Last updated: Feb 02, 2025

This Privacy Policy describes Our policies and procedures on the collection, processing of Your personal information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, you are consenting to the practices described in this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

  Under GDPR (General Data Protection Regulation applicable in the European Union), You can be referred to as the Data Subject or as the User as you are the individual using the Service.

• Company (referred to as either "the Company", "Wave Studio", "We", "Us" or "Our" in this Agreement) refers to WAVE DESIGN STUDIO S.R.L., VIRTUTII NR. 19D ET. 4, SECTORUL 6, Romania.

  For the purpose of the GDPR, the Company is the Data Controller.

• Controller / Data Controller represents the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by the European Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

• Application means the software program provided by Wave Studio downloaded by You on any electronic device.

• Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 25% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

• Account means a unique account created for You to access our Service or parts of our Service.

• Website refers to  Wave.Studio, accessible from https://wave.studio 

• Service refers to the Application or the Website or both.

• Country refers to: Romania

• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used. For the purpose of the GDPR, Service Providers are considered Data Processors.

• Processor / Data Processor represents a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

• Recipient represents a natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether it is a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with the European Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
• Third-party a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

• Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.

• Facebook Fan Page is a public profile named Wave Studio specifically created by the Company on the Facebook social network, accessible from https://www.facebook.com/wave.studio.apps

• Personal Data represents any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. For the purposes for GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
  
  Processing represents any operation or set of operations that are performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  
  Restriction of processing represents the marking of stored personal data with the aim of limiting their processing in the future
  
  Data Breach represents a breach of security leading to the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of, or access to, personal data. This means that a breach is more than just losing personal data.
  
  For the purposes of the CCPA (California Consumer Privacy Act is a state statute intended to enhance privacy rights and consumer protection for residents of the state of California in the United States), Personal Data means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be linked, directly or indirectly, with You.

• Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.

• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

• Data Controller, for the purposes of the GDPR (General Data Protection Regulation), refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.

• Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.

• Business, for the purpose of the CCPA (California Consumer Privacy Act), refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of the processing of Consumers' personal information, or on behalf of which such information is collected and that alone, or jointly with others, determines the purposes and means of the processing of consumers' personal information, that does business in the State of California.

• Consumer, for the purpose of the CCPA (California Consumer Privacy Act), means a natural person who is a California resident. A resident, as defined in the law, includes (1) every individual who is in the USA for other than a temporary or transitory purpose, and (2) every individual who is domiciled in the USA who is outside the USA for a temporary or transitory purpose.

• Sale, for the purpose of the CCPA (California Consumer Privacy Act), means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer's Personal information to another business or a third party for monetary or other valuable consideration.

Purposes for Processing Your Personal Data

In connection with your use of the Services, we collect and process your personal data for a variety of purposes, as described below according to the applicable legal bases:

1. Performance of Contract:

To provide you with the Services, we process the personal data necessary for the performance of our contract with you. This includes, without limitation, data required to:

• Create and manage your user account to facilitate access to and participation in our Apps and Services;
• Operate and maintain the Services;
• Verify and confirm payments;
• Provide and deliver products and services requested by you; and
• Communicate with you in relation to the Services.

2. Legitimate Interests (Enhancing the User Experience):

On the basis of our legitimate interests, we process your personal data to improve and customize your experience with the Services. Such processing includes, but is not limited to, the following activities:

• Updating and developing users profiles;
• Enhancing and refining the Services and overall user experience;
• Managing our ongoing relationship with you;
• Providing social features as an integral part of the Services;
• Customizing your experience with the Services;
• Responding to your comments and inquiries and providing user support;
• Offering you information and promotions related to other Wave Studio products and services, including updates, security alerts, and support messages; and
• Facilitating communication with other users when available.

3. Legitimate Interests (Ensuring Safety and Fairness):

To maintain a safe and fair environment within the Services, we process your personal data on the basis of our legitimate interests. This includes the processing necessary to:

• Analyze and monitor usage of the Services and their social features;
• Moderate chats and other forms of communication, whether through automated or manual methods;
• Take appropriate action against fraudulent or otherwise misbehaving users; and
• Prevent harassment and cyber-bullying.

4. Legitimate Interests (Advertising and Monetization):

For the purposes of promoting and monetizing the Services, we may process your personal data on the basis of our legitimate interests, which includes:

• Displaying non-targeted advertisements within the Services, either from us or from our advertising partners;
• Tracking your activity within the Services to ascertain your interests;
• Monitoring installations and the sources thereof for our apps;
• Measuring, analyzing, and improving the effectiveness of our advertising efforts both within and outside the Services; and
• Sending you communications regarding offers, rewards, events, or other news related to the Services.

5. Consent. 

Where required by applicable law, and with your explicit consent, we may process your personal data for additional purposes, including:
• Sharing your data with our advertising partners for their independent use, which may involve creating personalized advertising profiles, selecting and targeting personalized advertisements, measuring ad performance, generating audience insights, and other related activities;
• Sending you newsletters or similar communications, provided you have opted in to receive such information; and
• Any other purposes for which you have provided your consent, as detailed in the applicable consent screen within the Services.

By using our Services, you acknowledge and consent to the processing of your personal data for the purposes set forth above, subject to your rights under applicable laws and regulations.

Collecting and Processing Your Personal Data

Types of Data Collected

Personal Data You provide while using the Service

We receive and store any information You provide in relation to the Service We provide. You can choose not to provide certain information, but then you might not be able to take advantage of our Service.

You provide information to Us when you:

• download, stream, view, or use our content on a device or service or download one of our applications on a device;
• provide information in Your Account (you might have more than one if you have used more than one email address), when signing up;
• configure your settings on, provide data access permissions for, or interact with the Service;
• communicate with us by phone, email, or other means;
• complete a questionnaire, a support ticket, or a contest entry form;
• participate in community features; 
• review or rate the Service or App

As a result of these actions, You might supply Us with such information as:

• identifying information such as your email address, first and last name;
• your age;
• your sex;
• your location information;
• your IP address;
• content of reviews and emails sent to us;

Data Processed Automatically

Usage Data is collected automatically when using the Service:

• Your IP address and mobile device identifiers (such as device ID, advertising ID, MAC address, and IMEI);
• Device-related information, including device name, operating system, browser type, and language settings;
• Coarse location data (e.g., country or city-specific information); and
• The generation of a unique proprietary app-specific identifier associated with your use of the Services.
• App usage information, like features you interact with, time spend in app, images you have downloaded

We use this information to provide features of Our Service, to improve and customize Our Service. The information may be uploaded to the Company's servers and/or a Service Provider's server or it be simply stored on Your device. You can enable or disable access to this information at any time, through Your Device settings. We do not collect or otherwise process sensitive data, included by the Regulation in special categories of personal data. We also do not wish to collect or process data of minors under the age of 16.

Data Obtained or Enriched from Third Parties

Additionally, we process personal data that is either collected or enriched through information received from our partners, including, but not limited to:

• Data provided when you link third-party tools with the Services (for example, when logging in using your Facebook or Google account);
• Demographic information used to ascertain the coarse location associated with your IP address;
• Information utilized to detect and prevent fraudulent activities (such as refund abuse in apps);
• Data obtained from platforms on which the apps operate (such as data used to verify payment transactions); and
• Information processed for advertising and analytics purposes, which enables us to continually improve our games.

By accessing and using the Services, you acknowledge and consent to the collection and processing of your personal data as described above, in accordance with this Privacy Policy and all applicable laws and regulations.

CHILDREN

The Services are expressly intended for use solely by adults. Accordingly, when you access or use the Services, you may be required to provide verifiable proof of your age. In the event that we determine, in our sole discretion, that you are a minor or do not meet the required age threshold, we reserve the right to restrict, suspend, or terminate your access to the Services, as necessary to comply with applicable laws, regulations, or platform requirements, or to ensure an appropriate user experience. Where access is not terminated or suspended, certain portions of the Services may be modified or removed to maintain compliance with applicable legal and regulatory standards.

Tracking Technologies 

Our Android app employs app tracking technologies—such as device identifiers, unique user codes, and session tracking—to monitor how you interact with the app’s features. These tools help us understand usage patterns, optimize app performance, and deliver a more personalized user experience. The data collected through these mechanisms is used solely for improving app functionality and is handled in accordance with our privacy practices. You may manage your tracking preferences through your device settings, though please note that disabling these features may impact the app’s performance or the availability of personalized services.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including to monitor the usage of our Service.
• To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
• For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
• To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
• To manage Your requests: To attend and manage Your requests to Us.
• Comply with legal obligations: In certain cases, We collect and use Your personal information to comply with laws.
• Advertising with cosent: We use Your personal information to display interest-based ads for features, products, and services that might be of interest to you. In the EU we only serve personalized advertising to users that have consented to this. We don't server personalized ads in California.
• Our legitimate interest to carry out commercial activities (improving the Service), to promote and develop Our commercial activity and to defend Our commercial activity (measures to protect the Website and Application and the Website’s and Application's users against cyber-attacks, measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities and various other risk management measures) always taking care that Your fundamental rights and freedoms are not affected

We may share your personal information in the following situations:

• With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to show advertisements to You to help support and maintain Our Service, to advertise on third party websites to You after You visited our Service, for payment processing, to contact You.
• For Business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company.
• With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
• With Business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.
• Protection of Us and others: We release account and other personal information when We believe release is appropriate to comply with the law; enforce or apply our Terms of Services and other agreements; or protect Our rights, property, or safety, Our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.
• With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside. If You interact with other users or register through a Third-Party Social Media Service, Your contacts on the Third-Party Social Media Service may see Your name, profile, pictures and description of Your activity. Similarly, other users will be able to view descriptions of Your activity, communicate with You and view Your profile.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information. Adequate safeguards to ensure your rights include utilizing and enforcing the Standard Contractual Clauses approved by the EU Commission.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

Security of Your Personal Data

We place a high priority on the security of your Personal Data and employ commercially reasonable measures to protect such data during transmission through the use of encryption protocols and software. However, please be advised that no method of transmission over the Internet, nor any method of electronic storage, is entirely secure, and therefore, we cannot guarantee the absolute security of your Personal Data. To further ensure a secure and safe user experience, we continually develop and implement administrative, technical, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, loss, or misuse.

Detailed Information on the Processing of Your Personal Data

Service Providers have access to Your Personal Data only to perform their tasks on Our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service providers to monitor and analyze the use of our Service.

• Google Analytics

  Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

  You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity.

  You may opt-out of certain Google Analytics features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy: https://policies.google.com/privacy

  For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

• Firebase

  Firebase is an analytics service provided by Google Inc.

  You may opt-out of certain Firebase features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy: https://policies.google.com/privacy

  We also encourage you to review the Google's policy for safeguarding your data: https://support.google.com/analytics/answer/6004245

  For more information on what type of information Firebase collects, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

• Singular

  Their Privacy Policy can be viewed at https://www.singular.net/privacy-policy/

• Adapty

  Their Privacy Policy can be viewed at https://adapty.io/policy/

Advertising

Our Service may include third-party advertising and links to other websites and apps. Third-party advertising partners may collect information about You when you interact with their content, advertising, and services. For more information about third-party advertising, including interest-based ads, please read our Interest-Based Ads notice. To adjust your advertising preferences please access My Data in the drawer menu of each app.

• Google AdSense & DoubleClick Cookie

  Google, as a third party vendor, uses cookies to serve ads on our Service. Google's use of the DoubleClick cookie enables it and its partners to serve ads to our users based on their visit to our Service or other websites on the Internet.

  You may opt out of the use of the DoubleClick Cookie for interest-based advertising by visiting the Google Ads Settings web page: http://www.google.com/ads/preferences/

• AdMob by Google

  AdMob by Google is provided by Google Inc.

  You can opt-out from the AdMob by Google service by following the instructions described by Google: https://support.google.com/ads/answer/2662922?hl=en

  For more information on how Google uses the collected information, please visit the "How Google uses data when you use our partners' sites or app" page: https://policies.google.com/technologies/partner-sites or visit the Privacy Policy of Google: https://policies.google.com/privacy

• AppLovin

  AppLovin is provided by the AppLovin Corporation.

  If you'd like to opt-out from AppLovin service, please visit the AppLovin Opt-out page: https://www.applovin.com/optout

  If you'd like to learn more about AppLovin, please visit the Privacy Policy page of AppLovin: https://www.applovin.com/privacy

• Facebook Audience Network

  Their Privacy Policy can be viewed at https://www.facebook.com/policy.php

• Mobvista/Mintegral International
  Their Privacy Policy can be viewed at https://www.mintegral.com/en/privacy 

• Unity Advertising
  Their Privacy Policy can be viewed at https://unity.com/legal/game-player-and-app-user-privacy-policy

Payments

We may provide paid products and/or services within the Service. In that case, we may use third-party services for payment processing (e.g. payment processors).

We will not store or collect Your payment card details. That information is provided directly to Our third-party payment processors whose use of Your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

• Apple Store In-App Payments

  Their Privacy Policy can be viewed at https://www.apple.com/legal/privacy/en-ww/

• Google Play In-App Payments

  Their Privacy Policy can be viewed at https://www.google.com/policies/privacy/

Behavioral Remarketing

The Company uses remarketing services to advertise on third party websites to You after You visited our Service. We and Our third-party vendors use cookies to inform, optimize and serve ads based on Your past visits to our Service.

• Google Ads (AdWords)

  Google Ads (AdWords) remarketing service is provided by Google Inc.

  You can opt-out of Google Analytics for Display Advertising and customise the Google Display Network ads by visiting the Google Ads Settings page: https://www.google.com/settings/ads

  Google also recommends installing the Google Analytics Opt-out Browser Add-on - https://tools.google.com/dlpage/gaoptout - for your web browser. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics.

  For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

• Facebook

  Facebook remarketing service is provided by Facebook Inc.

  You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/164968693837950

  To opt-out from Facebook's interest-based ads, follow these instructions from Facebook: https://www.facebook.com/help/568137493302217

  Facebook adheres to the Self-Regulatory Principles for Online Behavioural Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA https://www.aboutads.info/choices/, the Digital Advertising Alliance of Canada in Canada https://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe http://www.youronlinechoices.eu/, or opt-out using your mobile device settings.

  For more information on the privacy practices of Facebook, please visit Facebook's Data Policy: https://www.facebook.com/privacy/explanation

GDPR Privacy

Legal Basis for Processing Personal Data under GDPR

We may process Personal Data under the following conditions:

• Consent: You have given Your consent for processing Personal Data for one or more specific purposes.
• Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations thereof.
• Legal obligations: Processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
• Vital interests: Processing Personal Data is necessary in order to protect Your vital interests or of another natural person.
• Public interests: Processing Personal Data is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company.
• Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.

In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Your Rights under the GDPR

The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights.

You have the right under this Privacy Policy, and by law if You are within the EU, to:

• Request access to Your Personal Data. You have the right to obtain confirmation as to whether or not personal data concerning You is being processed by Us and, where that is the case, access to Your personal data and information on how they are processed
• Request correction/rectification of the Personal Data that We hold about You. You have the right to obtain from Us without undue delay the rectification of inaccurate personal data concerning You. The rectification must be communicated by the controller to each recipient to whom the data subject's data have been transmitted, unless this proves impossible or involves disproportionate (demonstrable) efforts.
• Object to processing of Your Personal Data. You have the right to object to the processing of Your personal data when processing is necessary for the performance of a task carried out in the public interest or for the purposes of the legitimate interests pursued by Us. You have the right to object at any time if Your personal data is being processed for direct marketing purposes.
• Request erasure of Your Personal Data ("right to be forgotten"). You have the right to obtain from Us the erasure of personal data concerning You without undue delay where one of the following grounds applies: (i) Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (ii) You withdraw consent on which the processing is based and there is no other legal ground for the processing; (iii) You object to the processing and there are no overriding legitimate grounds for the processing; (iv) Your personal data have been unlawfully processed; (v) Your personal data have to be erased for compliance with a legal obligation; (vi) Your personal data have been collected in relation to the offer of information society services.
• Request the transfer of Your Personal Data. You have the right to receive the personal data processed in a structured, commonly used, and machine-readable format, including the right to have this data transmitted directly to another controller if this is technically feasible.
• Request the restriction of processing of Your Personal Data. You have the right to obtain from Us a restriction on processing where one of the following applies: (i) You contest the accuracy of Your personal data for a period that allows the verification of the correctness of the data; (ii) the processing is unlawful and You oppose the erasure of Your personal data and request the restriction of their use instead; (iii) We no longer need Your personal data for the purposes of the processing, but they are required by you for the establishment, exercise, or defense of legal claims; (iv) You have objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
• Withdraw Your consent. You have the right to withdraw Your consent on using your Personal Data. If You withdraw Your consent, We may not be able to provide You with access to certain specific functionalities of the Service.

Exercising of Your GDPR Data Protection Rights

o exercise Your rights listed above You can send Us your request (accompanied by Your contact details) both electronically at the e-mail address contact at wave.studio, as well as by postal services with a registered letter and confirmation of receipt at Bucharest, district 1, 1-17 Pădurea Neagră Road, block A56, ground floor, apartment no. 02, Romania. Please note that we may ask You to verify Your identity before responding to such requests. If You make a request, We will try our best to respond to You as soon as possible.

If you consider that your rights provided by Regulation no. 679/2016 have been violated, you have the possibility to communicate this to us at the address: contact at wave.studio

Also, You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA which you can identify here: https://edpb.europa.eu/about-edpb/about-edpb/members_en#member-ro .

The contact details of Romanian Data Protection Supervisory Authority (The National Supervisory Authority for Personal Data Processing – “NSAPDP”) are the following:

Complaint Form: https://www.dataprotection.ro/?page=Plangeri_pagina_principala 

Contact link: https://www.dataprotection.ro/?page=contact&lang=ro 

Website: https://www.dataprotection.ro/ 

Address: B-dul G-ral. Gheorghe Magheru 28-30, District 1, postal code 010336, Bucharest, Romania

Phone: +40.318.059.211 or +40.318.059.212; Fax: +40.318.059.602

Facebook Fan Page

Data Controller for the Facebook Fan Page

The Company is the Data Controller of Your Personal Data collected while using the Service. As operator of the Facebook Fan Page https://www.facebook.com/wave.studio.apps, the Company and the operator of the social network Facebook are Joint Controllers.

The Company has entered into agreements with Facebook that define the terms for use of the Facebook Fan Page, among other things. These terms are mostly based on the Facebook Terms of Service: https://www.facebook.com/terms.php

Visit the Facebook Privacy Policy https://www.facebook.com/policy.php for more information about how Facebook manages Personal data or contact Facebook online, or by mail: Facebook, Inc. ATTN, Privacy Operations, 1601 Willow Road, Menlo Park, CA 94025, United States.

Facebook Insights

We use the Facebook Insights function in connection with the operation of the Facebook Fan Page and on the basis of the GDPR, in order to obtain anonymized statistical data about Our users.

For this purpose, Facebook places a Cookie on the device of the user visiting Our Facebook Fan Page. Each Cookie contains a unique identifier code and remains active for a period of two years, except when it is deleted before the end of this period.

Facebook receives, records and processes the information stored in the Cookie, especially when the user visits the Facebook services, services that are provided by other members of the Facebook Fan Page and services by other companies that use Facebook services.

For more information on the privacy practices of Facebook, please visit Facebook Privacy Policy here: https://www.facebook.com/full_data_use_policy

CCPA Privacy

Your Rights under the CCPA

Under this Privacy Policy, and by law if You are a resident of California, You have the following rights:

• The right to notice. You must be properly notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
• The right to access / the right to request. The CCPA permits You to request and obtain from the Company information regarding the disclosure of Your Personal Data that has been collected in the past 12 months by the Company or its subsidiaries to a third-party for the third party's direct marketing purposes.
• The right to say no to the sale of Personal Data. You also have the right to ask the Company not to sell Your Personal Data to third parties. You can submit such a request by visiting our "Do Not Sell My Personal Information" section or web page.
• The right to know about Your Personal Data. You have the right to request and obtain from the Company information regarding the disclosure of the following:
  • The categories of Personal Data collected
  • The sources from which the Personal Data was collected
  • The business or commercial purpose for collecting or selling the Personal Data
  • Categories of third parties with whom We share Personal Data
  • The specific pieces of Personal Data we collected about You
• The right to delete Personal Data. You also have the right to request the deletion of Your Personal Data that have been collected in the past 12 months. You can request data deletion on this page
• The right not to be discriminated against. You have the right not to be discriminated against for exercising any of Your Consumer's rights, including by:
  • Denying goods or services to You
  • Charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties
  • Providing a different level or quality of goods or services to You
  • Suggesting that You will receive a different price or rate for goods or services or a different level or quality of goods or services.

Exercising Your CCPA Data Protection Rights

In order to exercise any of Your rights under the CCPA, and if you are a California resident, You can email or call us or visit our "Do Not Sell My Personal Information" section or web page.

The Company will disclose and deliver the required information free of charge within 45 days of receiving Your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonable necessary and with prior notice.

Do Not Sell My Personal Information

We do not sell personal information. However, the Service Providers we partner with (for example, our advertising partners) may use technology on the Service that "sells" personal information as defined by the CCPA law.

If you wish to opt out of the use of your personal information for interest-based advertising purposes and these potential sales as defined under CCPA law, you may do so by following the instructions below.

Please note that any opt out is specific to the browser You use. You may need to opt out on every browser that you use.

Website

You can opt out of receiving ads that are personalized as served by our Service Providers by following our instructions presented on the Service:

• From Our "Cookie Consent" notice banner
• Or from Our "CCPA Opt-out" notice banner
• Or from Our "Do Not Sell My Personal Information" notice banner
• Or from Our "Do Not Sell My Personal Information" link

The opt out will place a cookie on Your computer that is unique to the browser You use to opt out. If you change browsers or delete the cookies saved by your browser, you will need to opt out again.

Mobile Devices

Your mobile device may give you the ability to opt out of the use of information about the apps you use in order to serve you ads that are targeted to your interests:

• "Opt out of Interest-Based Ads" or "Opt out of Ads Personalization" on Android devices
• "Limit Ad Tracking" on iOS devices

You can also stop the collection of location information from Your mobile device by changing the preferences on your mobile device.

"Do Not Track" Policy as Required by California Online Privacy Protection Act (CalOPPA)

Our Service does not respond to Do Not Track signals.

However, some third party websites do keep track of Your browsing activities. If You are visiting such websites, You can set Your preferences in Your web browser to inform websites that You do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of Your web browser.

Your California Privacy Rights (California's Shine the Light law)

Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with us can request information once a year about sharing their Personal Data with third parties for the third parties' direct marketing purposes.

If you'd like to request more information under the California Shine the Light law, and if you are a California resident, You can contact Us using the contact information provided below.

California Privacy Rights for Minor Users (California Business and Professions Code Section 22581)

California Business and Professions Code section 22581 allow California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted.

To request removal of such data, and if you are a California resident, You can contact Us using the contact information provided below, and include the email address associated with Your account.

Be aware that Your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

With respect to any information regarding the personal data we process or if you have any questions about this Privacy Policy you can contact us:

• by e-mail at: contact at wave.studio
• by postal service with registered letter and confirmation of receipt at Bucharest, district 1, 1-17 Pădurea Neagră Road, block A56, ground floor, apartment no. 02, Romania
• by contact form in the Application (“Contact us”)