RIGHT HAND LAB
Right Hand Lab
Privacy Policy
Effective date: November 12, 2023
We, Right Hand Lab, care about personal data security and comply with all the laws and regulations on the personal data protection, including European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). Our users can be sure that their privacy and protection of their personal information are the most significant values for Right Hand Lab. In order to demonstrate that Right Hand Lab is fully GDPR- and CCPA-compliant and provide you with information on what personal data we collect from you, for which purposes, and with the help of which companies, we establish and publish this Privacy Policy (hereinafter referred to as “Policy”). You can read the text of the Policy by following the link: https://www.righthandlab.com/privacy-policy
1. Key Terms and Definitions In order to clarify the meaning of the specific provisions of this Policy we provide the following definitions of the terms used in the Policy:
1.1. “Personal data” or “personal information” refers to any kind of information that can identify you as a personal data subject, including your online identifier, e-mail, login, name etc.
1.2. “Right Hand Lab”, “we”, “us”, or “our” refer to Right Hand Lab.
1.3. “Right Hand Lab User”, “Right Hand Lab Users”, “you”, “your”, “personal data subject”, or “personal data subjects” refer to the users of Right Hand Lab.
1.4. “Personal data subject” or “personal data subjects” refer to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly, or indirectly by reference to one or more identifiers, including online identifier, e-mail, tracking data.
1.5. “Service” or “Services” refer to applications for mobile platforms or devices and web applications, including web applications accessible on third-party social networking services - "SNS" (collectively referred to as "Right Hand Lab Applications"), and advertisements implemented into Right Hand Lab Applications, web-pages of Right Hand Lab at application stores (AppStore, Google Play etc.), accounts, pages, and societies of Right Hand Lab in social networks (Facebook, Instagram etc.), chats and online dialogues implemented by Right Hand Lab into Right Hand Lab Applications, web domains and subdomains of Right Hand Lab and Right Hand Lab’s partners using the Services of Right Hand Lab, including righthandlab.com (collectively referred to as "Sites"), and other web forums or messaging boards in Right Hand Lab Applications and our Sites (collectively referred to as "Forums"). “Right Hand Lab Applications” refer to applications: - that were developed by Right Hand Lab; - that were developed by a third party but were published on behalf of Right Hand Lab under exclusive, sole, permanent, world-wide, transferable, sub-licensable and unlimited license.
1.6. “In-Game Account” refers to the account created by Right Hand Lab User on one of the Right Hand Lab Applications.
1.7. “Processing” refers to any operation or set of operations which is performed on personal data, such as collection, storage, use, transfer, deletion, destruction, retrieval, and any other operation in respect of the personal data.
1.8. “Controller” refers to Right Hand Lab as a legal entity which determines the purposes and means of the processing of personal data.
1.9. “Recipient” refers to a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
1.10. “Processor” refers to a natural or legal person, public authority, agency or other body which processes personal data on behalf of Right Hand Lab.
1.11. “Third Party” or “Third Parties” refer to a natural or legal person, public authority, agency, or body, other than a processor, that can receive personal data from a controller.
1.12. “Consent” refers to freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she signifies agreement to the processing of personal data relating to him or her.
2. Consent to Processing of Personal Data
2.1. Your freely given consent forms a legal basis for the processing of your personal data by Right Hand Lab. By giving such consent you also confirm the understanding that your personal data may be transferred to both EU and non-EU countries under Section 7 of this Policy.
2.2. When you download and open a Right Hand Lab Application or otherwise get access to the Services of Right Hand Lab, a dialog box will appear on the screen of your device. The dialogue box will contain the following statement: “I fully and freely agree with the Terms of Service and Privacy Policy”. The box will also contain the link to the text of this Policy and the button “I accept” by pushing which you give us your consent to processing your personal data in accordance with Privacy Policy.
2.3. The dialog box specified in para.2.12 of this Policy will also contain the statement “I confirm that I am 16+ (or holding parental responsibility)”. There will also be a box next to the statement provided in this paragraph of the Policy by ticking which either you confirm that you are 16 years of age or more, or the person holding parental responsibility over you consents to the processing of your personal data. 2.4. You have a right to withdraw your consent to the processing of your personal data at any time. If you would like to withdraw your consent, please send us the verifiable request via e-mail: etu.tam@icloud.com. In the verifiable request, please identify your online identifier (such as Game Center ID) or other identifiers by which we can identify the personal data related to your use of our Services. However, we cannot guarantee that after the withdrawal of your consent you will be able to use all the features of the Services. To learn more about the opportunities of obtaining the full access to the Services of Right Hand Lab, please read our Terms of Service.
2.5. If you send us the request to withdraw your consent in accordance with para.2.4 of this Policy, you also have the right to request the erasure (deletion) of your personal data that we collected during your use of our Services. Please send us the verifiable request via e-mail etu.tam@icloud.com. We will not be able to erase your personal data if the processing of this personal data is necessary for the performance of our Terms of Service that you agreed to, for the compliance with legal obligations of Right Hand Lab, or when there are other legal grounds for processing your personal data established by GDPR.
3. Controllers and Processors of Your Personal Data
3.1. Right Hand Lab is the Controller of your personal data that determines the purposes and means of processing your personal data by establishing this Policy and by concluding contracts on processing with other legal entities that Right Hand Lab involves in processing of your personal data as Processors.
3.2. The following categories of legal entities are involved in processing your personal data as Processors: 3.2.1. Legal entities that provide attribution tracking mechanisms, ad mediation services and ad networks services in respect of Right Hand Lab Applications;
3.2.2. Legal entities that use the analytical tools in respect of the behavior of Right Hand Lab Users and their use of Right Hand Lab Applications and other Services;
3.2.3. Legal entities that use advertising networks for promoting Right Hand Lab Applications and other Services;
3.2.4. Legal entities that use the personal data received from the Controller for developing and improving Right Hand Lab Applications under the written contract with Right Hand Lab;
3.2.5. Legal entities that store processed personal data of Right Hand Lab Users.
3.3. The Processors determined in para.3.2 of this Policy process your personal data only under and to the extent provided by the written contracts concluded between the Controller and the Processors. Such written contracts do not violate the Processors’ obligations provided in Art.28 GDPR and your rights as personal data subjects.
3.4. Linked Services. Right Hand Lab Services may also be linked to sites operated by unaffiliated companies, and may carry advertisements or offer content, functionality, games, newsletters, contests or applications developed and maintained by unaffiliated companies. Right Hand Lab is not responsible for the privacy practices of unaffiliated companies, and once you leave the Right Hand Lab Services or click an advertisement you should check the applicable Privacy Policy of the other service.
4. The Categories of Personal Data Right Hand Lab Collects from You
4.1. In order to provide you with our Services, we can collect and further process the following categories of your personal data:
4.1.1. Your Identifier for Advertisers (IDFA) or other kinds of Device ID that aggregate all the tracking information on how you use our Services through your device (hereinafter referred to as “Device ID”). You can get information on what is Device ID by following the link https://www.adjust.com/glossary/device-id/ To learn more about IDFA and how it is used in tracking technologies, please follow the link https://www.adjust.com/glossary/idfa/
4.1.2. Your online identifier that directly or indirectly identifies you as personal data subject, including but not limited to Facebook ID, Google Play ID, Game Center ID etc. To learn more about online identifiers, please follow the link https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/what-is-personal-data/what-are-identifiers-and-related-factors/. For the purposes of this Policy, the term “online identifiers” also includes profile names that you use in social networks for communication with other Right Hand Lab Users and Right Hand Lab.
4.1.3. Your e-mail address.
4.1.4. Your login or in-game nickname and password that you can create by obtaining access to Right Hand Lab Applications.
4.1.5. First and family names of Right Hand Lab Users.
4.1.6. Mobile telephone number.
4.1.7. Country of residence.
4.1.8. Age.
4.1.9. Gender.
4.2. Besides, when you contact us through our web-site righthandlab.com or other Sites of Right Hand Lab, you may be required to provide us with the information about your IT-project that you would like to publish and promote by use of our Services.
4.3. We do not collect sensitive Information: we do not ask you to send us, and you do not disclose, any sensitive personal data (such as social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background or trade union membership) on or through the Right Hand Lab Services or otherwise.
5. How We Obtain and Further Process Your Personal Data
5.1. Our Processors determined in para.3.2.1 of this Policy implement into the Right Hand Lab Applications attribution tracking technologies and track the use of the device (e.g. smartphone) by Right Hand Lab User. In doing this, such Processors use the Device ID of the device that aggregates all the personal data on the behavior of the device user. In particular, such Device ID can aggregate personal data on what web-resources the device user visited, which ads did the device user click, what applications for mobile devices did the user buy or download, how many application launches did the device user make. When Right Hand Lab User downloads or installs and launches Right Hand Lab Application, the Right Hand Lab Application obtains the information about the Device ID that belongs to the device of the Right Hand Lab User, and tracks all the behavioral personal data aggregated on this Device ID. Besides, when you launch the Right Hand Lab Application, we can also receive and process your personal data specified in para.4.1.7 of this Policy for purposes determined in Section 6 of the Policy.
5.2. Processors determined in para.3.2.1 of the Policy transfer the Device IDs of Right Hand Lab Users with aggregated tracking information to the Controller. The Controller can then transfer such Device IDs to the Processors determined in para.3.2.5 of this Policy for storage of this personal data. The Controller can also transfer such Device IDs to the Processors specified in para.3.2.2 of the Policy for the purposes of marketing and advertising analytics. Besides, the Controller can transfer Device IDs with aggregated tracking information to the Processors determined in para.3.2.3 of this Policy for the purposes of Right Hand Lab Application’s marketing and promotion in application stores, other mobile and web applications, and social networks. To learn more about the purposes for which we can process your personal data, please read Section 6 of this Privacy Policy.
5.3. When Right Hand Lab User creates an In-Game Account, he or she is required to provide Right Hand Lab with an online identifier of such Right Hand Lab User (such as Facebook ID or Google Play ID). Right Hand Lab User may also be required to provide Right Hand Lab with login or nickname used in Right Hand Lab Application and password created by Right Hand Lab User for the protection of In-Game Account. Some of the Right Hand Lab Applications can also require Right Hand Lab User to provide first and family names, e-mail address, and the mobile telephone number needed for creation of In-Game Account.
5.4. Besides, when you create an In-Game Account, you may provide us with personal data specified in paras.4.1.8 and 4.1.9 of this Policy, or you can allow us to obtain and process such personal data by providing us with consent on obtaining these types of personal information from your profile in a social network (e.g. Facebook). To learn more about the purposes of processing such personal data, please read Section 6 of this Policy.
5.5. The Controller can transfer personal data specified in para.5.3 of this Policy to the Processors determined in para.3.2.5 of the Policy for storage. The Controller can transfer online identifiers specified in para.5.3 of this Policy to the Processors determined in para.3.2.4 of the Policy for improvement and further development of Right Hand Lab Applications. All the purposes of processing your personal data are listed in Section 6 of this Policy.
5.6. If you provide us with the personal information determined in para.4.2 of this Service, we store and use your personal data solely for the purpose of negotiating with you on the terms of the contract with Right Hand Lab on the publishing and promotion of your IT-project.
5.7. If you chat, leave comments or feedback, or otherwise use our Sites for the purposes of communication with other Right Hand Lab Users or Right Hand Lab itself, we can store and use your profile names for the purposes of profile advertising.
5.8. If you use our Sites or Forums for purposes of communication and violate this Policy or our Terms of Service, we have the right to block your In-Game Account or otherwise block or restrict your access to the Services of Right Hand Lab, including block of access to our social network accounts and pages.
5.9. We store your personal data for the period of your use of our Services and until you have an active and valid In-Game Account. If we or you block or delete your In-Game Account or you otherwise cease to use our Services, we will continue to process personal data that was collected before the deletion of your In-Game Account or before the moment you otherwise ceased to use our Services for reaching the purposes specified in Section 6 of this Policy, and in any event for not more than for 8 years.
6. Purposes of Processing Your Personal Data
6.1. We collect, use, and otherwise process your personal data solely for the purposes specified in this Privacy Policy. Such purposes include:
6.1.1. Creation of In-Game Accounts and providing Right Hand Lab Users with an opportunity to use Right Hand Lab Applications and other Services;
6.1.2. Blocking or deletion of your In-Game Account or restriction of your access to our Services by other means for the violation of this Policy and Terms of Service;
6.1.3. Marketing purposes, including retargeting, profiling advertising, and use of look-a-like advertising targeting;
6.1.4. Identification and suggestion of connections with other Right Hand Lab Users, as well as enabling you to communicate with other Right Hand Lab Users and Right Hand Lab itself;
6.1.5. Operation and improvement of our Services, including improvement and development of Right Hand Lab Applications;
6.1.6. Marketing analysis, including understanding of your preferences and your use of our Services, and mobile applications and web-sites in general;
6.1.7. Responding to your requests, comments, and questions and providing you with customer support;
6.1.8. Sending you related information, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages; and
6.1.9. Communicating with you about promotions, rewards, upcoming events, and other news about Services offered by Right Hand Lab and our selected partners.
6.1.10. Compliance with applicable laws or legal process and/or response to requests from public and government authorities.
7. Storage of Your Personal Data
7.1. We and our Processors can store your personal data both inside and outside European Union.
7.2. While we and our Processors take all the reasonable and necessary measures aimed at protection of your personal data against unauthorized access by third parties, we shall inform you about the possible risks of such storage of your personal data in jurisdictions outside European Union under Art.49(1)(a) GDPR. Such possible risks include:
7.2.1. Efforts of hacking attacks. Right Hand Lab takes all the necessary measures to prevent such attacks and do not allow hackers to access your personal data. Such measures are determined in Section 9 of this Policy.
7.2.2. Storage of personal data in the jurisdictions to which Right Hand Lab has no access. However, Processors that store your personal data in such jurisdictions use all the necessary security mechanisms for protecting your personal data in accordance with Section 9 of this Policy. Furthermore, their storage authority is restricted and controlled by the written contracts with Right Hand Lab.
7.2.3. Existence of different rules and regulations on personal data processing in such jurisdictions that are different from GDPR. However, Right Hand Lab and its Processors provide personal data subjects with the level of guarantees granted to personal data subjects by GDPR.
7.3. When you push the button “I accept provided in para.2.2 of this Policy, you express your consent to the possible transfer of your personal data to both EU and non-EU countries.
8. Right Hand Lab Users’ Rights
8.1. You as the personal data subject have the following rights relating to the processing of your personal data:
8.1.1. Right of access (right to obtain from Right Hand Lab as the Controller confirmation as to whether your personal data are being processed and other information concerning your personal data, including information about the purposes of processing, the categories of processed personal data, the categories of recipients of your personal data, the period of personal data storage);
8.1.2. Right to lodge a complaint with a supervisory authority (a supervisory authority is a state authority in your country which supervises the compliance with GDPR by legal and natural persons that process personal data of data subjects);
8.1.3. Right to rectification (right to the rectification of inaccurate personal data concerning you);
8.1.4. Right to erasure (right to obtain the erasure of personal data concerning you);
8.1.5. Right to restriction of processing (right to obtain from Right Hand Lab as the Controller restriction of processing on the legal grounds provided in Art.18 GDPR (for example, when the accuracy of the personal data is contested by you or we no longer need the personal data for the purposes of the processing));
8.1.6. Right to data portability (the right to receive the personal data concerning you, which you have provided to Right Hand Lab, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from us);
8.1.7. Right to object (right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, including the right to object at any time to processing of personal data concerning you for marketing purposes);
8.1.8. Right not to be subject to a decision based solely on automated processing, including profiling;
8.1.9. Right to file the request or complaint to Right Hand Lab as the Controller of your personal data.
8.1.10. Right to withdraw your consent to personal data processing.
8.2. You may use your rights by reading this Privacy Policy or sending us requests relating to the rights provided in paras.8.1.1-8.1.10 via our e-mail etu.tam@icloud.com. You can also exercise your rights by contacting our Data Protection Officer (DPO).
9. How We Secure Your Personal Data Against Unauthorized Use
9.1. We employ reasonable security measures to protect your personal data from access by unauthorized persons and against unlawful processing, accidental loss, destruction and damage.
9.2. We do not use vulnerability scanning and/or scanning to PCI standards. We use regular Malware Scanning. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. We implement a variety of security measures when Right Hand Lab Users enter, submit, or access their information to maintain the safety of their personal data. All transactions are processed through a gateway provider and are not stored or processed on our servers.
9.3. Besides, our servers on which we store your personal data allow access to these servers and data stored on them only by use of special SSH-keys. To learn more about SSH keys please follow the link https://jumpcloud.com/blog/what-are-ssh-keys/
9.4. The access to the services of our Processors aimed at tracking behavioral data and promotion of Right Hand Lab Services is carried out by entering special username and password and sometimes with use of Two-Factor Authentication (2FA).
10. Cookies Policy
10.1. Neither we, nor our Processors use cookies in our Services.
10.2. We and our Processors determined in para.3.2.4 of this Policy use local storage of Right Hand Lab Applications for saving the progress of Right Hand Lab Users in such Right Hand Lab Applications. However, neither Right Hand Lab, nor our Processors have access to the information about the saved progress, except for cloud save scripts used in some of our Right Hand Lab Applications.
11. Transfer of Personal Data to Third Parties
11.1. We do not sell or otherwise transfer your personal data to any third parties. We have never sold any personal data to any third parties, and have not done so within the last 12 (twelve) calendar months. We are not planning to sell your personal data to any third parties in future. We can only transfer your personal data to the Processors determined in this Policy for the purposes specified in the Policy.
11.2. If we decide to change our policy on the sale of your personal data in future, we will provide you with all necessary updates and notifications in accordance with CCPA.
12. Data Protection Officer (DPO)
12.1. Because we regularly and systematically monitor personal data subjects on a large scale, we have appointed the Data Protection Officer (DPO) in accordance with Art.37 GDPR. Our DPO is Kostyantyn Tsymbalyuk.
12.2. Our DPO monitors the compliance with GDPR by Right Hand Lab and our Processors, and performs other tasks provided by Art.39 GDPR.
12.3. Right Hand Lab Users may contact our DPO regarding their rights provided by GDPR and this Privacy Policy via DPO’s e-mail: etu.tam@icloud.com Supervising authority of the EU Member State can also use this e-mail to contact the DPO.
13. Changes and Modifications in Privacy Policy
13.1. We reserve the right to change the terms of this Privacy Policy at any time and at our discretion. We will update this Policy at least once every 12 (twelve) months in accordance with CCPA.
13.2. If we update this Policy, we will notify you about the updates by posting the new version of the Policy on our web-site https://righthandlab.com/privacy-policy.html. We encourage you to periodically visit our web-site to monitor the updates on Privacy Policy.
14. Contacting Us
14.1. You can contact Right Hand Lab regarding the application of this Policy or the rights Right Hand Lab Users via our e-mail etu.tam@icloud.com.
15. Privacy rights of Californian residents under CCPA
15.1. Right to receive information and access information. You have the right to request us to disclose the following information we have collected: (1) The categories of personal information we have collected about you. (2) The categories of sources from which the personal information is collected. (3) The business or commercial purpose for collecting or selling personal information. (4) The categories of third parties with whom we share personal information. (5) The specific pieces of personal information we have collected about you. We shall provide this information only upon receipt of a verifiable consumer request. There is one way to submit a request for providing an information: 1) send the request via e-mail: etu.tam@icloud.com Upon receiving a verifiable consumer request from you to access personal information we shall promptly take steps to disclose and deliver, free of charge to you the personal information required by this section. The information may be delivered by mail or electronically, and if provided electronically, the information shall be in a portable and, to the extent technically feasible, in a readily useable format that allows you to transmit this information to another entity without hindrance. We may provide personal information to you at any time, but shall not be required to provide personal information to you more than twice in a 12-month period.
15.2. Right to deletion You have the right to request us to delete any personal information about you which we have collected. We may retain personal information necessary to: (a) protect our business, systems, and users from fraudulent activity, (b) to address technical issues that impair existing functionality, (c) necessary for us, or others, to exercise their free speech or other rights, (d) comply with law enforcement requests pursuant to lawful process, (e) for scientific or historical research, (f) for our own internal purposes reasonably related to your relationship with us, or to comply with legal obligations. Additionally, we need certain types of information so we can provide our services to you. There is one way to submit a request for deletion: 1) send the request via e-mail: etu.tam@icloud.com If we need additional information to verify your identity, we will contact you to request that information. If we deny your request, we will explain the reason in our response.
15.3. Right to opt-out You have the right, at any time, to direct us not to “sell” the your personal information as defined by the CCPA. We use and share your information as described in this privacy policy (para 6 of this Policy) and do not believe this use and sharing is a sale as defined by the CCPA. However, we have provided you with a system to record your preference that your data not be sold in the future. You may make this by sending the request via e-mail: etu.tam@icloud.com ;
15.4. No discrimination based upon the exercise of the opt-out right We shall not discriminate against a consumer because the consumer exercised any of the consumer’s rights under this title, including, but not limited to, by: (1) Denying goods or services to the consumer. (2) Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties. (3) Providing a different level or quality of goods or services to the consumer. (4) Suggesting that the consumer will receive a different price or rate for goods or services or a different level or quality of goods or services. Nothing in this subdivision prohibits us from charging a consumer a different price or rate, or from providing a different level or quality of goods or services to the consumer, if that difference is reasonably related to the value provided to us by the consumer’s data. If you are a resident of California we can provide access to your personal information or delete the same at your specific request twice every 12 month without a charge. Please note, in order to avoid unauthorized disclosures we shall proceed only in case of verifiable consumer request. It will be completed in 45 days, but in case of necessity we can extend this period by an additional 45 days. We shall notify you immediately in that case.