Privacy Policy
according to the requirements of the DS-GVO
I. Responsible person / Data protection officer
The responsible person within the meaning of the General Data Protection Regulation (DS-GVO) and other national data protection laws of the member states as well as other data protection regulations is:
Mr.
David Kienel
Schallstr. 26
50931 Cologne, Germany
E-Mail: contact@getyourgames.com
Internet: www.getyourgames.com
II. General Information on Data Processing / Legal Basis
With this data protection declaration, we would like to inform you about the type, scope and purpose of the data we process. At the same time, this data protection declaration contains information about the rights to which you are entitled as a data subject.
We collect and use your personal data only to the extent necessary to provide a functional website and our content and services.
You can use our website without providing any personal information. If you wish to use special functions of our website (such as our contact form), the processing of personal data will be necessary.
Insofar as the collection and use of your personal data is necessary, this processing is always based on a legal basis or we obtain your consent.
Your personal data will be deleted as soon as the purpose of storage ceases to apply.
In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we are subject, or if you have given us the corresponding consent (e.g. to store your application in our database).
The data will also be deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
Insofar as we obtain consent from you as the data subject for processing operations involving personal data, Article 6 (1) sentence 1 lit. a DS-GVO serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which you as the data subject are a party, Art. 6 (1) p. 1 lit. b DS-GVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 (1) p. 1 lit. c DS-GVO serves as the legal basis.
In the event that vital interests of you as the data subject or another natural person make processing of personal data necessary, Art. 6 (1) p. 1 lit. d DS-GVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) p. 1 lit. f DS-GVO serves as the legal basis for the processing.
III. Provision oft he website and creation of log files
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
This may include (1) information about the browser type and version used, (2) the operating system used, (3) the Internet service provider, (4) the IP address, (5) the date and time of access, (6) websites from which your system accesses our website, (7) websites that are accessed by your system via our website.
The data is stored in the log files of our system. This data is not stored together with other personal data. Conclusions about the data subject can therefore not be drawn.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of this data for marketing purposes does not take place.
These purposes are our legitimate interest in data processing according to Art. 6 para. 1 p. 1 lit. f DS-GVO, which is also the legal basis for the temporary storage of data and log files.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored beyond this, the IP address is deleted or alienated so that it is no longer possible to assign the calling client.
Since the collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website, there is no possibility of objection on your part.
IV. Cookies use
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Log-in information is stored and transmitted in the cookies in order to recognize users of our website. Likewise, information about items placed in the shopping cart is stored and transmitted in the cookies. This allows the online store to remember which items have already been placed in the shopping cart.
In addition, we use cookies on our website that enable an analysis of your surfing behavior. In this way, for example, entered search terms, the frequency of page views and the use of website functions are transmitted.
The data collected in this way is pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data.
The purpose of using technically necessary cookies is to simplify the use of our website for you. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The user data collected through technically necessary cookies are not used to create user profiles.
We use the analysis cookies to improve the quality of our website and its content. We learn how the website is used and can thus continuously optimize our offer.
In these purposes also lies our legitimate interest in the processing of personal data according to Art. 6 para. 1 p. 1 lit. f DS-GVO, which is also the legal basis for the processing of personal data using cookies.
Cookies are stored on your computer and transmitted from it to our site. Therefore, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
Information on plug-ins used by third-party providers that set so-called third-party cookies can be found further down in this data protection declaration under point VIII. In this context, there is also an indication of how the setting or storage of cookies can be prevented or restricted.
V. Registration
On our website, we offer you the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data that is collected during the registration process results from the respective input mask that is used for the collection.
During the registration process, your consent to the processing of this data is obtained. Your registration is required for the fulfillment of a contract with you or for the implementation of pre-contractual measures. The personal data you enter will only be processed by us internally and for the purpose of fulfilling the contract.
For the execution of the contract, personal data may be passed on to third parties, such as parcel carriers or payment service providers; this is done only to the extent necessary for the delivery of the goods or the processing of payments.
When registering on our website, the IP address assigned by your Internet service provider as well as the date and time of registration are also stored. The purpose of this storage is the prevention of misuse of our services as well as the possible promotion of the clarification of criminal offences. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.
The legal basis for the processing of data collected during registration is Art. 6 Para. 1 lit. a DS-GVO if you have given your consent.
Insofar as the registration serves the fulfillment of a contract to which you are a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 (1) lit. b DS-GVO.
Insofar as we prevent or investigate misuse of our systems, the legal basis is our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f DS-GVO.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, i.e. the creation or operation of a customer account.
Even after termination of the customer account, there may be a need to store your personal data in order to comply with contractual or legal obligations.
You have the option to cancel the registration at any time by sending us a corresponding message by mail or post. The account created for you internally will then be deleted by us immediately. If you have received login data for the account from us, you can change, supplement or delete the data stored about you in your account at any time.
However, premature deletion of the data is only possible insofar as contractual or legal obligations (e.g. retention obligations on our part) do not prevent deletion.
VI. E-Mail-Contact
On our site, it is possible to contact us via the e-mail address provided. In this case, your personal data transmitted by e-mail will be stored.
The data will not be passed on to third parties. The data transmitted to us by you on a voluntary basis will be used exclusively for processing the conversation.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f DS-GVO. If your e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DS-GVO.
The processing of the personal data from the input mask serves us solely to process the contact. This is also the necessary legitimate interest in processing the data.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data sent with the e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
You have the option of objecting to the storage of your personal data transmitted by e-mail at any time by informing us of your wish by telephone, e-mail or post. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
VII. Comment Function (Reviews)
We offer you the opportunity to comment on a product you have purchased (a review). This may give other interested parties a better insight into the product.
With this function, the data entered in the input mask is transmitted to us and stored by us. This is your name and e-mail address as well as the comment.
At the time of sending the comment, your IP address and the date and time are also transmitted and stored.
The processing of personal data from the input mask also serves to prevent misuse of the comment form and to ensure the security of our IT system. This is our legitimate interest according to Art. 6 para. 1 p. 1 lit. f DS-GVO, which is also the legal basis.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when the comment is no longer published.
You can object to the storage of your personal data at any time. In such a case, the comment can no longer be published. The objection can be made by mail or by post. All personal data stored in the course of the comment will be deleted in this case.
VIII. Third-party extensions used on the website
1. Analysis tools
a) Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043/USA ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there.
Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. In doing so, pseudonymous usage profiles can be created from the processed data.
We only use Google Analytics with IP anonymization activated. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser will not be merged with other data from Google.
The purpose of using Google Analytics is to get to know our website visitors better and to optimize our offer. Art. 6 para. 1 p. 1 lit. f DS-GVO serves as the legal basis for this.
You can prevent the storage of cookies by selecting the appropriate settings on your browser software; you can also prevent the collection of data generated by the cookie and related to your use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more information about Google's use of data for advertising purposes, settings and opt-out options, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners/ ("Data use by Google when you use our partners' websites or apps"), http://www.google.com/policies/technologies/ads ("Data use for advertising purposes"),http://www.google.de/settings/ads ("Manage information Google uses to show you ads") and http://www.google.com/ads/preferences/ ("Determine what ads Google shows you").
The storage period of the data is 14 months. After this retention period, the data is automatically deleted.
2. Payment Methods
a) Paypal
We have integrated components of PayPal on our Internet pages. Paypal is a payment service provider. Payments are processed via PayPal accounts. These represent virtual accounts. PayPal also offers the option of processing payments via credit cards if the user does not have his own PayPal account. The PayPal account is managed via an e-mail address. The e-mail address is assigned to a specific account and is comparable to an account number. PayPal makes it possible to trigger online payments to third parties or to receive payments. In addition, PayPal offers trustee functions and buyer protection services.
PayPal is operated in Europe by PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal , L-2449 Luxembourg.
If you have selected PayPal, credit card via PayPal, direct debit via PayPal or -if offered- "purchase on account via PayPal" as payment method, we automatically transmit your payment and order data, i.e. the personal data transmitted by you to us, such as name, address, e-mail address, IP address, telephone number or other data necessary for payment processing, to the company PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal , L-2449 Luxembourg. This personal data is transferred to PayPal exclusively for the purpose of the online order and its payment processing. A transmission takes place in particular if there is a legitimate interest for this. PayPal may also disclose the personal data to third parties such as credit agencies for an identity and credit check. A transfer of personal data may also be made to companies and service providers or subcontractors associated with PayPal, as well as banking institutions, insofar as this is necessary for the fulfillment of the contractual obligation or the data is to be processed on behalf. You have the option to revoke your consent to the handling of personal data at any time vis-à-vis PayPal. However, the revocation does not affect such personal data that must be processed, used or transmitted mandatory for contractual payment processing. Further details on data protection at PayPal can be read here: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev.
By using PayPal, you agree to the above information, or the use of personal data presented here and recognize the privacy policy of PayPal, which can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev.
- b) Stripe
We have integrated components from Stripe on our website. Stripe is a payment service provider.
Stripe is operated in Europe by Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
If you have selected a payment method offered by Stripe, we automatically transmit your payment and order data, i.e. the personal data you have transmitted to us, such as name, address, e-mail address, IP address, telephone number or other data required for payment processing, to Stripe.
This personal data is passed on to Stripe exclusively for the purpose of the online order and its payment processing. A transfer takes place in particular for the processing of your contract with us (Art. 6 para. 1 sentence 1 lit. b. DS-GVO) and if there is a legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f DS-GVO.
Stripe may also pass on personal data to third parties such as credit agencies for identity and credit checks. Personal data may also be passed on to companies and service providers affiliated with PayPal or subcontractors as well as banking institutions, insofar as this is necessary to fulfill the contractual obligation
or the data is to be processed by order.
You have the option to revoke your consent to the handling of personal data at any time from Stripe. However, the revocation does not affect such personal data that must be processed, used or transmitted for contractual payment processing.
must be processed, used or transmitted.
Further details on data protection at Stripe can be found here: https://stripe.com/de/privacy.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://stripe.com/de/privacy and https://stripe.com/de/guides/general-data-protection-regulation.
3. Social Media
On our websites, we use so-called social media plugins of the social networks mentioned below to make us better known. This promotional purpose is a legitimate interest, so that the legal basis for this data processing is Art. 6 para. 1 lit. f DSGVO. The responsibility for data protection compliant operation is to be ensured by their respective providers.
a) Facebook
Our online offer uses social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins are recognizable by one of the Facebook logos (white "f" on blue tile, the terms "Like", "Like" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
When you access our website, a direct connection is established with Facebook's servers via your browser. The content of the plugin is transmitted by Facebook directly to your browser and integrated by it into the online offer. In the process, usage profiles of you can be created from the processed data. We have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform you according to our level of knowledge.
By integrating the plugins, Facebook receives the information that you have accessed the corresponding page of our online offer. If you are logged into Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If you are not a member of Facebook, there is still the possibility that Facebook will learn and store your IP address. According to Facebook, only anonymized IP addresses are stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for protecting your privacy, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.
If you are a Facebook member and do not want Facebook to collect data about you via this online offer and link it to your membership data stored with Facebook, you must log out of Facebook before using our online offer and delete the corresponding cookies. Further settings and objections to the use of data for advertising purposes, are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
b) Twitter
We use the Twitter button on our website. This is regularly represented with the words "Twitter" or "Follow" or else by a graphically represented blue bird.
The buttons are offered by Twitter Inc, 795 Folsom St, Suite 600, San Francisco, CA 94107, USA.
With the Twitter button it is possible to share a post or page of our website on Twitter or to follow us on Twitter.
When you visit our website, a connection to Twitter servers is briefly established via your browser. The content of the Twitter button is transmitted by Twitter directly to your browser. We therefore have no influence on the scope of the data that Twitter collects with the help of this plugin and on its use by Twitter. To our knowledge, at least your IP address is transmitted.
By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. If you do not wish such an association, log out with your Twitter account before visiting our website. Further information on this can be found in Twitter's privacy policy at http://twitter.com/privacy.
c) WhatsApp
We use the WhatsApp share button on our website. This is regularly represented graphically by the WhatsApp logo.
The button is offered by
With the WhatsApp button it is possible to share a post or page of our website via WhatsApp.
In doing so, the WhatsApp button is merely integrated via a hyperlink on our website. This alone does not transmit any personal data. Only when you click on the button, the content is transmitted to WhatsApp. Likewise, WhatsApp then learns from which website you are coming.
IX. Rights of the Data Subjec
If and insofar as we process personal data from you, you are a data subject within the meaning of the GDPR and you have the following rights against us as the controller:
1. Right of Information
If personal data is being processed, you may, pursuant to Article 15 of the GDPR, in addition to a confirmation thereof, request information on the purposes for which the personal data is being processed, the categories of personal data being processed, the recipients or categories of recipients to whom the personal data relating to you has been or will be disclosed. the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period, the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing, the existence of a right to lodge a complaint with a supervisory authority, any available information on the origin of the data if the personal data are not collected from the data subject. You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.
2. Right to Rectification
Pursuant to Art. 16 DS-GVO, you have the right to rectification and/or completion if the processed personal data concerning you is incorrect or incomplete. The correction shall be made without undue delay.
3. Right to Deletion
Pursuant to Art. 17 DS-GVO, you may request that the personal data concerning you be deleted without undue delay. The right to erasure does not exist insofar as the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or for the assertion, exercise or defense of legal claims.
4. Right to Restriction of Processing
You may request the restriction of the processing of personal data concerning you in accordance with Article 18 DSGVO if you contest its accuracy, the processing is unlawful, the personal data is no longer required for the purposes of the processing but you need it for the assertion, exercise or defense of legal claims, or you have objected to the processing in accordance with Article 21 (1) DSGVO and it is not yet clear whether the legitimate grounds of the controller override your grounds.
5. Right to Information
If you have exercised the right to rectification, erasure or restriction of processing, all recipients to whom the personal data concerning you have been disclosed must be informed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
6. Right to Data Portability
In accordance with Art. 20 DS-GVO, you have the right to receive the personal data concerning you in a structured, common and machine-readable format. You also have the right to transfer this data to another controller, provided that the processing is based on consent pursuant to Art. 6(1)(a) DS-GVO or Art. 9(2)(a) DS-GVO or on a contract pursuant to Art. 6(1)(b) DS-GVO and the processing is carried out with the help of automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest.
7. Right of Objection
Pursuant to Art. 21 DS-GVO, you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) lit. e or f DS-GVO.
The objection can be declared to the controller by mail, fax or letter (see point 10.1). The controller will no longer process the personal data concerning you in the event of the objection, unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
8. Right to revoke the Declaration of Consent under Data Protection Law
In accordance with Art. 7 (3) DS-GVO, you have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation, but no more processing will take place in the future.
9. Automated Decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the controller, is permitted by Union or Member State law to which the controller is subject, and that law contains adequate measures to safeguard your rights and freedoms and legitimate interests, or is made with your explicit consent.
However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases mentioned in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, which include, at a minimum, the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.
10. Right to complain to a Supervisory Authority
Unbeschadet eines anderweitigen verwaltungsrechtlichen oder gerichtlichen Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
Our supervisory authority responsible for data protection matters is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de
END OF THE PRIVACY POLICY