Privacy Policy
This Privacy Policy explains how we handle personal data when you use avrix.io (the "Platform"). Avrix is a registered trade name of Current Games B.V. We are the controller of the personal data described in this policy.
1. Who we are
Current Games B.V., trading as Avrix
Stationsplein 10, 9401 LB Assen, The Netherlands
KvK number: 95626271
Privacy contact: privacy@current.games
2. Who this policy applies to
Avrix is a business-to-business platform. This policy applies to representatives of publishers, developers, distributors, and other business partners who register for, access, or use the Platform.
3. What data we collect
We collect the following categories of personal data:
- Identification and contact data: name, business email address, job title, company name.
- Account and login data: username, hashed password, authentication logs, session data.
- Billing and tax data: billing address, VAT or tax identification number, invoice history.
- Payout data: bank account number or IBAN, account holder name, SWIFT or BIC where applicable.
- Identity verification data: copies of identification documents, company registration documents, and other information collected to meet know-your-customer (KYC) and anti-money-laundering obligations.
- Platform usage data: pages viewed, features used, actions taken, timestamps, IP address, device and browser information.
- Communications data: messages you send to us through email, contact forms, or support channels.
4. How we collect it
We collect personal data:
- Directly from you when you register, fill in forms, upload documents, or contact us.
- Automatically when you use the Platform, through cookies and similar technologies.
- From third parties such as company registries and KYC verification providers.
5. Why we process your data and on what legal basis
We process personal data for the following purposes under the following legal bases of the GDPR:
- To provide, operate, and secure the Platform, including account management and access control. Legal basis: performance of a contract and our legitimate interest in running a secure service.
- To process transactions, issue invoices, and arrange payouts. Legal basis: performance of a contract and compliance with legal obligations.
- To meet KYC, anti-money-laundering, tax, and accounting obligations. Legal basis: compliance with legal obligations.
- To provide customer support and respond to your requests. Legal basis: performance of a contract and our legitimate interest in serving our users.
- To analyse and improve the Platform. Legal basis: our legitimate interest in developing our product.
- To send service communications, product updates, and marketing communications about Avrix. Legal basis: our legitimate interest in business communication, or your consent where required by law. You have the right to object or withdraw consent at any time.
- To prevent fraud, abuse, and security incidents. Legal basis: our legitimate interest in protecting the Platform and its users.
- To comply with legal requests, court orders, and regulatory requirements. Legal basis: compliance with legal obligations.
6. Who we share your data with
We share personal data with the following categories of recipients:
- Hosting and infrastructure providers who run the Platform on our behalf.
- Analytics providers, including Google Analytics, which help us understand how the Platform is used.
- Customer relationship and marketing providers, including HubSpot, which help us manage business contacts and communications.
- Identity verification providers who perform KYC checks.
- Accountants, auditors, tax advisors, and legal counsel.
- Payment processors. We do not have a live payment processor at the date of this policy. Once a processor is engaged, this policy will be updated to name it and describe the data shared.
- Public authorities and law enforcement where required by law.
- Acquirers or investors in the context of a corporate transaction, under confidentiality obligations.
We require all processors to handle your data under written agreements and in line with the GDPR.
7. International transfers
We operate globally. Your personal data may be stored or processed outside the European Economic Area, including in countries that do not provide the same level of data protection as the EU.
Where we transfer personal data outside the EEA, we rely on one of the following safeguards:
- An adequacy decision by the European Commission.
- Standard Contractual Clauses approved by the European Commission.
- Another lawful transfer mechanism permitted under the GDPR.
You have the right to request a copy of the safeguards in place by contacting privacy@current.games.
8. How long we keep your data
We keep personal data only as long as needed for the purposes described in this policy:
- Account and contract data: for the duration of the business relationship and up to 7 years after termination, in line with Dutch tax and accounting law.
- Invoicing and payment records: 7 years, in line with Dutch tax law.
- KYC records: as required by applicable anti-money-laundering rules, typically 5 to 7 years.
- Marketing data: until you object or withdraw consent.
- Platform usage logs: up to 24 months.
- Support communications: up to 3 years after the last contact.
After these periods, data is deleted or anonymised.
9. Cookies and similar technologies
The Platform uses cookies and similar technologies for:
- Essential functions such as authentication and session management.
- Analytics through Google Analytics.
- Customer relationship features through HubSpot.
You control non-essential cookies through the cookie banner on the Platform and through your browser settings. Blocking essential cookies prevents the Platform from functioning correctly.
10. Your rights
Under the GDPR, you have the right to:
- Access your personal data.
- Correct inaccurate or incomplete data.
- Request erasure of your data in certain cases.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent where processing is based on consent, without affecting earlier lawful processing.
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or another supervisory authority in your country.
To exercise any of these rights, contact privacy@current.games. We respond within one month of a valid request.
11. Security
We use technical and organisational measures to protect personal data, including access controls, encryption in transit, logging, and staff confidentiality obligations. No system is fully secure, so we keep our measures under review.
12. Children
Avrix is a B2B platform and is not directed at children under 16. We do not knowingly collect personal data from children.
13. Changes to this policy
We update this policy when our practices or applicable law change. The date at the top shows the last update. Material changes will be communicated through the Platform or by email.
14. Contact
For questions or requests about this policy or your personal data:
Current Games B.V.
Stationsplein 10, 9401 LB Assen, The Netherlands
Email: privacy@current.games