Privacy Policy

Privacy Policy

Who are we and what do we offer?

We are [Infinity Skies] B.V., also trading under the name Infinity Skies. We provide a game of the sandbox genre, where players will compete to build the most prestigious castle in the community while collecting rare NFT decorations, skins and building components (our Services). In order to provide our Services, we will offer a platform for issuers, investors, funds and institutions (the Users of our Platform). On our Platform, Users will be able to pay through Tokens. As for now, Tokens can be bought to use via the Platform as soon as it is ready. More information about our Services is available on our website [@] (the Website).

Privacy Policy

This is our Privacy Policy. In this document we explain what kind of Personal Data we collect. We also explain what role we have in the processing of Personal Data, how long we retain them and what rights you have as a data subject.

Personal Data and the Privacy Legislation

We are all about respecting the privacy of our Users and protecting their Personal Data. We process Personal Data. Personal Data means all information by which a person can be directly or indirectly identified – inline with the definitions of the General Data Protection Regulation (GDPR) and other relevant legislation on the protection of Personal Data (collectively referred to as the Privacy Legislation).

Our role as Controller

We collect and process the Personal Data in the context of our Services and Platform. We determine the purposes and means of these processing activities. This means we act as Controller within the meaning of the Privacy Regulation.

What Personal Data do we collect as Controller?

Personal Data we process when a User is buying Tokens:

5.1 (Personal) Data 5.2 Purpose(s) 5.3 Legal basis
  • Contact information:
  • 5.5 (Company) name, (e-mail) address and other contact information of the User and/or its contact person (i.e. name, phone number and email address).
  • We use this information to:
  • contact (the contact person of) our User regarding the Tokens of the User.
  • We may process these Personal Data of our Users, because we need these Personal Data to perform our contract with the Users, i.e. to enter into a contract with the User and provide the User with the Token(s).
  • Contact information:
  • (Company) name, (e-mail) address and other contact information of the User and/or its contact person (i.e. name, phone number and email address).
  • We use these data to:
  • handle, check and administer payments from the User.
  • maintain our list of accounts receivable and outstanding invoices.
  • include in our administration on behalf of the tax authorities.
  • We may process these Personal Data, because we need these Personal Data to perform our contract with our Users.
  • We are also obligated to share (some of) these data with the national tax authorities.

When a User wants to buy Tokens, we perform a Know Your Customer (KYC) research beforehand in order to safeguard the Platform against use for illegal or unethical purposes.

Personal Data we process in our KYC research:
(Personal) Data: Purpose(s): Legal basis:
First- and last name, date of birth, address, relation of representative to investor, shielded copy of ID (without social security number and photo).
  • We use this information to:
  • perform our KYC research.
  • safeguard our Services and the Platform against illegal and unethical financial transactions.
5.19 We may process these Personal Data, because we have a legitimate interest to protect our Services and the Platform against unlawful and unethical financial transactions. This interest overrules your interest, because we process as little data as possible for our KYC research and we safeguard the Services and Platform for inter alia you.
Personal Data we process when you contact us via email or our contact form:
(Personal) Data: Purpose(s): Legal basis:
Your name, e-mail address and other (Personal) Data you share with us in your message. We use this information to contact you about your message and/or to provide you information and/or support. We may process these Personal Data, because we have a legitimate interest to process these data. We need these data to contact you about your message and/or to provide you support.
Personal Data we process through our social media pages:
(Personal) Data: Purpose(s): Legal basis:
Information you make public, when you leave a comment, send a message to us, or otherwise post something on our social media pages.
  • We use this information to:
  • contact you via our social media pages;
  • process your feedback left on our social media pages.
Personal Data we process through the use of our Platform and Website:
(Personal) data Purpose(s) Legal basis
  • Technical information:
  • IP-address, functional cookies and technical information (i.e. type of browser and operating system).
    We use this information to:
  • analyse (the use of) our Services;
  • solve problems;
  • improve our Services;
  • adjust the Services to the device used;
  • flag, report and prevent misuse, fraud and threats of/regarding to our Services.
We have a legitimate interest to use technical information, functional cookies and your IP-address, namely to analyse and improve our Services.
Personal Data we process when you subscribe to our newsletter:
(Personal) data Purpose(s) Legal basis
  • Contact information:
  • Name and email address.
  • We use this information:
  • to send you our newsletter;
  • keep you updated on any developments and offers regarding our Services.
  • We may only send newsletters, if you gave us permission to do so via an opt-in.
  • It is always possible to revoke your permission by unsubscribing from our newsletter via the link at the bottom of each newsletter.


We use cookies on the Website. A cookie is a simple small text file that can be stored on your computer, when you visit the Website. This text file identifies your browser and/or computer. When you revisit our Website, the cookie ensures, for instance, that our Website recognizes your browser or computer.

If you do not want cookies to be stored on your device, you can change the cookie settings in your web browser. If you do so, please note that some features of the Website may not function properly without cookies.

We use the following types of cookies:

Functional cookies: Functional cookies are essential to the operation of our Website. They allow you to navigate through our Website and to use the functions incorporated in it.

Analytical or statistical cookies: Analytical cookies are used to check the quality and effectiveness of the Website. For instance, we can see how many users visit the Website and which pages are visited. We use this information to improve our Website and Services.

Tracking cookies: Tracking cookies monitor the clicking behaviour and surfing habits of our visitors. By means of these cookies we can see how you navigate through to our Website. We might use these cookies to show you advertisements based in your interests.

You can read more about our use of cookies in our cookiestatement: [link]

How long do we keep the Personal Data?

It is our policy to store and process only those Personal Data that are essential to provide you with the best possible service.

We will not process or store any Personal Data that we do not need. We store Personal Data for as long as we need it for the above purposes, unless we are legally obliged to retain the Personal Data for a longer period. In this respect, we apply the following retention periods:

  • Personal Data regarding the KYC research | This data is stored for five (5) years from the time of termination of the business relationship or up to five (5) years after completion of the relevant transaction.
  • Personal data in our records for the tax authorities | This data is stored for seven (7) years, unless we are legally obliged to retain the data for a longer period.
  • Other information | We store other Personal Data only for as long as it is necessary for the purposes. This is deleted as soon as it is no longer necessary for the purposes for which we processed it.

We may also process all aforementioned Personal Data when we have a good faith belief it is necessary to detect, prevent and address fraud and other illegal activity. Personal Data that we process to prevent fraud (or users who have committed fraud), we store for a maximum of five (5) years.

Personal Data we process may be accessed, processed and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm.

Do we share your Personal Data with others?

We may use Processors to assist us in our Services provided as Controller – in such case the Processor processes the Personal Data ‘on our behalf’. We enter into a Data Processing Agreement with all our Processors. Our use of (Sub-)Processors is in accordance with the Privacy Regulation. The Processors we use are:

  • [Google] for data storage (servers located in the EU);
  • [@] for the signing of contracts and documents (located in the EU).

In addition, we may share some of the Personal Data processed as Controller with other controllers. For example, we share:

  • Our financial administration with the tax authorities, because we are legally obliged to do so;
  • Payment details with the bank through which the payment is issued, because this is necessary to execute the transaction;
  • The information regarding the KYC research with our KYC partners, because these partners support us in performing the KYC research.

Apart from the above, we will not share your Personal Data with third parties, unless we are legally obliged to do so.

Export of Personal Data outside the European Union

We may transmit Personal Data to parties outside the European Union, if one of our (Sub-)Processors is established outside the European Union. The Personal Data will only be transferred to countries and/or parties that provide an adequate level of protection

in accordance with the European standards. The transmission of data outside the European Union will always happen in conformity with the Privacy Legislation (chapter 5 of the GDPR).

Data security

We protect all Personal Data we process from unauthorized and unlawful access, change, disclosure, use and destruction. For instance, we take the following technical and organizational measures to protect the Personal Data:

  • [e.g. we encrypt many of our services using SSL;]
  • [e.g. we review our information collection, storage and processing practices, from time to time to guard our systems against unauthorized access;]
  • [e.g. we restrict access to Personal Data to our employees and all other parties we work with, who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations;]
  • [e.g. we limit access to the Personal Data for authorized employees on a need-to-know basis;]
  • [e.g. password protection of computers, laptops and other devices;]
  • [e.g. locking of premises and areas where (devices containing) Personal Data are located;]
  • [e.g. annual internal security audits.]
Links to other websites

You can find (hyper) links on our Platform or Website which link to the websites of partners, providers, advertisers, sponsors, licensors or any other third parties. We have no control of the content or the links which appear on said websites and we are not responsible for the practices of websites linked to. Furthermore, these websites, including their content and links, may constantly change. These websites may have their own privacy policies, user conditions and customer policies. Browsing and interaction on any other website, including websites linked to, are subject to the terms and conditions of such website.

Changes of the Privacy Policy

The Privacy Policy may be changed from time to time. Please check our Privacy Policy frequently and take note of any changes. The new Privacy Policy will be effective immediately upon posting on our Website. If we change our Privacy Policy significantly, then we will state so on our Website together with the revised Privacy Policy.

Your rights as a data subject and our contact data

As laid down in the Privacy Legislation, you have – as a data subject - the right to:

  • Ask us to rectify or update your Personal Data;
  • Ask us to remove your Personal Data from its systems;
  • Ask us for a copy of the Personal Data processed of you. Such copy may also be transferred to another data controller at your request;
  • Withdraw your consent to process your Personal Data. This only affects the processing activities that are based on your consent and does not affect the validity of such processing activities before you have withdrawn your consent;
  • Object to the processing of your Personal Data;
  • File a complaint with the Dutch Data Protection Authority, if you believe that your Personal Data is processed unlawfully.

If you have questions or concerns about this Privacy Policy or your privacy, you can contact us at [email protected]

  • Infinity Skies
  • [address]
  • T: @
  • E: @