Privacy policy
1. Scope of these principles
These principles explain what personal data FLAIR-Sim processes when registering, using the game, communicating with support, securing accounts and processing XP purchases. They are based on the rules on personal data protection applicable in the Slovak Republic and the European Union.
2. Categories of data processed
According to how we use the Services we can process in particular:
• identification and registration data the name, surname, username, e-mail address, language and data needed to create the account;
• accounting and game data the user identifier, virtual companies, gaming process, fleet, gaming transactions, XP, gaming $, settings and activity in the game;
• technical and security data ♦ IP address, user agent, session data, login time, security incidents and records necessary for the protection of the service;
• communication data ♦ messages sent through support, subject and content of the request and related communication;
• payment and purchase data ♦ Order identifier, XP package, price, currency, payment status, Stripe Checkout/Payment identifiers, reimbursements and related accounting records;
• Evidence of consent for digital content the time, language, version and text of the express consent to the immediate delivery of the XP and the refusal of the right of withdrawal in cases where such consent is granted.
3. Payment data
FLAIR-Sim does not consider the full payment card number, CVC or similar sensitive card data as the data it needs to store on its server. For payment via Strip, these data are entered and processed in the context of the payment service provider.
FLAIR-Sim only retains the technical and business data necessary to assign payment to the user, assign XP, refund solution, accounting and transaction proof.
4. Purposes of the processing
We use personal data mainly for:
• creating, verifying and managing a user account;
• providing and synchronizing the game service;
• XP management, virtual content and gaming transactions;
• creation, confirmation and registration of purchases and refunds;
• customer support and handling complaints;
• protecting accounts, preventing fraud, abuse, bots and security incidents;
• diagnosing errors, maintaining and improving service stability;
• compliance with legal, tax, accounting and consumer obligations;
• sending marketing reports only where there is a valid legal basis or consent.
5. Legal bases for processing
Depending on the specific purpose, the legal basis may be, in particular, the performance of the contract or the taking of steps prior to its conclusion, the fulfilment of the legal obligation, the legitimate interest in the safe and functional operation of the Service or the consent of the user.
Where the processing is based on consent, consent may be withdrawn. The appeal shall not affect the lawfulness of the processing carried out before its appeal.
6. Beneficiaries and service providers
Data may be made available to the extent necessary by trusted technical infrastructure, hosting, email services, security services, backup and payment services providers. When payment via Stripe processes part of the data Stripe according to its own privacy rules.
We do not provide data to third parties for their own unrelated marketing without an appropriate legal basis.
7. Transfers outside the European Economic Area
Some technological providers may also process data outside the European Economic Area. Where such transfer is covered by GDPR, the relevant legal mechanism and appropriate safeguards required by law shall be used.
8. Storage period
We shall only store the data for the period necessary for the purpose of processing. As a general rule, normal account details are kept for the duration of the account and, consequently, for the period necessary to meet requirements, legal claims or legal obligations.
Payment, refund, accounting and evidence records may be kept longer if required by tax, accounting, consumer or other legislation. Security logos shall be kept only for as long as is reasonably necessary to investigate incidents and protect the Service.
9. Cookies and local storage
FLAIR-Sim uses technically necessary cookies or similar technologies mainly to log in, maintain session, protect account, language settings and basic functioning of the application.
If analytical, advertising or other optional cookies are used in the future, they will only be deployed in a manner consistent with the applicable legal requirements and, where consent is required, only after obtaining it.
10. Security
FLAIR-Sim shall use appropriate technical and organisational data protection measures, including access control, secure sessions, limitations of access to sensitive configuration data, backup and security controls. However, no Internet service can guarantee absolute security.
11. Gambling data
Gaming results, virtual companies, flight plans, fleet, transactions, gaming messages and similar data may be necessary for the operation of the multiplayer service and game history. Some of them may be visible to other players if this results from a game feature, such as a public company profile, username or ranking.
12. Automated systems and prevention of abuse
FLAIR-Sim can automatically evaluate technical or game signals to protect against spam, abuse, fraudulent payments or prohibited automation. Where an automated decision would have legal or equivalent significant effects on the user, the rights conferred on it by the legislation in force shall be respected.
13. User rights
Under the conditions laid down by law, the user may request access to, repair, erasure, restriction of processing or portability and may object to processing based on legitimate interest.
Where the processing is based on consent, the user may withdraw the consent. The request can be sent to info@flsm.eu. We can verify the applicant's identity accordingly before providing the data.
14. Account deletion
If a user requests the deletion of an account, data that is no longer necessary will be deleted or anonymised. Data that must be retained for legal obligations, security, fraud prevention or protection of legal claims may be retained for the relevant period and separated from the normal use of the account.
15. Complaint to the supervisory authority
The user has the right to lodge a complaint with the competent supervisory authority for the protection of personal data, in particular the Office for the Protection of Personal Data of the Slovak Republic, if he considers that the processing of his data infringes the applicable legislation.
16. Changes to these principles
Principles can be updated when changing FLAIR-Sim functions, providers used or legal requirements. The current version and date of the last update will always be listed on this page.
17. Contact
Questions concerning privacy, personal data or the exercise of rights may be sent to info@flsm.eu.