- Name and address of the Controller
- Name and address of the Data Protection Officer
- What data do we collect?
- What do we use your data for?
- How do we protect your data?
- Will your data be shared with third parties?
- Transfers to third countries
- What are your rights?
- When will your data be deleted?
- Provision of contractual services
- Collection of access data and log files
- Online advertisement
- User surveys / User feedback
- Protection of minors
The Controller in regard to GDPR and other national data protection laws of member states as well as other data protection regulations is:
10117 Berlin, Germany
Phone: +49 (0) 30 288 768 661
General information regarding data processing
- Personal data (name and address)
- Contact data (email address and telephone number)
- Content data (text input, photographs, and videos)
- Usage data (websites visited, interest in content, and access times)
- Meta / Communication data (device ID and IP address)
No special categories of data are processed (GDPR Art. 9(1)).
Categories of data involved:
- Customer / interested parties
- Visitors and users of the online offer
- In the following, we refer to subjects as "users"
- Providing the online offer, its contents, and functions
- Provision of contractual services and customer care
- Responding to inquiries and communicating with users
- Marketing, advertising, and market research
- To prevent fraud and misuse
- For security purposes
In accordance with GDPR Article 32, we take appropriate technical measures that take technical standards, implementation costs, and the nature, scope, circumstance, and purpose of processing as well as the likelihood and severity of the risk to your rights and freedoms into consideration. Technical and organisational measures are used to ensure a level of appropriate protection to avoid any possible risks. Measures include ensuring confidentiality, integrity, and availability of data by controlling physical access to the data, as well as its access, input, disclosure, the securing of availability, and its separation. We have also set up procedures to ensure data subject rights, data deletion, and data vulnerability. In accordance with GDPR Article 25, the protection of personal data is already considered from the development phase (while selecting hardware, software, and others) on.
Your data is protected electronically, technically, contractually, and administratively against misuse and loss through various measures. We use security techniques (including SSL encryption, cryptography) to protect your data against access by unauthorized third parties.
If your data is disclosed to a contracted partner or third party, then this is done under a legal contract and is protected. An example of this is providing your data to a payment service provider to complete a payment to which you have agreed. The payment service provider has a legal obligation to obtain certain data to complete the transaction pursuant to GDPR Article 6(1).
In order to be able to offer you an optimal service, we use a number of contracted service providers who work on our behalf and in accordance with GDPR Article 28.
If we process any data in a third country (outside of the European Union (EU) or the European Economic Area (EEA)), or this happens in the context of third party services, or the procurement or transmission of data to third parties, then this will only be done if it is necessary to fulfil our (pre-) contractual obligations, based on your consent, due to a legal obligation or based on our legitimate interests. Subject to legal or contractual permissions, we only process data in a third country if certain conditions of GDPR Article 44 are met. This means that processing will be done only when certain requirements, such as meeting officially recognised EU level standards of data protection or observing officially recognised special contractual obligations (so-called "standard contractual clauses").
You have a right to freely access your stored data as well as the right to correct, delete, or block any data. You can also object to the transference of this data at any time. Please contact us for further information or to withdraw your consent: email@example.com. You also have the right of appeal to a regulatory body.
We process inventory data (e.g. names, addresses, customer contact information), contract data (e.g. services used, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with GDPR Article 6(1)(b). The entries marked as mandatory in online forms are required to complete the contract.
IP addresses are stored for registrations and logins as well as the time of such actions. Storing IP addresses is mandatory and is required to protect users from abusive or unauthorised activity by other users. This information is not shared with third parties unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to GDPR Article 6(1)(c).
This information is deleted only after expiry of statutory warranties and comparable obligations. The necessity to retain this data is reviewed every three years. In the case of statutory archiving obligations, deletion takes place after expiry of the respective legally prescribed periods (after 6 years in the case of commercial law and after 10 years in the case of tax law). Information in the customer’s account will remain in place until deletion.
When contacting us, e.g. via e-mail or through the contact form, your details are used to process your enquiry in accordance with GDPR Article 6 paragraph 1 lit. b), or with consent granted by the user in accordance with GDPR Article 6 paragraph 1 lit. a). This information may be stored in our systems.
We delete the data if it is no longer required. We review the necessity to keep the information every two years. We store user requests from users with permanent accounts and refer to the above for deletion under the "Provision of contractual services". In the case of legal archiving obligations, the deletion takes place after expiration of the respective legally prescribed periods (after 6 years in the case of commercial law and after 10 years in the case of tax law).
On the basis of our legitimate interests within GDPR Article 6(1)(f), we collect data each time the server is accessed through which this service is provided (so-called server log files). The access data includes the date and time of retrieval, page accessed, browser type and version, the user's operating system, possible error details, referrer URL (the previously visited page), User ID (internal customer number), and the requesting provider.
For security purposes, log file information is stored until it is no longer required (e.g. to verify and eradicate errors or to prevent misuse or fraud). Once its purpose is served, this information is deleted or made anonymous. Certain data may only be deleted once the case has been closed.
Cookies are small text files that are transferred from our web server or third-party web servers to a user’s web browser and are stored there for subsequent retrieval.
These cookies are either so-called “session cookies” or “persistent cookies”. Session cookies are stored only for the duration of your visit on our website and are deleted at the end of your browser session, i.e. when you close your browser. Persistent cookies remain on your device for a set period of time, even after you close your browser. Session cookies are stored, for example, on your computer in order to ensure certain settings and functionalities on our website via your browser. Persistent cookies remember your data and your usage behaviour on our website and helps us to provide you with information which may be relevant or important to you. The information gathered can be used to track your usage behaviour over multiple browser sessions.
We use the following types of cookies:
Necessary cookies: enable basic website functions, such as website navigation and access to secure areas of the website. They are required for the website’s operation and cannot be disabled.
The legal basis for the processing of personal data using necessary cookies is the fulfilment of our contract made with you pursuant to Art. 6 Para. 1 lit. b. GDPR.
Functional cookies: provide you with a more convenient experience on our website. For example, your sound preferences (on/off) can be saved for each individual game and do not need to be adjusted every time you play. These cookies are enabled by default but you have the option to disable them.
The legal basis for the processing of personal data using functional cookies is our legitimate interest in the data processing within the meaning of Art. 6 Para. 1 lit. f. GDPR.
Tracking & marketing cookies: are used for to analyse how the website is used. This allows us to continuously optimise our offer for you. They also allow us to verify whether players are directed to our website by one of our marketing partners. These cookies are only enabled if you allow them. Alternatively, you can select to “Accept all cookies”.
The processing of personal data using tracking and marketing cookies takes place only if there is corresponding consent pursuant to art. 6 para. 1 lit. a. GDPR as a legal basis.
You can change your cookie banner preferences at any time by clicking here.
In our legitimate interest pursuant to GDPR Art.6(1)(f), we promote our services among others in search engine results or on third party websites who provide advertising space for this purpose, either directly or through respective networks. By entering into respective contractual agreements, we ensure that your data, such as your IP-address, is processed in accordance with legal requirements.
If you register for our newsletter, we will inform you via e-mail with news and promotions regarding our offer. This is sent in accordance to GDPR Article 6(1)(S)(1) and can be revoked at any time or under “§ 7 Abs. 3 Nr. 2 UWG” (German law regarding unfair competition) should the conditions be fulfilled. Details on how to cancel the newsletter are also found in each newsletter.
Occasionally we may ask you to provide us with voluntary feedback regarding our games and website. This only happens with your consent and takes place in the form of surveys. After collating the results from various surveys, tests, and interviews, you may receive further invitations that correspond to your interests. We will inform you in advance about the details, in particular any collection of personal data. In this regard you can make use of your rights mentioned above. The legal basis for this is GDPR Article 6(1)(a). You can revoke your permission to process this data at any time. We co-operate with the following service providers:Alchemer
To conduct customer surveys we use “Alchemer”: Alchemer LLC., 168 Centennial Parkway, Unit #250, Louisville, Colorado, 80027 USA.
For customer interviews we use the video conferencing services of Zoom Video Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA.
For usability tests or game tests we use “User Testing”: User Testing, Inc., 690 5th Street, San Francisco, CA 94107, USA.
For usability tests and game tests we use “Doodle”: Doodle AG, Werdstrasse 21, Postfach 8021 Zürich, Switzerland.
GameDuell services are exclusively intended for adult use. We do not knowingly collect age information, nor do we knowingly collect any personal data from children under the age of 16. We advise all visitors to our website under the age of 16 not to disclose or provide any personal data to our service.
If you have any further questions, please do not hesitate to contact us. Please send an e-mail to firstname.lastname@example.org.