Information on the Processing of Personal Data

Protecting your personal data is one of our priorities. This page summarizes the main ways in which we process personal data, why we do so, and what rights you have in relation to that processing.

We process personal data primarily in connection with the Abaku game and related services, based on the performance of contracts and on legal obligations. In some cases, we also process data to protect our rights and legitimate interests and to keep users informed about relevant updates.

If we processed your data before you reached 18 years of age, you may, after reaching that age, request separation from a shared account and create your own account. You will then be able to manage your own personal data.

We recommend that you read this information carefully. If you have any questions, you can contact us at any time using the contact details below.

A. Data Controller

The controller of your personal data is AL.21 s.r.o., Company ID 04241126, with registered office at Vysehradska 320/49, 128 00 Prague, Czech Republic.

B. Personal Data We Process

In the course of providing our services, we may process the personal data of school contacts, teachers, and individual students. We obtain this data mainly when you or your teachers register or use our services. The main categories are:

Identification data, such as name, surname, nickname, year of birth, gender, photo, and class.
Contact data, especially email address.
Website usage data, such as IP address, cookies, operating system, and browser.
Service usage data, such as records of access to Abaku or the school league and license checks.
Communication data, such as message delivery records, communication logs, and read receipts.

C. Purposes and Legal Basis

We process personal data only for clearly defined purposes, on the legal basis stated for each purpose, for the period stated below, and only to the necessary extent.

C.1 Providing services to customers and players

We process the data you provide when registering, updating your account, or using our services when this is necessary to provide our services. This includes purchases in our shop, account login, class and student administration, task assignment and evaluation, mutual matches, profile sharing, and organizing the Abaku school league.

This processing is based on the performance of a contract, or on our legitimate interest in performing that contract, for the duration of the contract and the obligations arising from it.

C.2 Supporting and improving our services

We may analyze how you use our services and which features you use most often so that we can understand usage trends, improve the services, and develop them further.

This processing is based on our legitimate interest in supporting, developing, and improving our services, for no longer than 6 months after the contract ends.

C.3 Promoting our services

We may use your feedback about our services and data obtained from you to help promote our services and to better set our marketing strategy in order to grow the user base of Abaku.

This processing is based on our legitimate interest in promoting our services, for no longer than 6 months after the contract ends.

C.4 Website administration and analytics

We may process data about your movement through our website and the settings of the device you use to ensure the website works properly, to measure advertising performance, and to evaluate new features.

This processing is based on our legitimate interest in improving the website, measuring the effectiveness of advertising, testing new features before deployment, and keeping the website functional, for up to 36 months.

C.5 Internal administration and protection of legal claims

We may process data to protect against unlawful or unauthorized use of our services, to maintain security, and to protect our legal claims. We may also use data to keep records and evidence of payments or access rights, for example when you use our services for a limited trial period.

This processing is based on our legitimate interest in protecting our legal claims, for the duration of the limitation period, typically not longer than 16 years after the contract ends.

C.6 Statistics and reporting

We may process personal data, especially age and gender, to create statistical outputs and reports, for example comparisons of age groups. Such outputs are normally anonymized and cannot be used to identify you.

This processing is based on our legitimate interest in creating statistical overviews, for up to 36 months.

C.7 Compliance with legal obligations

We may also process personal data in order to comply with our legal obligations, especially in the tax and accounting area, and to provide cooperation to public authorities when required by law.

This processing is based on compliance with legal obligations, for the period required by the relevant laws.

D. Who Processes Your Data

We process the data ourselves. That means we determine the purposes and means of processing and are responsible for it.

The following categories of processors may be involved:

Entities involved in the operation of Abaku websites.
Entities involved in the development of Abaku applications.

We may also share your personal data with social network operators, but only if you have given us prior approval.

We may also share your data with a school institution that pays for the license under which you are authorized to use our service. In that case the school acts as an independent controller.

In some cases, the law may require us to disclose personal data, for example to courts or police, or to public authorities and third parties where needed to achieve the purposes described above.

E. Cookies and Other Technologies

When you visit our website, we store small files such as cookies on your device and later read them. Some cookies are essential for the website to function properly.

We use cookies to identify you between pages and visits, remember your login, record consent, improve security, and detect and fix errors. Other cookies help us measure traffic, test new features, adapt content, and support social network integrations.

Similar technologies are used for website functionality and analytics in line with the rules described above.

F. Your Rights

As a data subject, you have the following rights:

F.1 Right of access

You have the right to know what data we process about you, for what purpose, for how long, where it comes from, and who receives it. You may also request a copy of the processed data.

F.2 Right to rectification

If your data is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay.

F.3 Right to erasure

In certain cases, you have the right to have your personal data erased, for example when it is no longer needed, when you successfully object to processing, or when processing has become unlawful.

F.4 Right to restriction of processing

In certain cases, you may request that we restrict the processing of your personal data, for example while the accuracy of the data is being verified or if you need the data for legal claims.

F.5 Right to object

You may object to processing based on our legitimate interests. We will stop processing unless we have compelling legitimate grounds to continue. You can always object to direct marketing.

F.6 Right to data portability

You may request the data you provided to us and which we process based on a contract in a structured, commonly used, machine-readable format.

F.7 Right to lodge a complaint

You may lodge a complaint with the relevant data protection authority if you believe that we are processing your data unlawfully or in violation of applicable law.

G. How to Exercise Your Rights

If you are a student and you reach the age of 16, you may exercise your rights independently.

For any matter related to the processing of your personal data, you can contact us by email at info@abaku.org.

Mailing address: AL.21 s.r.o., Vysehradska 320/49, 128 00 Prague, Czech Republic.

Current contact information is available on https://abaku.org/.

We will handle your request without undue delay and no later than one month. In exceptional cases, especially due to the complexity of the request, this period may be extended by two further months. We will inform you of any such extension and the reasons for it.

You may also lodge a complaint with the Czech Data Protection Authority, based at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.