Key information
This summary gives you the essentials. The sections below explain each point in detail.
- Controller
- Venirse Media SL (NIF B06987804), Madrid, Spain
- Purposes
- Running the website and the game, sending news and playtest invitations you request, answering your messages, improving Endurland and keeping it fair and secure.
- Legal bases
- Your consent, the performance of our agreement with you, our legitimate interests and compliance with legal obligations.
- Recipients
- Service providers acting on our behalf, Valve (Steam) and other players in your online sessions. We never sell your data.
- Your rights
- Access, rectification, erasure, restriction, portability, objection and withdrawal of consent, plus the right to complain to the Spanish Data Protection Agency (AEPD).
- Contact
- cloud@venirse.com
01Who we are
The controller of your personal data is Venirse Media SL (“Venirse Media”, “we”, “us” or “our”), the company that develops and publishes Endurland. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”).
- Company
- Venirse Media SL
- Tax ID (NIF)
- B06987804
- Registered office
- Madrid, Spain
- cloud@venirse.com
This policy applies to the Endurland website (the “Website”), our newsletter and playtest programmes, our support channels and the Endurland video game, including demos, playtest builds, updates and online features (the “Game”).
02Data we collect
When you visit the Website
- Technical data. Your IP address, browser type and version, operating system, referring page, the pages you request and the date and time of each request. The servers that host the Website record this information automatically because it is needed to deliver the pages and keep them secure.
- Font requests. The Website loads its typefaces and icons from Google Fonts. To deliver them, your browser connects to Google’s servers, which receive your IP address and basic browser information.
The Website does not use cookies, analytics tools or advertising trackers.
When you sign up for news or playtests
- Your email address, which you give us through the sign-up form.
- If you are invited to a playtest: your Steam account name and Steam ID, the hardware and system details you choose to share, and the feedback, survey answers and bug reports you send us.
When you contact us
- Your name, email address, the content of your message and any files you attach.
When you play the Game
- Steam data. Your Steam ID and Steam display name, which Valve shares with us through Steam so that we can verify ownership of the Game and provide online co-op, achievements and cloud saves.
- Gameplay data. Your progress, settings, in-game choices and events such as sessions played, quests completed or deaths, linked to your Steam ID.
- Technical and diagnostic data. Crash reports, error logs, performance metrics, game version, operating system and hardware specifications such as CPU, GPU and memory.
- Online session data. When you play co-op, the technical information needed to connect players, such as network addresses and connection quality, is exchanged between the devices in the session and our networking services.
- Reports. Information about other players’ behaviour that you report to us, and reports other players make about you.
We do not process payment details: purchases of the Game are made from Valve through Steam. We do not ask for, and do not intend to process, special categories of personal data such as health information or political opinions.
03Purposes and legal bases
We only use your personal data when the law allows us to. The table below lists each purpose, the data involved and the legal basis under Article 6(1) GDPR.
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering the Website and protecting it against attacks and misuse | Technical data | Legitimate interest in providing a working, secure website (Art. 6(1)(f)) |
| Displaying the Website’s fonts and icons | IP address, browser information | Legitimate interest in presenting the Website consistently across devices (Art. 6(1)(f)) |
| Sending news, devlogs and playtest invitations | Email address | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Organising playtests and analysing your feedback | Email, Steam ID, hardware details, feedback | Performance of the agreement to take part in the playtest (Art. 6(1)(b)) |
| Providing the Game and its online features, saving progress and syncing achievements | Steam data, gameplay data, online session data | Performance of our agreement with you under the Terms of Service (Art. 6(1)(b)) |
| Fixing bugs and improving performance, balance and design | Technical and diagnostic data, gameplay data | Legitimate interest in offering a stable, enjoyable game (Art. 6(1)(f)) |
| Preventing cheating, fraud and abuse, and enforcing our Terms of Service | Steam data, gameplay data, reports | Legitimate interest in keeping the Game fair and safe for every player (Art. 6(1)(f)) |
| Answering support requests and other messages | Contact data, message content | Steps taken at your request and performance of our agreement (Art. 6(1)(b)); legitimate interest in replying to general enquiries (Art. 6(1)(f)) |
| Meeting our legal obligations and handling legal claims | Data strictly required in each case | Legal obligation (Art. 6(1)(c)); legitimate interest in defending our rights (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have balanced them against your rights and you may object at any time, as explained in section 9. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
04How long we keep your data
- Website server logs: up to 30 days, unless we need them for longer to investigate a specific security incident.
- Newsletter: until you unsubscribe or withdraw your consent. After that, we keep only your email address on a suppression list so that we do not contact you again.
- Playtest data: for the duration of the playtest programme and up to 12 months after it ends. We may keep feedback after that only in anonymised or aggregated form.
- Gameplay, technical and diagnostic data: up to 24 months from collection. After that, we delete it or anonymise it.
- Support messages: up to 3 years after your request is closed, so that we can deal with any follow-up or claim.
- Data needed to comply with the law: for as long as the applicable law requires.
When a retention period ends, we securely delete or anonymise the data. Where the law requires us to keep data blocked until possible liabilities expire, we do so and restrict its use to that purpose.
05Who we share your data with
- Service providers. We use providers for website hosting, email delivery and newsletter management, cloud infrastructure, online multiplayer services, crash reporting and customer support. They process data only on our instructions and under data processing agreements that comply with Article 28 GDPR.
- Valve Corporation (Steam). Valve distributes the Game, processes purchases and provides Steam accounts, multiplayer networking, achievements and cloud saves. Valve acts as an independent controller under its own privacy policy.
- Google. Google receives your IP address when your browser loads fonts and icons from Google Fonts, as described in section 2.
- Other players. Your Steam display name, your character and your actions are visible to the other players in your co-op sessions.
- Public authorities. We disclose data to courts, law enforcement or regulators when the law requires it.
- Corporate transactions. If Venirse Media is involved in a merger, acquisition or sale of assets, personal data may be transferred to the successor, who will remain bound by this policy.
We do not sell your personal data and we do not share it with third parties for their own advertising.
06International transfers
Some of our providers and partners, such as Valve and Google, are based in or process data outside the European Economic Area, mainly in the United States. When this happens, we make sure the transfer is protected by an adequacy decision of the European Commission, such as the EU-U.S. Data Privacy Framework when the recipient is certified under it, or by the Standard Contractual Clauses approved by the European Commission, together with any additional safeguards that may be needed.
You can ask us for information about these safeguards by writing to cloud@venirse.com.
08Children
Endurland is intended for players aged 12 and over. Under Spanish law, children under 14 cannot consent to the processing of their personal data on their own. We therefore do not knowingly collect data from children under 14 on the basis of consent, for example for the newsletter or playtests, without the consent of a parent or legal guardian.
If you are a parent or guardian and believe your child has given us personal data without your consent, contact us at cloud@venirse.com and we will delete it.
09Your rights
Under the GDPR and the LOPDGDD you have the right to:
- Access the personal data we hold about you and receive a copy of it.
- Rectify inaccurate or incomplete data.
- Erase your data when, among other reasons, it is no longer needed for the purposes for which it was collected.
- Restrict the processing of your data in the cases provided by law.
- Data portability: receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another controller.
- Object to processing based on our legitimate interests.
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it. You can also unsubscribe from our emails with the link included in each one.
To exercise your rights, email cloud@venirse.com with the subject “Data protection”. Tell us which right you want to exercise and include enough information for us to identify you, such as your email address or Steam ID. We may ask for additional information to confirm your identity. Exercising your rights is free. We will reply within one month, which may be extended by two further months for complex requests; in that case we will tell you why.
For data that Valve holds as an independent controller, such as your Steam account and purchase history, please contact Valve directly.
If you believe we have not handled your data properly, you can complain to the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or to the data protection authority of your country of residence. We would appreciate the chance to resolve your concern first.
10Security
We apply technical and organisational measures appropriate to the risk to protect your personal data against loss, misuse and unauthorised access. These include encrypted connections, access controls based on the principle of least privilege and the careful selection of our service providers. No system is completely secure. If a personal data breach occurs that is likely to put your rights at high risk, we will notify you and the competent authority as the law requires.
11Changes to this policy
We may update this policy to reflect changes in the Website, the Game or the law. We will publish the new version on this page and change the “Last updated” date. If the changes are significant, we will also tell you through the Website, in the Game or by email where appropriate.
12Contact
If you have any question about this policy or about how we handle your personal data, write to us:
- Company
- Venirse Media SL
- Tax ID (NIF)
- B06987804
- Address
- Madrid, Spain
- cloud@venirse.com