Privacy Policy for the website

Last updated: 31.01.2023

This privacy information describes the principles and practices of MIGHTY KOI S.A. regarding the collection and use of personal data and specifies the user's rights to privacy. This Privacy Policy has been prepared in accordance with the law, including the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (GDPR).


Protecting the privacy of information is an ongoing obligation of MIGHTY KOI, and therefore, we systematically update this Privacy Policy. In the event of any changes, we provide the updated Privacy Policy online with the date of the last update.

In what situations do we process your personal data?


We may process your personal data in the following situations:


  • when you are our current or potential customer, supplier, or seller, or an employee of any of them
  • when you are a person submitting a job application to MIGHTY KOI via our website or social media
  • when you are a person visiting our websites.
  • when you are a person who has linked your profile or interacted with MIGHTY KOI profiles on social media
  • when you are a person participating in events or meetings organized by MIGHTY KOI
  • when you use games produced or published by MIGHTY KOI.
  • when you have given consent to receive our newsletter or other promotional or commercial materials and information

Who is the administrator of your personal data?


The administrator of your personal data is MIGHTY KOI, namely:


Mighty Koi S.A.

ul. Bohdana Dobrzańskiego 3

20-262 Lublin

KRS 0001024766

Whom can you contact regarding the processing of personal data?

For any questions regarding the processing of personal data, please contact us via email: contact@mighty-koi.com or send a letter to the address: Mighty Koi S.A., ul. Bohdana Dobrzańskiego 3, 20-262 Lublin, Poland.

What is the purpose of processing your personal data, and what are the legal grounds for processing?


The scope and purpose of processing your personal data by MIGHTY KOI depends on the relationship in which you are with us.


  1. If you are a current or potential customer, supplier, or seller of MIGHTY KOI or an employee of any of them, MIGHTY KOI may process your personal data for the following purposes:


    • protection and assertion of claims (Art. 6(1)(f) - GDPR)
    • execution of a contract or taking action at the request of the data subject before entering into a contract (Art. 6(1)(b) - GDPR)
    • compliance by the Controller with legal obligations (Art. 6(1)(c) - GDPR)

  2. If you are a person submitting a job application to MIGHTY KOI S.A. in one of the recruitment processes published on our website or through social media, we may process personal data for the following purposes:


    • protection and assertion of claims (Art. 6(1)(f) - GDPR)
    • execution of a contract or taking action at the request of the data subject before entering into a contract (Art. 6(1)(b) - GDPR)

    Other data provided by you in the recruitment process (Art. 6(1)(a) - GDPR) will be used based on your voluntary and informed consent to their processing.


  3. If you are a person visiting our websites, we may process your personal data contained in Essential Cookies files (more about Cookies) based on our legitimate interest (Art. 6(1)(f) - GDPR). Our legitimate interest is to provide our internet services, ensure their security, and collect basic statistics. Any collected data may include your source IP address, the country of origin of the IP address, and the HTTP referrer (i.e., the page from which you came to us).
    Your personal data may also be processed by us to enable you to visit and use our websites (Art. 6(1)(b) - GDPR).


    We may also process your personal data contained in non-Essential Cookies files based on your voluntary and informed consent (Art. 6(1)(a) - GDPR), which you can withdraw at any time.


  4. If you are a person who has linked your profile or interacted with MIGHTY KOI profiles on social media, we may process some or all of the following personal data for the following purposes:


    • user data (name, surname, profile name on the portal, email address, others) provided by you through privacy settings on a given portal or otherwise shared in connection with your activity on the MIGHTY KOI profile - to inform about MIGHTY KOI's activity and promote the services provided by it, based on the legitimate interest of the Administrator (Art. 6(1)(f) - GDPR)
    • contact data (name, surname, email, phone, address) for the purpose of asserting claims or defense against them to the extent that they may arise as a result of or in connection with your activity on the MIGHTY KOI profile on social media, based on the legitimate interest of the Administrator (Art. 6(1)(f) - GDPR)

  5. If you are a person who has linked your profile or interacted with MIGHTY KOI profiles on social media, we may process some or all of the following personal data for the following purposes:


    • contact data (name, surname, email, phone, workplace) to perform a contract concluded as a result of accepting the terms of participation in the event or meeting (i.e., based on Art. 6(1)(b) - GDPR)
    • contact data (name, surname, email, phone) for the purpose of asserting claims or defense against them to the extent that they may arise as a result of or in connection with the performance of the contract, based on the legitimate interest of the Administrator (Art. 6(1)(f) - GDPR)
    • contact data (name, surname, email, phone, workplace) for the purpose of conducting statistics and archiving, based on the legitimate interest of the Administrator (Art. 6(1)(f) - GDPR)

  6. If you use games produced or published by MIGHTY KOI, we may process your personal data such as name, email address, username, technical information about any devices you use to access our games (including IP address), operating system, browser type, or other software, as well as any other information (including technical information) you provide while using our games. We may process this data based on the legitimate interest of the Administrator (Art. 6(1)(f) - GDPR) for communication with you as a user of our games and for improving or modifying our games.


    Depending on the platform on which you pre-order, purchase, or use our games, platform owners may collect and process various personal data. For more information on the processing of your personal data in this regard, refer to the appropriate platforms.


    If you have given consent to receive our newsletter or other materials and information, we may process your name, surname, email address, and other contact details you provided, based on your voluntary and informed consent (Art. 6(1)(a) - GDPR), for sending our newsletter or other materials and information.

Will we profile and automate your personal data?


MIGHTY KOI does not intend to create profiles or make automated decisions based on your personal data.

Is providing us with your personal data necessary?

If you are a current or potential customer, supplier, or seller of MIGHTY KOI, or an employee of any of them, providing personal data is voluntary but necessary to achieve the goal of establishing or continuing cooperation.

If you are a person submitting an application to MIGHTY KOI in one of the recruitment processes published on our website or through social media, providing personal data is voluntary but necessary to conduct the recruitment process in which you express a desire to participate. Personal data processed based on your consent does not have to be provided by you, and we cannot accept such a decision as the basis for the outcome of the recruitment process.

If you are a person visiting our websites, your personal data is processed based on our legitimate interest and is necessary for us to provide services, enabling the operation of our websites.

In the case of other personal data processed based on your consent, these data are provided voluntarily.

If you are a person who has linked your profile or interacted with MIGHTY KOI profiles on social media, providing personal data is voluntary but necessary to provide you with access to content published on MIGHTY KOI profiles on social media or the possibility of participating in events organized through MIGHTY KOI profiles on social media.

If you are a person participating in events or meetings organized by MIGHTY KOI, providing personal data is voluntary but necessary to ensure your participation in the initiative in which you have expressed a desire to participate.

If you use games produced or published by MIGHTY KOI, your personal data processed based on our legitimate interest and in connection with the provision of services is necessary for us to enable the use of games, modify them, and improve our services.

If you have given consent to receive our newsletter or other materials and information, providing personal data is voluntary but necessary for sending you the newsletter or other materials and information.

What are your rights as a data subject?


In terms of privacy protection, you have the right to:


  • access your personal data or correct it
  • withdraw your consent at any time by sending an email to contact@mighty-koi.com. The withdrawal of consent is binding for the Administrator regarding data processing that took place based on that consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal
  • restrict the processing of your personal data
  • delete your personal data (right to be forgotten)
  • transfer your personal data
  • object to the processing of your personal data when it takes place based on Art. 6(1)(f) - GDPR (i.e., based on the legitimate interest of the administrator)

Furthermore, you have the right to contact the relevant supervisory authority of the European Union or member states at any time and lodge a complaint in the event of a potential violation of data protection laws.

How long does MIGHTY KOI store your data?

MIGHTY KOI stores your personal data processed based on our legitimate interest. We keep your data for no longer than 12 months or until you object or until the expiration of our claims.

MIGHTY KOI stores your personal data processed in connection with the performance of a contract or the submission of a request before its conclusion for the period necessary to perform the contract or satisfy the submitted request.

We store your personal data processed in connection with a legal obligation imposed on MIGHTY KOI by virtue of legal provisions for the period resulting from these legal provisions.

MIGHTY KOI stores your personal data processed based on your consent until you withdraw your consent.

Functions and duties of our staff

Only authorized persons from our staff who need access to personal data due to the scope of their official duties have it. These individuals have been informed of the obligations related to maintaining the confidentiality of your personal data. MIGHTY KOI uses appropriate technical, legal, and organizational measures to protect your personal data from unauthorized use or disclosure, as well as from loss or theft, including data encryption when required. Authorized staff members who have access to your personal data may use it only in accordance with the principles set out in this Privacy Policy, internal regulations of MIGHTY KOI, and applicable legal provisions.

Processing personal data of minors

MIGHTY KOI takes special precautions to comply with the law regarding the privacy of minors and does not intend to collect personal data from individuals under the age of 16 without the consent of their parents or legal guardians.

Whom may we disclose your data to?

MIGHTY KOI may disclose your personal data to its service providers or suppliers, such as IT service providers, hosting service providers, or marketing solution providers. However, your personal data will always be treated as confidential and will not be disclosed to third parties who do not act on our behalf.