Privacy Policy 

Last updated April 05, 2024 (previous version) 

Who are we and how can you contact us? 

This privacy policy aims to give you information on how your personal data are processed by Animaccord Ltd. In this policy, we refer to ourselves as 'we', 'us', and 'our'. 

Please note that we use the term “personal data” which has the meaning of “personal information” in the relevant law. 

If you want to review, verify, correct, or request the erasure of your ​​​​​​personal data, object to the processing of your personal data, or request that we transfer a copy of your personal data to another party, please contact us using: 

• our email: dpo@mashabear.com 
• our phone: +357 25 281 872 
• our address: 82 Griva Digeny, Stephanie House, office 202, 3101, Neapolis, Limassol, Cyprus 

The policy extends to: 

• our website: https://mashabear.com 
• our email: dpo@mashabear.com 

Where did we get your data from? 

• Browser 

Your internet browser (such as Mozilla Firefox, Google Chrome, or Microsoft Edge) automatically transmits some information to us every time you access content on one of our internet domains. Examples of such data include the URL of the particular Web page you visited, the IP (Internet Protocol) address of the computer you are using, or the browser version that you are using to access the website. 

• Directly from you 

We may obtain personal data directly from you, e.g. when you contact us, ​​​​or when our cookies are enabled on the websites. 

​​​​​What data, for what purposes, on what basis, and for how long do we process? 

We only collect personal data about you insofar as is necessary to achieve the purposes set out in this Privacy Policy. 

In a number of our processing operations, we use a contract as the legal basis for processing your data. By contract we mean the Terms of Use of this website. Please note that in the “Events and contests” section, we process your data under the terms of a specific contest rather than the standard Terms of Use.   

• Personal data that we process to enter into a contract are necessary to provide you with our services. So, you may face the following consequences if you choose not to give your data:  

1. When data is processed to define the user's location to store their data on the server in the appropriate location (necessary cookies), the website may not function properly, and user-specific content may not be accessible or displayed correctly; 
2. When data is processed to register on the website as a parent, you will not be able to access or utilize features restricted to registered parents; 
3. When data is processed to choose a country and language in your personal account, you may experience difficulties in accessing content or communications that are relevant to the chosen country or language preferences; 
4. When data is processed to verify the age of users, access to age-restricted features may be denied, or users may not be able to confirm their eligibility for certain services; 
5. When data is processed to edit data in your personal account, you may not be able to update your account information, leading to outdated or inaccurate data in the personal account; 
6. When data is processed to authorise in personal account, you will be unable to access your personal account, and any associated services or content; 
7. When data is processed to change password by email or by referring to our technical support team, you may not be able to reset your password or access your account in the event of a forgotten password; 
8. When data is processed to add information about a child in the personal account of a parent, users may not be able to add their child's profile; 
9. When data is processed to manage notifications settings in a parent account, users may receive notifications that are not relevant to their preferences or may miss important updates; 
10. When data is processed to confirm user registration via email, you may not be able to complete the registration process and access your account or associated services; 
11. When data is processed to confirm the user’s participation in the contest, you may not be eligible to participate in contests or receive prizes; 
12. When data is processed to confirm data rectification in the account, incorrect or outdated data may persist in the account; 
13. When data is processed to respond to inquiries/requests from users regarding the functionality of our services, you may not receive responses or assistance for inquiries or requests related to the functionality of the services; 
14. When data is processed to play our games and to keep your progress in the game or count your leaderboard score, you may not be able to participate in games or save the progress; 
15. ​​​​​When data is processed to take part in events and contests, you will not be able to participate in events or contests and receive associated rewards; 
16. When data is processed to award digital prizes (e.g. stickers, discounts, promo codes), you will not be able to receive digital prizes or discounts offered as rewards; 
17. When data is processed to award physical prizes, you will not be able to receive physical prizes won in contests or events. 

Who do we share your personal data with? 

Information about these companies and their data protection practices: 

• The Apache Software Foundation 

Address: The Apache Software Foundation, 1000 N West Street, Suite 1200, Wilmington, DE 19801, U.S.A. ​​​​Relevant Privacy Policy. Unfortunately, the country of the data recipient doesn’t ensure an adequate level of protection for your personal data. ​​​​Standard Contractual Clauses are used to transfer your data to ensure that they are properly protected. 

• Google LLC 

The service is provided by Google LLC. Address: Google LLC, Google Data Protection Office, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. ​​Relevant privacy policy of Google. Unfortunately, the country of the data recipient doesn’t ensure an adequate level of protection for your personal data. Standard Contractual Clauses are used to transfer your data to Google to ensure that they are properly protected. For more information: click on this link. 

• Sinch Email (Mail Jet) 

We may engage the services of Sinch Email, operating under the brand name Mail Jet, for the purpose of sending email communications to our users and subscribers. When you provide your email address and consent to receive email communications from us, your email address and related data may be shared with Sinch Email (Mail Jet) to facilitate the delivery of these communications. Recipient address: Lindhagensgatan 74, 112 18 Stockholm (Sweden) Relevant Privacy Policy. Sinch may transfer your personal data to countries outside of the EU/EEA. If it happens, Standard Contractual Clauses are used to transfer your data. 

• Our partners in contests 

We may collaborate with various partners to conduct contests. In this case, we are joint controllers. You may find information about specific partner for each particular contest in the Terms and Conditions of the respective contest. When our partners are located outside the EU/EEA, Standard Contractual Clauses are used to transfer your data. 

• Other partners 

We may collaborate with trusted partners to offer you enhanced services or promotions. When our partners are located outside the EU/EEA, Standard Contractual Clauses are used to transfer your data. 

Automated decisions 

We do not introduce automated decision-making. 

If you are a data subject, you have the following rights: 

request information about the processing of your personal data 

obtain access to the personal data held about you 

Under Article 15 of the GDPR, you have a right of access that gives you the right to obtain a copy of your personal data, as well as other supplementary information. It helps to understand how and why companies are using the data, and check the lawfulness of the processing. 

ask for incorrect, inaccurate, or incomplete personal data to be corrected 

Under Article 16 of the GDPR, you have the right to have inaccurate personal data rectified. You may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing. 

request that personal data be erased when they are no longer needed or if processing is unlawful 

Under Article 17 of the GDPR, you have the right to have personal data erased. This is also known as the 'right to be forgotten'. The right is not absolute and only applies in certain circumstances. 

request the restriction of the processing of your personal data in specific cases 

Article 18 of the GDPR gives you the right to restrict the processing of their personal data in certain circumstances. This means that you can limit the way that an organisation uses your data. This is an alternative to requesting the erasure of their data. 

receive your personal data in a machine-readable format and send them to another controller ('data portability') 

Under Article 20 of the GDPR, you have the right to data portability that gives you the right to receive personal data they have provided to a controller in a structured, commonly used and machine-readable format. It also gives you the right to request that a controller transmits those data directly to another controller. 

object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation 

Article 21 of the GDPR gives you the right to object to the processing of your personal data at any time. This effectively allows individuals to stop or prevent you from processing their personal data. 

request that decisions based on automated processing concerning you or significantly affecting you and based on your personal data are made by natural persons, not only by computers. You also have the right in this case to express your point of view and to challenge the decision 

withdraw your consent at any time 

lodge a complaint with a supervisory authority 

In accordance with Article 77 of the GDPR, you, as a data subject, have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or where an alleged infringement of the GDPR has taken place. If you have any questions about the protection of your personal data, you can contact us by using our email: dpo@mashabear.com. 

Children’s data 

Collection of children’s personal data is possible after creating a child’s profile in the parent account. Through this mode, children can view content, play games, participate in contests, and engage in special features. We may process such data categories as: 

• Parent ID 
• Child ID 
• CPlayer ID 
• Child’s name 
• Child’s second name 
• Child’s surname 
• Child’s nickname 
• Child’s birth date 
• Child’s gender 
• Date of registration 
• Date of last login 
• Device 
• Country 
• Language 

The specific purposes and legal bases for processing this data, as well as the retention period, are detailed in the section titled “What data, for what purposes, on what basis, and for how long do we process?”. 

If a child uses our website without registering, we may process all the categories listed as outlined in the section mentioned above (parental consent is requested). 

In any case, we do not enable children to make their personal data publicly available. 

Parents' Control 

Parental consent is required prior to data processing. In accordance with the requirements of the Children’s Online Privacy Protection Act, on any child-targeted site or application, or in any instance where we ask for age and determine the user is age 12 or under, we will request a parent or guardian's email address prior to the collection of any personal data from the child. If you believe your child is engaging in an activity that involves the gathering of personal data and you, as a parent or another legal guardian, have not received an email seeking your consent or providing notification, please do not hesitate to reach out to us at dpo@mashabear.com. 

Parents have the right to review, request the deletion of, or withhold consent for the further collection or use of their child's personal dat. To initiate any of these actions, a parent may submit a request via email to: dpo@mashabear.com.