We do not process payment card numbers, bank account details, or any financial transaction data. We do not collect any data that would be classified as sensitive financial information. This significantly limits the categories and sensitivity of personal data we process.

3. Data We Collect

3.1 Data You Provide Directly

When you contact us via our contact form or by email, we collect: your name, email address, and the content of your message. This data is used solely to respond to your inquiry.

3.2 Data Collected Automatically

When you visit our website, we automatically collect certain technical information including: IP address (anonymised after 24 hours), browser type and version, operating system, device type, referring URL, pages visited, time and date of visit, session duration, and general geographic location (country/city level only, derived from IP address).

3.3 Cookie Data

We use cookies and similar tracking technologies as described in detail in our Cookies Policy. You can manage your cookie preferences at any time via our cookie consent tool. See Section 9 and our separate Cookies Policy for full details.

3.4 Game Interaction Data

Our game stores virtual coin balances, game preferences, and session data locally in your browser's localStorage. This data never leaves your device and is not transmitted to our servers unless you explicitly contact us about a technical issue.

4. Legal Bases for Processing

We process your personal data on the following legal bases:

• Legitimate Interests (Article 6(1)(f) GDPR): We process technical data collected automatically to ensure the security, performance, and improvement of our platform. We have conducted legitimate interest assessments confirming this basis is appropriate.
• Consent (Article 6(1)(a) GDPR): For optional analytics and marketing cookies, we rely on your explicit consent provided through our cookie banner. You may withdraw consent at any time.
• Contract Performance (Article 6(1)(b) GDPR): When you contact us, we process your contact details to respond to your inquiry as part of providing our service.
• Legal Obligation (Article 6(1)(c) GDPR): We may process data where required by Finnish or EU law, including tax records and data retention obligations.

5. How We Use Your Data

We use collected data exclusively for the following purposes:

• Operating and maintaining the quanttstorydock.com website
• Ensuring website security and preventing fraud or abuse
• Responding to inquiries and providing customer support
• Analyzing aggregated usage patterns to improve our entertainment offerings
• Complying with Finnish and EU legal obligations
• Investigating and resolving technical issues
• Ensuring compliance with age restriction policies (18+ only)

We do not use your data for automated decision-making, profiling, targeted advertising without consent, or selling to third parties under any circumstances.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share data in limited circumstances:

• Service Providers: We use carefully vetted third-party service providers for web hosting, analytics, and customer support tools. These providers are bound by data processing agreements and may only process data on our instructions. All service providers we use are GDPR-compliant and, where applicable, located within the European Economic Area (EEA) or covered by appropriate transfer safeguards.
• Legal Requirements: We may disclose data if required by Finnish law, court order, or to protect our legal rights.
• Business Transfer: In the event of a merger or acquisition, personal data may be transferred as part of the business assets, subject to the same protections described in this policy.

Currently, our primary third-party data processors include web hosting infrastructure located within the EU, and optional analytics services which are only activated upon your cookie consent.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Contact form data: Retained for 12 months after your last contact, then securely deleted.
• Technical/server logs: Retained for 90 days for security purposes, with IP addresses anonymised after 24 hours.
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Data linked to identifiable users is deleted within 26 months.
• Cookie consent records: Retained for 12 months from the date of consent.
• Legal records: Retained for the period required by Finnish law (typically 6-10 years for accounting purposes).

8. International Data Transfers

We primarily process data within the European Economic Area (EEA). Where we use service providers outside the EEA, we ensure adequate protection through European Commission adequacy decisions, Standard Contractual Clauses (SCCs), or other GDPR-compliant transfer mechanisms. Details of our transfer safeguards are available upon request.

9. Cookies and Tracking Technologies

We use cookies to enhance your experience and analyze site usage. Our cookie consent tool allows you to accept, reject, or customize cookies on your first visit. Essential cookies (required for basic website function) are always active. Analytics, preference, and marketing cookies are only activated upon your explicit consent. Please see our separate Cookies Policy for comprehensive details on every cookie we use.

10. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access (Article 15): Request a copy of all personal data we hold about you.
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to Erasure / "Right to be Forgotten" (Article 17): Request deletion of your personal data where no overriding legal basis exists for retention.
• Right to Restriction of Processing (Article 18): Request that we limit how we use your data in certain circumstances.
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format.
• Right to Object (Article 21): Object to processing based on legitimate interests at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Right not to be subject to Automated Decision-Making (Article 22): We do not use automated decision-making or profiling that produces legal or significant effects.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your data has been mishandled, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu, www.tietosuoja.fi) or any other EU supervisory authority.

11. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our measures include encryption of data in transit (TLS/HTTPS), access controls and authentication for staff, regular security assessments, data minimization practices, and staff training on data protection. While we take every reasonable precaution, no system is completely secure, and we encourage you to use strong, unique passwords and to report any suspected security issues to [email protected].

12. Children's Privacy

Quanttstorydock is exclusively for users aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately. If you believe a minor has provided us with personal data, please contact us immediately at [email protected].

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. The "Last Updated" date at the top of this policy reflects the most recent revision. We will notify you of material changes by posting a prominent notice on our website. Your continued use of quanttstorydock.com after any changes constitutes acceptance of the updated policy.

14. Contact Us About Privacy

For all privacy-related questions, requests, or concerns, please contact our Data Protection team:

Nordivesi Entertainment Oy
Aleksanterinkatu 17 B, 00100 Helsinki, Finland
Email: [email protected]
Phone: +358 9 4135 8820
Business Hours: Monday–Friday, 09:00–17:00 EET/EEST