Privacy Policy
Carpool Studio – Entry into force of the latest update: March 9, 2026
Carpool Studio (hereinafter “We” or “our” or “Carpool”) pays the utmost attention to the protection of your personal data (hereinafter “the Data” or “your Data”) and to the respect of your privacy. You will find in this Privacy Policy (hereinafter the “Policy”) transparent information relating to the protection of your Data collected and processed by Carpool Studio through its Websites.
SUMMARY
1. How do we collect your Data?
2. For what purposes do we collect your Data and how long do we keep it?
3. With whom does Carpool share my Data?
4. What are my rights and how do I exercise them?
5. Transfer of your Data outside the European Economic Area
6. How does Carpool protect your Data?
7. Minors
8. Hypertext links to other websites
9. Policy Change and Update
DEFINITIONS
Data Controller or Carpool: refers to the company CARPOOL STUDIO, a société par actions simplifiée [simplified joint-stock company] registered under in the Paris Trade and Companies Register, whose registered office is located at 35, rue des Trois Bornes 75011 Paris (France), and which, alone or jointly with others, determines the purposes and means of processing the Data.
Group: refers to PulluP Entertainment S.A.S., the parent company of Carpool, located at Parc du Pont de Flandre, Building 28 “Le Beauvaisis,” 11 rue de Cambrai, 75019 PARIS, France, as well as its subsidiaries.
Personal Data or Data: means information, in any form whatsoever, directly or indirectly relating to an identified or identifiable natural person.
Player: means any Customer who accesses the games developed by Carpool, and/or any User participating in test programmes (Beta and Playtests) organized by Carpool.
Partners: refers to Carpool’s business and commercial partners, including its publishers.
Processor: means any company that processes Data on behalf of the Data Controller.
Website(s): refers to the websites published and operated by Carpool Studio, accessible via the address https://www.carpoolstudio.com.
Visitor: refers to any adult natural person who accesses the Websites.
GENERAL INFORMATION
We collect some of your Data via our video games and/or Website, in particular to provide you with services accessible on our Websites:
- Participate in the test phases of our games;
- Apply for one of the positions offered on our Websites.
We mainly collect identifying information and information about your use of our services. The categories of information we collect in connection with your use of our games, products and services, the corresponding purposes and legal bases are described in the table provided for in Section 2 of this Policy.
1. How do we collect your Data?
We collect certain Data through our video games and/or Websites in order to provide you with the best possible experience.
The categories of Data we collect in connection with your use of our services are described in the table provided for in Section 2 below.
1.1 Direct collection
Carpool collects your Data directly in the following cases:
- When browsing our Websites and using our services, when:
- You consent to the use of cookies and other tracers (as described in our cookies policy accessible on our Website).
- When you use our video games, when:
- You access certain games offering online features (multiplayer games, ranking systems, cross-platform backups);
- You consent to the analysis of your game data as part of your use of video games on which telemetry is activated.
- When you apply for one of the positions offered on our Websites.
The mandatory or optional nature of the Data collected directly by Carpool is indicated with an asterisk when collected. Please be aware that if you refuse to enter certain Data, the collection of which is mandatory, you may not be able to benefit from all or part of the services offered.
1.2 Indirect collection
Carpool collects your Data indirectly in the following cases:
- Your access to, or use of, some of our games and derivatives available on certain social networks, platforms and consoles, or other third-party websites (hereinafter collectively the “Third-Party Websites”) ;
- You sign up for the test phases (Betas and Playtests) of the games we offer, through our partner’s website;
- Through our recruitment service providers
Please note that this Policy does not apply to the processing carried out independently by Third-Party Websites and we do not control their respective privacy practices. We recommend that you carefully read the privacy policies available on each of these Third-Party Websites, in particular regarding the sharing of your Data.
Carpool will process the Data received indirectly under the terms and conditions provided for in this Policy.
2. For what purposes do we collect your Data and how long do we keep it?
To know more about how our partner processes your Data, click here: https://firstlook.gg/legal/privacy/
To learn more about authorised third parties, you can refer to the CNIL documentation.
*For all processing based on your consent, you are informed that you can withdraw it at any time, at no cost. For example, you may withdraw your consent for the sending of commercial / marketing communications by Carpool by contacting us following the procedure described in section 4 below.
The Data collected are kept only for the time necessary to achieve the objective pursued during their collection (so-called “active” use) and in accordance with the applicable laws.
Carpool may retain your Data for longer periods, in intermediate archiving (separate from the active base and with restricted access), when justified: for the exercise of our legal obligations (limitation period) and/or the protection of our rights (foreclosure period), particularly in commercial, civil and tax matter, i.e. a maximum of 10 years; but also in the event of litigation during the entire duration of the proceedings and up to 10 years from the execution of the final decision.
Once these deadlines have expired, we will delete or anonymise your Data.
3. With whom does Carpool share my Data?
Communication of your Data to our service providers and suppliers
As a video game developer, certain Data we collect may be communicated and/or shared with: our publishers, our law firms and technical and IT service providers or our suppliers. Where appropriate, communication and/or sharing is carried out for technical and operational purposes, to enable us to offer you high-performance games, provide you the requested products and/or services.
In the context of recruitment, certain Data that we collect may be communicated and/or shared with our recruitment service providers.
In all cases, we implement the necessary contractual and organisational measures so that the processing of your Data by these third-party providers is strictly limited to the purposes defined in this Policy and to guarantee the confidentiality and security of your Data.
Communication of your Data by our partners
Some partners may need to request your consent for the collection of Data in our video games, on their own behalf. This Policy does not apply to such processing implemented by these partners, acting as independent controllers. We recommend that you carefully read the privacy policy of each of these partners.
Communication of your data to our parent company
We may share your Data with our parent company for administrative, operational, or compliance purposes, or where such communication is necessary under a contractual obligation.
This may include activities such as compliance and risk management, IT system administration and support, the provision of legal or regulatory assistance, or other processing operations carried out on our behalf within the Group. This processing take place under agreements that set out each party’s responsibilities and ensure that your Data is processed and protected appropriately.
All data sharing within the Group is carried out in accordance with GDPR and applicable laws. Our parent company processes your Data only for the purposes described in this Privacy Policy and applies the same level of technical and organizational security measures as we do to protect your information.
4. What are my rights and how do I exercise them?
You have all of the following rights to the Data about you that we collect and process:
- Right to access your Data: you have the right to obtain (i) confirmation that your Data are or are not processed; when they have been processed, (ii) access to these Data and (iii) a copy of the Data processed by Carpool, in an understandable format;
- Right to request the modification, updating or rectification of your Data when you consider it inaccurate, incorrect or incomplete;
- Right to request the deletion of your Data for the reasons provided for by the applicable regulations;
- Right to limit the processing of Data concerning you for the reasons provided for by the applicable regulations;
- Right to object to the processing of your Data if we use your Data:
- For our legitimate interests;
- For statistical purposes; or
- For commercial prospecting (marketing) purposes.
- Right to withdraw your consent at any time when the processing is based on your consent (it being recalled that this withdrawal will not affect the lawfulness of the processing, based on consent, carried out before its withdrawal);
- Where appropriate, the right not to be the subject of a decision based exclusively on automated processing, including profiling, producing legal effects concerning the data subject or affecting the latter significantly in a similar way. Right to the portability of your Data: this right applies to the Data that you have transmitted to us when the processing is automated and based on your consent or carried out on the basis of the performance of a contract. You have the right to ask us, if technically feasible, to transfer your Data to a third party or to provide them directly to you in an accessible and machine-readable manner;
- Right to transmit instructions regarding the storage and communication of your Data after your death;
- Right to lodge a complaint with the CNIL if you consider that we do not comply with our obligations with regard to your Data. You can send a complaint or request electronically at any time by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet.
To exercise your rights, you can send your request by specifying the right(s) concerned and the reasons for your request, if applicable:
- by email at the following email address: personaldata@carpoolstudio.com ; or
- by post: Carpool Studio, Parc du Pont de Flandre, Bâtiment 28 “Le Beauvaisis”, 11 rue de Cambrai, 75019 PARIS.
We will acknowledge receipt of your request as soon as possible and, if it is admissible, we will provide you with the requested information or implement the rights invoked within one month.
If, given the complexity of the request or the number of requests received, the aforementioned period of one month cannot be respected, we will inform you before the expiry of said period of the postponement of our decision, but not beyond a further two-month period.
In the event of manifestly abusive requests (in particular due to their number, repetitive or systematic nature), Carpool will be entitled not to respond to them. If applicable, we will inform you of the reasons for our refusal.
Requests for the exercise of rights are processed by the authorised teams of Carpool as data controller, in connection when applicable with those of PulluP Entertainment, our parent company, as data processor.
5. Transfer of your Data outside the EEA
Carpool may transfer some of your Data outside the European Economic Area (EEA), for technical and operational purposes, to enable us to offer you high-performing games and to provide you with the requested services. These transfers are carried out in accordance with applicable data protection regulations and transfer management solutions recognised by the GDPR.
In particular, when the transfer of your Data cannot be carried out on the basis of an adequacy decision of the European Commission recognising an adequate level of protection, we put in place other appropriate transfer mechanisms and safeguards to ensure the protection of your Data, in particular data transfer agreements including standard contractual clauses approved by the European Commission in their version in force at the time of the transfer concerned, or other device recognised by this regulation, including the new EU-US Data Protection Framework.
For more information on the safeguards related to the transfer of Data, you are invited to contact us at the following address: personaldata@carpoolstudio.com
6. How does Carpool protect your Data?
We implement all appropriate technical and organisational measures to ensure the security, confidentiality and integrity of your Data and to protect your Data against accidental or unlawful destruction, accidental loss, damage, modification, disclosure or unauthorised access, as well as against any other form of unlawful processing.
As an example, and without this list being exhaustive, we maintain:
- hashing procedures for some of your Data;
- limited access (authorisation policy) to only employees and/or processors of Carpool who need to know it due to their duties, when required to provide our services to you and subject to strict confidentiality obligations; etc.
We regularly set up security checks and may in this regard temporarily suspend our services in case of suspicion or detection of a security breach. If you have any concerns about the security of your Data, you can contact us at the following address: personaldata@carpoolstudio.com
7. Minors
Minors under the age of 18 cannot directly subscribe, purchase and/or use the services offered by Carpool.
Carpool does not intentionally collect Data from minors under the age of 18. If we realise that we have collected Data concerning a minor within the meaning of the applicable data protection regulations, we will immediately delete any Data concerning this minor.
8. Hypertext links to other websites
Our Websites may contain hyperlinks to Third-Party Websites. Since we have no control over these Third-Party Websites, we may not be held liable for the processing and confidentiality of Data transmitted on websites that we do not publish.
The Data and information communicated through these hyperlinks are the responsibility of their respective publishers. We therefore recommend exercising caution when browsing Internet pages accessible via hyperlinks.
9. Policy Change and Update
We periodically review this Policy to ensure compliance and keep it up-to-date with the applicable data protection regulations.
Before browsing, we invite you to refer to the latest version of the Policy. You can find out if there have been any changes since your last visit by checking the date at the top of the page.