Privacy Policy for the Super Smash Bros. Ultimate Tournament Portal

Version: 08.2019

Nintendo of Europe GmbH, Herriotstrasse 4, 60528 Frankfurt, Germany (“Nintendo”, “we”, “us” or “our”) respects the privacy rights of data subjects and recognises the importance of protecting their personal data.

This Privacy Policy (the "Privacy Policy") provides information about how Nintendo obtains and processes your personal data if you sign up and register for the Super Smash Bros. Ultimate Tournament Portal.

Nintendo is the controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – “GDPR”).

1 What Information We Obtain and Process

1.1 Access to the Super Smash Bros. Ultimate Tournament Portal

You can access the Super Smash Bros. Ultimate Tournament Portal via Nintendo’s website. If you would like to learn more about the personal data we process when you use our website, please see our Nintendo Website Privacy Policy.

1.2 Nintendo Account Information

To sign up for the Super Smash Bros. Ultimate Tournament Portal, you must have a registered Nintendo Account with our parent company Nintendo Co., Ltd. If you would like to learn more about the personal data Nintendo Co., Ltd processes in connection with the Nintendo Account, please see the Nintendo Account Privacy Policy.

1.3 Signing Up for the Super Smash Bros. Ultimate Tournament Portal

To sign up for the Super Smash Bros. Ultimate Tournament Portal, we collect the following types of personal data from you:

  • organiser information: name, address and e-mail address, date of birth
  • tournament information: tournament name, date and time of the tournament, country, city address and name of the venue where the tournament will take place, website URL of the tournament, tournament player cap, logo of the tournament;
  • additional information in case organiser requests on behalf of a company: company name, address and website.

2 How the Information Is Used – Purposes of Processing

The processing of your personal data when signing up for the Super Smash Bros. Ultimate Tournament Portal is necessary for the performance of the contract (Art. 6 para 1 (b) GDPR) for which you are making an offer to us when signing up for the Super Smash Bros. Ultimate Tournament Portal.

3 Who Has Access to the Personal Data

3.1 We share your personal data with our parent company Nintendo Co., Ltd. located in Japan as well as with our European affiliates, such as Nintendo France SARL, Nintendo Ibérica, S.A.U. and Nintendo Benelux B.V., and our European branches in Italy, Germany, Austria, Switzerland and the United Kingdom in whose countries you plan to host a tournament.

Where we share your personal data with Nintendo Co., Ltd., appropriate safeguards for an adequate level of data protection are provided for by standard data protection clauses that have been adopted by the European Commission and that have been entered into between Nintendo and Nintendo Co., Ltd

The legal basis for Nintendo sharing your personal data with its parent company Nintendo Co., Ltd. and its European affiliates and branches is Art. 6 para. 1 (f) GDPR. We and our parent company both have a legitimate interest in sharing such data to inform our parent company that an Event is to take place and that copyrights, trademarks or other IP rights owned by Nintendo Co., Ltd. might be affected. We have a legitimate interest to inform our European affiliates and branches that an Event is to take place in their country. You have the right to object, on grounds relating to your particular situation, at any time to such processing. To exercise this right you may at any time contact us as provided in Section 6 of this Privacy Policy.

3.2 In compliance with applicable data protection requirements, we may also use third-party data processors and may share your personal data about with such third party data processors acting on

our behalf (such as host and IT service providers). Where such third party processors are located outside the European Union respectively the European Economic Area, such third party processors are either located in a third country where the European Commission has decided that this country ensures an adequate level or appropriate safeguards for an adequate level of data protection are provided for in compliance with GDPR, such as standard data protection clauses that have been adopted by the European Commission and that have been entered into between Nintendo and the third party data processor.

4 Storage Time

We will only store your personal data as long as necessary to fulfil the purposes for which the data is collected and processed or – where the applicable law provides for longer storage and retention period – for the storage and retention period required by law. After that the personal data will be deleted.

In particular, if you exercise your right to object to the processing of your personal data, we will delete the personal data that we processed for the purpose to which you objected without undue delay, unless another legal basis for processing and retaining this data exists or unless applicable law requires us to retain the data.

5 Rights under GDPR

In particular, but without limitation, you may have the following rights under GDPR:

  • Right of access: You have the right to obtain confirmation from us as to whether or not we process personal data about you and you also have the right to at any time obtain access to your personal data stored by us. To exercise this right you may at any time contact us as provided in Section 6 of this Privacy Policy.
  • Right to rectification of personal data: If we process personal data about you, we endeavour to ensure by implementing suitable measures that the personal data is accurate and up-to-date for the purposes for which the personal data was collected. If the personal data about you is inaccurate or incomplete, you have the right to obtain the rectification of such data. To exercise your right you may at any time contact us as provided in Section 6 of this Privacy Policy.
  • Right to erasure of personal data or right to restriction of processing: You may have the right to obtain the erasure of your personal data or the restriction of processing of your personal data. To exercise this right you may at any time contact us as provided in Section 6 of this Privacy Policy.
  • Right to data portability: You may have the right to receive the personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format or to transmit those data to another controller. To exercise this right you may at any time contact us as provided in Section 6 of this Privacy Policy.
  • Right to object: You may have the right to object to the processing of your personal data as further specified in this Privacy Policy.
  • Right to lodge a complaint with supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority located in the European Union. You may contact the Hesse Data Protection Supervisor.

6 Contact

6.1 If you have any questions about this Privacy Policy or about Nintendo’s data processing activities or if you want to exercise any of your rights under GDPR, you may contact us at any time: By mail to Nintendo of Europe GmbH, Attn.: Legal Department, Herriotstrasse 4, 60528 Frankfurt, Germany or via email privacyinquiry.noe@nintendo.de.

6.2 You can also contact our data protection officer at any time: By mail to Nintendo of Europe GmbH, Attn.: Legal Department, Herriotstrasse 4, 60528 Frankfurt, Germany or via email dataprotectionofficer@nintendo.de.