We use cookies to create the best possible browsing experience for our users.
By continuing to use this website, you agree to our use of such cookies.
OK Learn More
Privacy policy

GameDuell Privacy Policy

GameDuell takes data protection seriously and respects your privacy. In this privacy policy we explain what data we collect within the scope of our online offer and how we process this data. We refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR) regarding the terminology used, i.e. "personal data" or "processing".


Name and address of the Controller

The Controller in regard to GDPR and other national data protection laws of member states as well as other data protection regulations is:

GameDuell GmbH
Taubenstr. 24-25
10117 Berlin, Germany
Phone: +49 (0) 30 288 768 661
Email: dataprotection@gameduell.co.uk

Name and address of the Data Protection Officer:

Berit Schubert
DataSolution LUD GmbH
Isarstr. 13
D-14974 Ludwigsfelde, Allemagne
Phone.: +49 (0) 3378 205729
Email: mail@ds-lud.de
Web: https://www.datenschutzberater365.de

General information regarding data processing

What information do we collect?

  • Personal data (name and address)
  • Contact data (email address and telephone number)
  • Content data (text input, photographs, and videos)
  • Usage data (websites visited, interest in content, and access times)
  • Meta / Communication data (device ID and IP address)

No special categories of data are processed (GDPR Art. 9(1)).

Categories of data involved:

  • Customer / interested parties
  • Visitors and users of the online offer
  • In the following, we refer to subjects as "users"

What do we use your data for?

  • Providing the online offer, its contents, and functions
  • Provision of contractual services and customer care
  • Responding to inquiries and communicating with users
  • Marketing, advertising, and market research
  • To prevent fraud and misuse
  • For security purposes

How do we protect your data?

In accordance with GDPR Article 32, we take appropriate technical measures that take technical standards, implementation costs, and the nature, scope, circumstance, and purpose of processing as well as the likelihood and severity of the risk to your rights and freedoms into consideration. Technical and organisational measures are used to ensure a level of appropriate protection to avoid any possible risks. Measures include ensuring confidentiality, integrity, and availability of data by controlling physical access to the data, as well as its access, input, disclosure, the securing of availability, and its separation. We have also set up procedures to ensure data subject rights, data deletion, and data vulnerability. In accordance with GDPR Article 25, the protection of personal data is already considered from the development phase (while selecting hardware, software, and others) on.

Your data is protected electronically, technically, contractually, and administratively against misuse and loss through various measures. We use security techniques (including SSL encryption, cryptography) to protect your data against access by unauthorized third parties.

Will your data be shared with third parties?

If your data is disclosed to a contracted partner or third party, then this is done under a legal contract and is protected. An example of this is providing your data to a payment service provider to complete a payment to which you have agreed. The payment service provider has a legal obligation to obtain certain data to complete the transaction pursuant to GDPR Article 6(1).

In order to be able to offer you an optimal service, we use a number of contracted service providers who work on our behalf and in accordance with GDPR Article 28.

Transfers to third countries

If we process any data in a third country (outside of the European Union (EU) or the European Economic Area (EEA)), or this happens in the context of third party services, or the procurement or transmission of data to third parties, then this will only be done if it is necessary to fulfil our (pre-) contractual obligations, based on your consent, due to a legal obligation or based on our legitimate interests. Subject to legal or contractual permissions, we only process data in a third country if certain conditions of GDPR Article 44 are met. This means that processing will be done only when certain requirements, such as meeting officially recognised EU level standards of data protection or observing officially recognised special contractual obligations (so-called "standard contractual clauses").

What are your rights?

You have a right to freely access your stored data as well as the right to correct, delete, or block any data. You can also object to the transference of this data at any time. Please contact us for further information or to withdraw your consent: dataprotection@gameduell.co.uk. You also have the right of appeal to a regulatory body.

When will your data be deleted?

The data processed by us is deleted or limited in its processing pursuant to GDPR Articles 17 and 18. The data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal storage obligations or well-founded interests to prevent deletion, if otherwise not expressly stated in this privacy policy, i.e. If there is a well-founded interest, for example, in asserting, exercising, or defending legal claims or avoiding fraud cases (for your protection). If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes.

Provision of contractual services

We process inventory data (e.g. names, addresses, customer contact information), contract data (e.g. services used, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with GDPR Article 6(1)(b). The entries marked as mandatory in online forms are required to complete the contract.

IP addresses are stored for registrations and logins as well as the time of such actions. Storing IP addresses is mandatory and is required to protect users from abusive or unauthorised activity by other users. This information is not shared with third parties unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to GDPR Article 6(1)(c).

This information is deleted only after expiry of statutory warranties and comparable obligations. The necessity to retain this data is reviewed every three years. In the case of statutory archiving obligations, deletion takes place after expiry of the respective legally prescribed periods (after 6 years in the case of commercial law and after 10 years in the case of tax law). Information in the customer’s account will remain in place until deletion.


When contacting us, e.g. via e-mail or through the contact form, your details are used to process your enquiry in accordance with GDPR Article 6 paragraph 1 lit. b), or with consent granted by the user in accordance with GDPR Article 6 paragraph 1 lit. a). This information may be stored in our systems.

We delete the data if it is no longer required. We review the necessity to keep the information every two years. We store user requests from users with permanent accounts and refer to the above for deletion under the "Provision of contractual services". In the case of legal archiving obligations, the deletion takes place after expiration of the respective legally prescribed periods (after 6 years in the case of commercial law and after 10 years in the case of tax law).

Collection of access data and log files

On the basis of our legitimate interests within GDPR Article 6(1)(f), we collect data each time the server is accessed through which this service is provided (so-called server log files). The access data includes the date and time of retrieval, page accessed, browser type and version, the user's operating system, possible error details, referrer URL (the previously visited page), User ID (internal customer number), and the requesting provider.

For security purposes, log file information is stored until it is no longer required (e.g. to verify and eradicate errors or to prevent misuse or fraud). Once its purpose is served, this information is deleted or made anonymous. Certain data may only be deleted once the case has been closed.

Use of cookies

Cookies are small text files that are transferred from either our servers or third party web servers to the user's web browser and are stored there for later retrieval.

We use both session cookies and persistent cookies. Session cookies are stored exclusively for the duration of your session on our website and are deleted at the end of the browser session, i.e. after closing your browser. Persistent cookies remain on your computer or your device for a fixed period of time, even after you have closed your browser. The session cookies are stored on your system via your browser and enable certain settings and functionality on our website. Persistent cookies remember your data and behaviour on our website and help us display relevant and meaningful information to you. Information collected in this way can be used to track your user behaviour over multiple browser sessions.

We also implement the following cookies:

Technical Cookies: Technical cookies make the use of websites easier for the user. Some functions of our website could not be offered without the use of cookies. It is necessary that the browser is recognised even after changing websites. The user data collected by technical cookies is not used to create a user profile.

Analysis cookies: Analysis cookies are used to improve the quality of our website and its contents. Analysis cookies tell us how the website is used and enable us to continually optimise our services.

The legal basis for the processing of personal data using technical and analysis cookies is in our legitimate interest in accordance to GDPR Art. 6(1)(f).

If you do not want cookies to be saved on your computer, you must disable this option in your browser settings. Any saved cookies can be also be deleted in your browser settings. The exclusion of cookies can lead to limited functionality of this online offer.

If you would like to opt-out from the use of cookies, which measure reachability and are used for advertising purposes, then you can do so here: http://optout.networkadvertising.org
For the US: http://www.aboutads.info/choices
For Europe: hhttp://www.youronlinechoices.com/uk/your-ad-choices/

Online Advertisement

In our legitimate interest pursuant to GDPR Art.6(1)(f), we promote our services among others in search engine results or on third party websites who provide advertising space for this purpose, either directly or through respective networks. By entering into respective contractual agreements, we ensure that your data, such as your IP-address, is processed in accordance with legal requirements.


If you register for our newsletter, we will inform you via e-mail with news and promotions regarding our offer. This is sent in accordance to GDPR Article 6(1)(S)(1) and can be revoked at any time or under “§ 7 Abs. 3 Nr. 2 UWG” (German law regarding unfair competition) should the conditions be fulfilled. Details on how to cancel the newsletter are also found in each newsletter.

User surveys / User feedback

Occasionally we may ask you to provide us with voluntary feedback regarding our games and website. This only happens with your consent and takes place in the form of surveys. After collating the results from various surveys, tests, and interviews, you may receive further invitations that correspond to your interests. We will inform you in advance about the details, in particular any collection of personal data. In this regard you can make use of your rights mentioned above. The legal basis for this is GDPR Article 6(1)(a). You can revoke your permission to process this data at any time. We co-operate with the following service providers:


To conduct customer surveys we use “SurveyGizmo”: SurveyGizmo LLC., 4888 Pearl East Cir. Suite 100W Boulder, CO 80301 USA.

SurveyGizmo's privacy policy can be found here.

User Testing

For usability tests or game tests we use “User Testing”: User Testing, Inc., 690 5th Street, San Francisco, CA 94107, USA.

User Testing’s privacy policy can be found here.


For usability tests and game tests we use “Doodle”: Doodle AG, Werdstrasse 21, Postfach 8021 Zürich, Switzerland.

Doodle’s privacy policy can be found here.

Protection of minors

GameDuell services are exclusively intended for adult use. We do not knowingly collect age information, nor do we knowingly collect any personal data from children under the age of 16. We advise all visitors to our website under the age of 16 not to disclose or provide any personal data to our service.

Changes and updates to the Privacy Policy

We reserve the right to change, update, or amend this privacy policy at any time. Any revised privacy policy applies only to personal data collected or amended after the effective date of the revised privacy policy.


If you have any further questions, please do not hesitate to contact us. Please send an e-mail to dataprotection@gameduell.co.uk.