1. Data controller and contact
The controller of your personal data is DMG Gracjan Kaźmierczak, ul. Ostrowska 32/1, 87-800 Włocławek, Poland, NIP (tax identification number): 8883146366, REGON (business registration number): 386556971.
For matters concerning privacy and exercising your rights, contact us at likeadmg@gmail.com. The controller has not appointed a data protection officer.
2. What data we process
The data we process depends on the features you use. We may process:
- Steam profile data: account identifier, name and avatar;
- data from a voluntarily connected Kick account: account identifier, name, avatar, email address, subscription status and information needed to maintain the connection;
- UDMG account data: name, avatar, account creation date, points, permissions, account restrictions, active sessions and notifications;
- comments, reactions, giveaway participation and results;
- orders placed using points and the information submitted with them, such as a Discord identifier or delivery notes;
- IP address, browser information, active session identifiers and the history of security-related events;
- aggregate video viewing statistics, such as the number of plays and total viewing time.
We do not ask for data revealing health information, religious beliefs, political opinions or other special categories of personal data. Do not include such data in comments or order fields.
3. Where we get data from
We receive data directly from you when you use UDMG, post a comment, take part in a giveaway or place an order. We also receive profile data from Steam and, if you voluntarily connect an account, from Kick. Information about your session, security and video use is generated as you use the site.
4. Purposes and legal bases
- Performance of a contract or action at your request — Article 6(1)(b) GDPR. On this basis, we manage your account, enable sign-in, award and use points, handle orders, comments, reactions, notifications, games and giveaways, and enable the voluntary connection of a Kick account.
- Our legitimate interest — Article 6(1)(f) GDPR. This includes ensuring security, preventing abuse, moderating content, checking that activities are carried out correctly, establishing and defending claims, and creating aggregate statistics needed to assess how the site works. We take care to ensure that this interest does not unduly interfere with your rights and freedoms.
- Legal obligation — Article 6(1)(c) GDPR. We process data when required by law, particularly for keeping records and responding to authorised authorities.
5. Is providing data mandatory?
Providing the data needed to create an account and sign in is voluntary, but without it you cannot use features available to signed-in users. Information required for an order or giveaway is needed to handle it; without this information we may be unable to deliver a prize. Connecting a Kick account, posting comments, reacting and taking part in giveaways are voluntary.
6. What other people can see
Other signed-in users may see your name, avatar, points balance, account creation date, Steam identifier and profile data and, after connection, your Kick identifier and profile data, as well as information about an active subscription. Comments, giveaway participation and results, and the total value and number of prizes received may also be visible. Your name, avatar, points balance or information about a win may also appear in publicly accessible lists on the site.
7. Who we may share data with
Data may be received only by organisations that help us maintain the site, securely store information and files, and play videos, as well as people authorised to operate and moderate UDMG. Public authorities may also receive data when required by law.
When you sign in through Steam or voluntarily connect a Kick account, data is exchanged with the relevant service. You can find the rules for how these services process data in the privacy policies of Steam and Kick.
8. Transfers outside the EEA
The main information related to UDMG is stored within the European Economic Area (EEA). However, some external services may process data outside the EEA. In such cases, transfers are based on a European Commission decision establishing an adequate level of protection or on standard contractual clauses together with the required additional safeguards. You can obtain information about the safeguard used or a copy of it by contacting the controller.
9. How long we keep data
- account data — until the account is deleted;
- session information — until sign-out or expiry, normally no longer than 7 days;
- temporary information needed to sign in — no longer than 10 minutes;
- Kick connection data — until the account is disconnected;
- comments — until deleted by you or a moderator;
- order, giveaway and notification data — for the time needed to handle them and then until the period for possible claims or legal obligations expires;
- security records containing an IP address and browser information — no longer than 36 months; data related to a specific incident or claim may be kept longer, until the matter is finally resolved.
After the relevant period, we delete the data or remove its connection to an identifiable person, unless the law requires further retention.
10. Your rights
Depending on the circumstances, you have the right to:
- access your data and receive a copy;
- correct inaccurate or incomplete data;
- have your data deleted;
- restrict processing;
- object to processing based on our legitimate interest;
- receive and transfer data that we process by automated means on the basis of a contract.
To exercise these rights, email likeadmg@gmail.com. We may ask for information to confirm your identity. If you believe that we process data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
11. Cookies
UDMG uses only cookies necessary to recognise an active session and remember settings needed for the features you request. Without them, signing in and some site features would not work properly. We do not use cookies for advertising or additional tracking of user behaviour.
Under Article 399(3) of the Polish Electronic Communications Law, using such necessary information does not require separate consent when it is needed to provide a service requested by the user. You can restrict cookies in your browser settings, but this may prevent you from signing in or using certain features.
12. Automatic eligibility checks
We do not profile users or make decisions based solely on automated processing that produce legal effects or similarly significantly affect a user within the meaning of Article 22 GDPR. The system may automatically check participation requirements, such as a points balance, account age, connection to Kick or an active subscription, and determine a result according to the rules of a particular giveaway. You can report concerns about a result to the controller.
13. Changes to the privacy policy
We may update this policy when UDMG features, the way data is processed or the law changes. The current version, together with its last updated date, will be available on this page.