Privacy policy

Data controller

The controller of the personal data related to this website is:

• Owner: Dryko Consulting S.L.
• Tax ID (NIF): B67331207
• Registered address: Rambla Prim 154, esc. D, 1º 2ª, 08020 Barcelona (Spain)
• Email: info@carnivalmonkey.com

What data we process

The website does not ask you to register and does not use analytics or advertising cookies. We only process personal data in these cases:

• If you write to us by email or through the contact form: your name, your email address, the topic of your enquiry and the content of your message.
• When you submit the form: Cloudflare Turnstile analyses technical signals from your browser and device to check that it is being sent by a person and not by an automated program.
• When you visit the website: the technical data your browser sends when it requests each page (for example, your IP address, your browser and the page requested), which the hosting provider processes to serve the website and protect it against attacks.

Apps and games

This policy covers only the carnivalmonkey.com website. Each Carnival Monkey app or game has its own privacy policy, which explains what data that app processes and how.

• BubbleEle: BubbleEle privacy policy.

Purposes and legal basis

• Replying to your message and, if it is a support request, helping you with the app or game. Legal basis: if the request is about support for an app or game you use, the performance of the service (article 6(1)(b) GDPR); in all other cases, our legitimate interest in answering the enquiries we receive (article 6(1)(f) GDPR).
• Protecting the contact form against automated submissions (Cloudflare Turnstile). Legal basis: our legitimate interest in the security of the service (article 6(1)(f) GDPR).
• Serving the website and keeping it secure. Legal basis: our legitimate interest in offering an available and secure website (article 6(1)(f) GDPR).

Retention period

We keep messages for as long as we need to reply to them and then for up to twelve months from the last communication, unless we need to keep them longer to meet legal obligations or deal with claims. The hosting provider keeps the technical data of visits for the limited time set by its security and logging systems.

Recipients and processors

We do not share your data with third parties unless required by law. The following providers process data on our behalf, as processors:

• Cloudflare, Inc.: website hosting and security, and anti-spam verification of the contact form (Cloudflare Turnstile).
• Resend: sending the messages from the contact form by email.
• Google Ireland Limited (Google Workspace): email.

International transfers

These providers may process data outside the European Economic Area. They do so with the safeguards required by the GDPR: the EU-US Data Privacy Framework, where the provider has joined it, and otherwise the standard contractual clauses approved by the European Commission.

Minors

The website is not intended to collect data from minors. If you are under 14, please ask your mother, father or guardian to write to us for you.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@carnivalmonkey.com. We will reply within one month at the latest.

If you feel we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).