Personal data (hereinafter mostly referred to as "data") will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly online presence, including its content and the services offered therein.

According to Art. 4 Paragraph 1 of Regulation (EU) 2016/679, also known as the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" refers to any operation or set of operations performed on personal data, whether or not by automated means, such as the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the nature, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of processing. Furthermore, we will inform you below about the third-party components we use for optimisation purposes and to enhance the quality of use, insofar as these involve third parties processing data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the data controller
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as the data controller

The responsible provider of this online presence in terms of data protection law is:

GameOn Entertainment GmbH & Co. KG
Suarezstr. 26
14057 Berlin
Germany

Telephone: +49(30)34358677
Fax: +49(30)34358677
Email: info@gameon.ag

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

• to confirmation as to whether personal data concerning them is being processed, to access the processed data, to further information about the data processing, and to copies of the data (see also Art. 15 GDPR);
• to rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
• to the immediate deletion of personal data concerning them (see also Art. 17 GDPR), or, alternatively, to restriction of processing to the extent that further processing is necessary in accordance with Art. 17 Paragraph 3 GDPR;
• to receive the personal data concerning them and provided by them, and to transmit those data to other providers/controllers (see also Art. 20 GDPR);
• to lodge a complaint with a supervisory authority if they believe that the personal data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).

Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or deletion of data or restriction of processing that occurs based on Article 16, 17 Paragraph 1, 18 GDPR. However, this obligation does not exist insofar as this notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has the right to information about these recipients.

Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of their personal data, provided that the data is processed by the provider in accordance with Art. 6 Paragraph 1 lit. f) GDPR. In particular, an objection to data processing for the purposes of direct marketing is permissible.

III. Information on data processing

Your data processed when using our online presence will be deleted or blocked as soon as the purpose of storage ceases, provided that there are no legal retention obligations preventing deletion, and unless otherwise stated for individual processing procedures below.

Cookies

a) Session Cookies

We use so-called cookies with our online presence. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you are using. These cookies process certain information about you, such as your browser or location data or your IP address, to a specific extent.

This processing makes our online presence more user-friendly, effective, and secure, as it enables, for example, the display of our online presence in different languages or the provision of a shopping cart function.

The legal basis for this processing is Art. 6 Paragraph 1 lit. b) GDPR, provided that these cookies process data for the initiation or execution of a contract.

If the processing does not serve the initiation or execution of a contract, our legitimate interest lies in improving the functionality of our online presence. The legal basis in this case is Art. 6 Paragraph 1 lit. f) GDPR.

These session cookies will be deleted when you close your internet browser.

b) Third-Party Cookies

Cookies from partner companies with whom we collaborate for advertising, analysis, or functionalities of our online presence may also be used.

For details, particularly regarding the purposes and legal bases for the processing of such third-party cookies, please refer to the information below.

c) Possibility of Removal

You can prevent or restrict the installation of cookies by adjusting the settings of your internet browser. You can also delete already stored cookies at any time. The necessary steps and measures depend on the specific internet browser you are using. If you have questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. However, for so-called Flash cookies, processing cannot be prevented through the browser settings. Instead, you must change the settings of your Flash player accordingly. The necessary steps and measures also depend on the specific Flash player you are using. If you have questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.

If you prevent or restrict the installation of cookies, this may result in not all functions of our online presence being fully usable.

Contact Requests / Contact Possibility

If you contact us via a contact form or email, the data you provide will be used to process your request. Providing the data is necessary for processing and responding to your request – without this information, we cannot or can only partially respond to your request.

The legal basis for this processing is Art. 6 Paragraph 1 lit. b) GDPR.

Your data will be deleted once your request has been conclusively answered and there are no legal retention obligations preventing deletion, such as in the case of a subsequent contract execution.

Server Data

For technical reasons, particularly to ensure a secure and stable online presence, data is transmitted to us or to our web space provider by your internet browser. With these so-called server log files, data such as the type and version of your internet browser, the operating system, the website from which you have accessed our online presence (referrer URL), the website(s) of our online presence that you visit, the date and time of each access, and the IP address of the internet connection from which you are using our online presence is collected.

The data collected in this way is temporarily stored, but not together with other data from you.

This storage is based on the legal basis of Art. 6 Paragraph 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our online presence.

The data will be deleted at the latest after seven days, provided that no further retention is necessary for evidential purposes. Otherwise, the data will be exempt from deletion in whole or in part until the final clarification of an incident.

MailChimp – Newsletter

We offer you the opportunity to sign up for our free newsletters via our online presence.

For the newsletter dispatch, we use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as "The Rocket Science Group".

Furthermore, The Rocket Science Group provides additional data protection information at

http://mailchimp.com/legal/privacy/

If you sign up for our newsletter, the data requested during the registration process, such as your email address and, optionally, your name and address, will be processed by The Rocket Science Group. Additionally, your IP address and the date and time of your registration will be stored. As part of the further registration process, your consent for the sending of the newsletter will be obtained, with the content specifically described and reference made to this privacy policy.

The newsletter sent via The Rocket Science Group also contains a so-called tracking pixel, also known as a web beacon. With the help of this tracking pixel, we can evaluate whether and when you have read our newsletter and whether you have followed any links contained in the newsletter. In addition to other technical data, such as the data of your IT system and your IP address, the data processed in this way will be stored so that we can optimise our newsletter offering and respond to the wishes of the readers. The data will therefore be used to enhance the quality and attractiveness of our newsletter offering.

The legal basis for the sending of the newsletter and the analysis is Art. 6 Paragraph 1 lit. a) GDPR.

You can revoke your consent to the newsletter dispatch at any time with effect for the future in accordance with Art. 7 Paragraph 3 GDPR. To do this, you simply need to inform us of your revocation or click on the unsubscribe link included in each newsletter.

WhatsApp Contact

For contact purposes, the provider allows customers to contact them via the messaging service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as WhatsApp, a subsidiary of Facebook.

Through the user's communication with the provider via WhatsApp, both the provider and WhatsApp receive the user's mobile phone number and the information that the user has contacted the provider.

The aforementioned data is also forwarded by WhatsApp to servers of Facebook in the USA and processed by WhatsApp and Facebook in accordance with the WhatsApp privacy policy, which also includes processing for their own purposes, such as improving the WhatsApp service.

_____________________

Currently, the USA is not considered to have an adequate level of data protection according to the views of data protection supervisory authorities. However, there are so-called standard contractual clauses:

https://faq.whatsapp.com/general/about-standard-contractual-clauses

However, these are private agreements and therefore have no direct impact on the access possibilities of authorities in the USA.

_____________________

Further details on the purpose and scope of data collection and the further processing of this data by WhatsApp and Facebook, as well as related rights and options for privacy protection, are included in WhatsApp's privacy policy:

https://www.whatsapp.com/legal/#privacy-policy.

The legal basis for these processing activities and the transfer to WhatsApp is Art. 6 Paragraph 1 Sentence 1 b) GDPR, provided that the contact relates to an existing contractual relationship or serves to initiate such a contractual relationship. If the contact is not made for the aforementioned purposes, the legal basis is Art. 6 Paragraph 1 lit. f) GDPR. The provider's legitimate interest lies in improving service quality.

Sample Privacy Policy from Law Firm Weiß & Partner