This Privacy Policy describes how Voksordu OÜ, a private limited company incorporated under the laws of the Republic of Estonia, registry code 17618997, with its registered address at Harju maakond, Tallinn, Nõmme linnaosa, Rännaku pst 12, 10917 (the "Company", "we", "us" or "our") processes personal data in connection with the operation of the mineworks.club Minecraft server owned and operated by the Company (the "Server") and the website available at https://www.mineworks.club/ (the "Website"), including the sale of in-game coins, virtual items, ranks and other digital content (together, the "Services").
This Privacy Policy applies to all individuals who access or use the Website or the Server (the "User", "you" or "your"), regardless of their location. It should be read together with our Terms and Conditions and Cookie Policy.
For the purposes of Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), the Company is the controller of the personal data processed in connection with the Services. If you have any questions about this Privacy Policy or how we process personal data, please contact us:
Voksordu OÜ
Registry code: 17618997
Address: Harju maakond, Tallinn, Nõmme linnaosa, Rännaku pst 12, 10917
Email: info@mineworks.club
Phone: +37253356336
1. Scope
This Privacy Policy covers the processing of personal data where the Company determines the purposes and means of processing, in particular when providing access to the Server, managing user accounts, processing purchases, keeping the Services secure and operating and improving the Website and the Server.
It does not apply to third-party services, applications or websites that may be linked to or accessible through the Services, such as the Minecraft game client or social media pages. Please review the privacy policies of those third parties separately.
2. Personal data we collect
Data you provide to us. When you create an account, make a purchase or contact us, we may process:
- account data: email address, password (stored in hashed form) and Minecraft username;
- purchase data: orders, amounts paid, Coins balance, Products obtained, dates of transactions and billing information required for accounting and tax purposes;
- communication data: your name, email address and the content of messages you send through the contact form, by email or to our support team.
We do not store full payment card details. Card payments are processed by authorised third-party payment service providers, which receive your payment data directly.
Data collected automatically. When you use the Website or connect to the Server, we automatically collect technical and usage data, such as IP address, device and browser information, operating system, connection times, session activity, in-game actions and chat messages, and logs needed to keep the Server stable and secure and to enforce the Server rules. Information about cookies is set out in our Cookie Policy.
3. Purposes of processing and legal bases
We process personal data only for the following purposes and on the following legal bases under Article 6 of the GDPR:
- Providing the Services (creating and managing accounts, giving access to the Server, processing orders, crediting Coins and delivering Products, handling refunds and support requests): performance of a contract, Article 6(1)(b).
- Security and fair play (detecting cheating, exploits, fraud, chargeback abuse, attacks and unauthorised access; moderating chat; enforcing the Server rules): our legitimate interest in keeping the Services secure and fair for all Users, Article 6(1)(f).
- Legal obligations (accounting, tax and consumer protection requirements, and responding to lawful requests from authorities): compliance with a legal obligation, Article 6(1)(c).
- Improving the Services (analysing usage in aggregated or anonymised form, diagnosing technical issues): our legitimate interest in developing the Services, Article 6(1)(f).
- Non-essential cookies: your consent, Article 6(1)(a), as described in our Cookie Policy.
- Establishing, exercising or defending legal claims: our legitimate interest, Article 6(1)(f).
Where we rely on legitimate interests, we balance them against your rights and freedoms and apply safeguards to keep the processing proportionate.
We may use automated anti-cheat tools to detect breaches of the Server rules. If you believe that an automated decision affecting your account is wrong, you may contact us and request a review by a member of our staff.
4. Age restriction
The Services are intended only for persons who are at least eighteen (18) years old. We do not knowingly collect personal data from persons under 18. If we learn that we have processed personal data of a person under 18, we will delete it without undue delay, unless we are required by law to keep it.
5. Disclosure of personal data
We may share personal data with carefully selected service providers that help us operate the Services, such as hosting and IT service providers, payment service providers, email service providers and professional advisers. These providers process personal data only on our instructions and are bound by contractual obligations to protect it, except payment service providers, which may act as independent controllers in respect of payment data.
We may also disclose personal data where required by law, a court order or a lawful request of a competent authority, or where necessary to protect the rights, property or safety of the Company, our Users or others.
In the event of a merger, acquisition, restructuring or sale of assets, personal data may be transferred to the successor entity, subject to appropriate safeguards.
We do not sell or rent personal data to third parties.
6. International transfers
We primarily process personal data within the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure that the transfer complies with Chapter V of the GDPR, for example on the basis of an adequacy decision of the European Commission or standard contractual clauses approved by the European Commission.
7. Data retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy. Account data is kept while your account is active and for a reasonable period afterwards. Transaction and accounting records are kept for the period required by Estonian accounting and tax legislation. Security logs and technical records are kept for limited periods necessary to protect the Services and prevent abuse.
When the retention period ends, personal data is securely deleted or irreversibly anonymised.
8. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including access controls, secure server infrastructure, encryption of communications where appropriate, monitoring and internal data-handling rules. We require our service providers to apply comparable safeguards.
9. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy of it;
- have inaccurate personal data corrected;
- have your personal data erased;
- restrict the processing of your personal data;
- object to processing based on our legitimate interests;
- receive your personal data in a portable format, where applicable;
- withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact us at info@mineworks.club. We will respond within one month, which may be extended where permitted by the GDPR. We may need to verify your identity before acting on a request.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the data protection authority of the EU member state in which you live or work.
10. Cookies
The Website uses cookies and similar technologies. Details, including how to manage your preferences, are set out in our Cookie Policy.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be published on the Website with a new date. Where changes are material, we will inform you through the Website or by email where appropriate.
