Privacy Policy

Information about the processing of your data

In accordance with Art. 12 of the General Data Protection Regulation (hereinafter referred to as the GDPR), we are obliged to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously and this privacy policy informs you about the details of the processing of your data and about your legal rights in this regard.

We reserve the right to adapt the privacy policy with future effect, in particular in the event of further development of the website, the use of new technologies or changes to the legal bases or the corresponding case law.

We recommend that you read this privacy policy from time to time and take a printout or a copy for your documents.

Definitions

1. In the following, website means all of the controller’s pages at www.gheed.com.

2. personal data means any information relating to an identified or identifiable natural person. A person is identifiable if they can be identified, either directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more special features that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Personal data is therefore, for example, a person’s name, email address and telephone number, but may also include information about preferences, hobbies and memberships;

3. processing means operations or sets of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction;

4. pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person;

5. consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes in a particular case by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

6. Google means the company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; reachable in the European Union at: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001.

I. Scope

This privacy policy applies to all pages of www.gheed.com. It does not cover any linked websites of other providers.

II. Responsible provider

The following party is responsible for the processing of personal data within the scope of this privacy policy:

SmartSelf GmbH
represented by the Managing Directors Mr Martin Apler and Mr Jens Präkelt
Wittestr. 16a, 06110 Halle (Saale)
Telephone: +49152/53803790
Email: jp@smartself.me

III. Questions about data protection

If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:

Chung Nguyen
SmartSelf GmbH
Wittestr. 16a
06110 Halle (Saale)
cn@smartself.me

IV. Security

We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, abuse, loss and other external disruption. To this end, we regularly review our security measures and adapt them to current standards.

V. Your rights

You have the following rights with regard to the personal data concerning you that you can assert against us:

- right of access (Art. 15 GDPR),
- right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
- right to restriction of processing (Art. 18 GDPR),
- right to object to processing (Art. 21 GDPR),
- right to withdraw your consent (Art. 7(3) GDPR),
- right to receive the data in a structured, commonly used, machine-readable format (“data portability”) and the right to transfer the data to another controller, if the prerequisites of Art. 20(1) (a), (b) GDPR are fulfilled (Art. 20 GDPR)

You can assert your rights by informing us using the contact details specified above under ‘Responsible provider’ or by contacting the data protection officer designated by us.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).

VI. Use of the website, access data

In principle, you can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, this only results in access data being transferred to our web hosting service so that the website can be displayed to you. This is the following data:

- browser type/browser version
- operating system used
- language and version of the browser software
- hostname of the accessing device
- IP address
- website from which the request comes
- content of the request (specific page)
- date and time of the server request
- access status/HTTP status code
- referrer URL (website visited before)
- volume of data transferred
- time zone difference from Greenwich Mean Time (GMT)

Temporary processing of the IP address by the system is necessary to make it technically possible to deliver the website to your device. This requires processing of your IP address for the duration of the session. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR.

The access data is not used to identify individual users and is not combined with other data sources. The access data is deleted when it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website.

The recording of data for the provision of the website is an absolute necessity for the operation of the website. You may object to the processing. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.

VII. Cookies

In addition to the aforementioned access data, so-called cookies are stored in the internet browser of the device you use to access the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the device system and cannot execute programs. They serve to make our website user-friendly. The use of cookies may be technically necessary or may occur for other purposes (e.g. analysis/evaluation of website use).

a) Some elements of our website require that the retrieving browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

- login information

The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR. The user data collected by technically necessary cookies is not used to create user profiles.

We also use session cookies, which store a session ID that can be used to assign various requests from your browser to the shared session. Session cookies are required for using the website. In particular, they enable us to recognise the device used when you return to the website. If you have an account with us, we use this cookie to recognise you on subsequent visits to the website; otherwise you would have to log in again each time you visited. The legal basis results from Art. 6(1) Sentence 1(f) GDPR.

Most browsers are preset to automatically accept cookies. You can disable or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use the full functionality of the website.

b) In addition, we also use cookies on the website which enable an analysis of users’ surfing behaviour. The following data is stored and transmitted in the cookies:

- entered search terms
- frequency of page views
- use of website functions

These cookies are used to make using the website more efficient and attractive. The legal basis results from Art. 6(1) Sentence 1(f) GDPR.

If you do not wish to use cookies, you have the option of changing your browser settings in order to generally or selectively block the placement of cookies or remove stored cookies. You can also have the corresponding information displayed before a cookie is placed. If you change the browser settings for the use of cookies or disable cookies, the functionality of this website may be restricted.

When you access the website, you are informed about the use of cookies for technically non-essential purposes and – if necessary – we will obtain your consent to the processing of personal data used in this context. In this context, reference is also made to this privacy policy.

Where we integrate cookies from third-party providers into our website, we point this out to you separately below.

c) When you visit the website, an information banner notifies you about the use of cookies for analysis purposes and refers you to this privacy policy. In this context, information is also provided about how the storage of cookies can be prevented by adjusting your browser settings.

VIII. Contacting our company

When you contact our company, e.g. by email or using the contact form on the website, we will store the personal data provided by you so that we can respond to your enquiry.

In order for us to process enquiries submitted via the contact form on the website, it is essential that you provide a name or pseudonym and a valid email address. At the moment when you submit the message to us, the following further data will also be stored:

- IP address
- date/time of registration

When the email is sent, we obtain your consent to the processing of the data and refer you to this privacy policy. The legal basis of the processing is then Art. 6(1) Sentence 1(a) GDPR.

The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR, or Art. 6(1) Sentence 1(b) GDPR if the contact is made with the intention of concluding or processing a contract.

Processing the personal data from the form allows us alone to process the contact you make with us. Where you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process serves to prevent any misuse of the contact form and to ensure the security of our information technology systems. The data will not be transmitted to third parties in this context. The data is only used in order to process the conversation. As soon as storage is no longer necessary, we erase the data generated in this context or restrict processing of the data to compliance with applicable statutory retention obligations.

You have the possibility to withdraw your consent to the processing of the personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, it may not be possible to continue processing the request.

IX. Use and disclosure of personal data

We collect and process your personal data if and to the extent necessary for the initiation, creation, execution and/or termination of a legal transaction with our company or another portal user. The legal basis for this results from Art. 6(1) Sentence 1(b) GDPR. Once the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further use or erased, unless we are entitled to retain the data for a longer period and process it as required in the respective context on the basis of a consent granted by you (e.g. consent to the use of your email address for sending promotional emails), a contractual agreement, a statutory authorisation (e.g. authorisation to send direct advertising) or on the basis of justified interests (e.g. retention for asserting claims).

Your personal data will be passed on to the extent necessary for the creation, execution or termination of legal transactions with our company (e.g. when passing data on to a payment service provider/a shipping company to process a contract with you). The legal basis for this processing results from Art. 6(1) Sentence 1(a), (b) GDPR. No further disclosure of your personal data to other persons, companies or bodies will occur unless you have effectively consented to such disclosure (e.g. to the carrying out of a credit check) or we are authorised or even obliged to disclose the data due to a court decision or an official order, by law or in order to pursue overriding legitimate interests (Art. 6(1) Sentence 1(c), (e) GDPR).

Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. After two years, we will restrict the processing and reduce the processing to compliance with our existing legal obligations.

X. PayPal PLUS

If you select the payment method “Direct debit via PayPal PLUS” or “Credit card via PayPal PLUS”, then in order to process your payment we will forward the personal data we collect to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). The legal basis for this processing is Art. 6(1) Sentence 1(b) GDPR (processing for the performance of a contract). We have no knowledge of how long PayPal stores data and have no way of influencing this.

PayPal will create an invoice based on the transmitted data and perform an identity and credit check if necessary. PayPal has a legitimate interest here in the transmission of the buyer’s personal data and processes this information in order to obtain information from credit reference agencies for purposes of identity and credit checks, Art. 6(1) Sentence 1(f) GDPR. This may be the entities specified here:

https://www.paypal.com/de/webapps/mpp/ua/third-parties-list?locale.x=de_DE.

The credit check uses mathematical and statistical methods to calculate a rating with regard to the probability of non-payment (this is known as calculating a scoring value). PayPal uses the calculated scoring value as the basis for its decision whether to provide the respective payment methods. A scoring value is calculated according to recognised scientific methods.

In addition to your address data, information about past payment behaviour and probability values on expected future payment behaviour are also included. We have no knowledge of how long PayPal stores data and have no way of influencing this.

You may at any time request access to the data stored by PayPal or that it be rectified or erased, and object at any time to the processing of your personal data by PayPal. However, PayPal remains entitled to process and pass on the customer data if this is necessary for contractual payment processing (Art. 6(1) Sentence 1(b) GDPR) or is required by law or an official or court order (Art. 6(1) Sentence 1(c) GDPR).

You can contact PayPal via the following contact form: https://www.paypal.com/de/selfhelp/contact/email/privacy. For more information about how PayPal processes your data, please refer to https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#r7.

XI. Participating in competitions/promotions

If you participate in competitions or other promotions (e.g. events, votes, prize competitions, contests), we process the personal data that you give us in this context to the following extent:

We use your personal master data to identify you and verify your age, and your address and contact data to contact you. Further data which you provide depending on the specific promotion (e.g. answers to competition questions, entries, application or voting information) will be processed by us in order to carry out the respective competition or promotion in accordance with the respective participation conditions, but in particular to select participants and determine winners.

In any case, the legal basis of this data processing is Art. 6(1) Sentence 1(b) GDPR .

We store the data for the duration of the competition/promotion or until a final winner has been determined and the prize has been successfully handed over. Section IX applies accordingly to the winner.

We may pass on the data to a service provider in order to carry out the competition or promotion. You will be informed of this separately. We conclude data processing agreements with such service providers in order to obligate them to observe a uniform level of data protection (Art. 28 GDPR).

We will pass the winner’s data (name, address data) on to a shipping company of our choice if the prize is handed over in this manner. The legal basis of this is Art. 6(1) Sentence 1(b) GDPR.

You may at any time exercise the rights described in Section V.

XII. Integration of third-party content

The website integrates third-party content such as videos, maps, RSS feeds and graphics from other websites. This integration always requires that the providers of this content (“third-party providers”) perceive the IP addresses of users. This is because without the IP address they would not be able to send the content to the browser of the respective user. As such, the IP address is required to display this content.

We endeavour to only use content from third-party providers who process the IP address solely for delivering the content. We do however have no influence over whether the third-party providers process the IP addresses, e.g. for statistical purposes. If we are aware of such activity, we inform you of this in the following.

Some of the third parties may process data outside the European Union.

You can object by installing a JavaScript blocker such as the browser plug-in NoScript (www.noscript.net) or disabling JavaScript in your browser. This may however result in functional restrictions on the website.

1. Twitch

The website uses plug-ins from Twitch. The Twitch website is operated by Twitch Interactive, Inc., located at: 225 Bush Street, 9th Floor, San Francisco, CA 94104 USA, help@twitch.tv and Amazon Europe Core S.à r.l. (Société à responsabilité limitée), 5 Rue Plaetis, L-2338 Luxembourg.

If you visit one of our web pages equipped with a Twitch plug-in, this establishes a connection to the Twitch servers. This informs the Twitch server which of our web pages you have visited. If you are logged in to your Twitch account, you will allow Twitch to directly associate your surfing behaviour with your personal profile. You can prevent this by logging out of your Twitch account.

Our use of Twitch is in the interest of an appealing presentation of our website. This constitutes a legitimate interest within the meaning of Art. 6(1) Sentence 1(f) GDPR.

Further information on how user data is handled can be found in Twitch’s privacy policy: https://www.twitch.tv/p/legal/privacy-policy/.

2. Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our website. This service is provided by Google.

reCAPTCHA is used to check whether data entered on the website (e.g. in a contact form) is provided by a person or by an automated program. To do this, reCAPTCHA analyses various aspects of the way in which the visitor to the website behaves. This analysis starts automatically as soon as the user accesses the website. For this analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. You will not be notified that an analysis is taking place.

The processing occurs on the basis of Art. 6(1) Sentence 1(f) GDPR. We have a legitimate interest in protecting our website from abusive automated spying and unsolicited email advertising (spam). We have no knowledge of how long reCAPTCHA stores data and have no way of influencing this.

You have the possibility to object to the processing of your data at any time. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the previous description of the functions. In such a case, it may not be possible to continue processing the request. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.

Further information about reCAPTCHA and Google’s privacy policy can be found via the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

3. Social network plug-ins

Social network plug-ins are integrated into our website. These are provided by the following providers:

- Facebook (the provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, data protection information at: https://www.facebook.com/privacy/explanation; http://www.facebook.com/about/privacy/your-info-on-other#applications; and http://www.facebook.com/about/privacy/your-info#everyoneinfo Facebook has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework; hereinafter: “Facebook”);
- Google (see ‘Definitions’, https://www.google.com/policies/privacy/partners/?hl=en. Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework);
- Twitter, Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (https://twitter.com/privacy. Twitter has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework);
- Twitch (see Section 1 for provider information).

The plug-ins can be recognised on our website by the aforementioned lettering or by small stylised symbols.

We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding page of our website. In addition, the data mentioned under ‘Access data’ is submitted.

In the case of Facebook and XING, according to the respective providers’ own information, IP addresses in Germany are anonymised immediately after their collection. By activating the plug-in, personal data about you is therefore transferred to the respective plug-in provider and processed there (in the USA in the case of US providers). Since the plug-in provider collects data via cookies in particular, we recommend that before clicking on the greyed-out box you delete all cookies using your browser’s security settings.

We have no influence on the data collected and processing procedures, and nor are we aware of the full scope of data processing, the purposes of processing, or the storage periods. We also have no information about the erasure of the data collected by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and processes this for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (including for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website.

The legal basis for the use of the plug-ins is Art. 6(1) Sentence 1(f) GDPR. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our website and make it more interesting for you as a user.

You have the right to object to the creation of these user profiles, although you must contact the respective plug-in provider to exercise this right. There are also various ways in which you can prevent the creation of user profiles and thus make use of your right to object:

- by setting your browser software accordingly; in particular, disabling third-party cookies means that you will not receive any ads from third-party providers;

- by disabling interest-based ads from providers who are part of the “About Ads” self-regulation initiative via the link http://www.aboutads.info/choices; please note that this setting will be erased if you erase your cookies.

The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data about you collected by us will be directly assigned to your existing account with that plug-in provider. If you click or tap on the activated button and, for example, share a link to the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts.

After using a social network, we recommend that you log out regularly, especially however before activating the button, as in this way you can avoid being assigned to your profile with the respective plug-in provider.

Here we use the so-called two-click solution. This means that, in principle, no personal data is passed on to the providers of the plug-ins when you initially visit our website.

4. Bookmarks

Bookmarks, e.g. to social networks such as Facebook.com, Twitter.com, Google+, allow you as a user of certain social networks to create links from our website on your social network profiles in order to bookmark them or share them with your social network contacts.

Bookmarks on our website can be recognised by the corresponding icons (e.g. “f”, “g+”) at the bottom of the page. When you open a page of our website, the bookmarks may place cookies on your device/in your browser, which are small text files with a sequence of numbers that make it possible to recognise the browser. If you are simultaneously logged in to one of the relevant social networks, this allows the operator of that social network to track which pages you visit, unless you have disabled the acceptance and storage of cookies in your browser settings. When you use bookmarks, information is sent to the respective social network.

We neither check nor can we be held responsible for comments or activities of persons who use bookmarks for this purpose. Persons who share our content via bookmarks are not entitled to speak for us and our website or to give such an impression vis-à-vis third parties.

The legal basis for the use of the bookmarks is Art. 6(1) Sentence 1(f) GDPR. We have no knowledge of how the operators of social networks further process data or how long they store it, and nor do we have any way of influencing this.

5. YouTube videos

Our website uses plug-ins from the video platform YouTube.de/YouTube.com, a service whose provider – represented by Google – is YouTube LLC (headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA; “YouTube”). The plug-ins allow us to embed visual content (“videos”) on this website that we have published on Youtube.de/Youtube.com.

The videos are all embedded in ‘extended privacy mode’, which means that no data about you as a user will be transferred to YouTube if you do not play the videos. Only when you play the videos is the following data transferred. We have no influence on this data transfer.

By visiting the website, YouTube receives the information that you have retrieved the corresponding subpage of our website. In addition, the data mentioned under ‘Access data’ is submitted. This occurs regardless of whether YouTube provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes it for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing is Art. 6(1) Sentence 1(f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of how long YouTube stores data and have no way of influencing this.

You have the right to object to the processing, although you must contact YouTube to exercise this right. You can disable or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use the full functionality of the website.

For more information about the purpose and scope of processing by YouTube, please refer to its privacy policy at https://www.google.de/intl/en/policies/privacy.

XIII. Services for statistical, analysis and marketing purposes

We use services from third parties for statistical, analysis and marketing purposes. This enables us to offer you a user-friendly, optimised experience when visiting the website. The third-party providers use cookies to control their services (see ‘Cookies’ above). Unless otherwise explained below, this does not involve the processing of personal data.

Some of the third-party providers offer users the option of directly objecting to the use of the respective feature, e.g. by placing an opt-out cookie.

If you activate such an opt-out cookie, the third-party provider will no longer process data about your usage behaviour in the future. It is also possible to merely object individually to a partial selection of external services. If you change the browser or device used or delete all cookies, you will be required to set the opt-out cookie again.

Furthermore, you can also object directly to the use of cookies via the opt-out platform of the organisation Bundesverband Digitale Wirtschaft e.V. (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/. More information about usage-based advertising and opt-out options can also be viewed via the following link: http://www.youronlinechoices.com/de/.

In the following, we inform you about the services from external providers currently in use on our website, about the purpose and scope of the respective processing in each case, and about how you can object.

1. Google Analytics

In order to tailor our website perfectly to your interests, we use Google Analytics, a web analytics service from Google. Google Analytics uses ‘cookies’ (see ‘Cookies’ above), which are stored on your device to enable the analysis of how you use the website. The information generated in this way about your use of this website is transferred to and stored by Google on a server in the USA.

However, if IP anonymisation is activated on this website, then within European Union Member States or in other member states of the European Economic Area Google will shorten your IP address before transferring it. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of this website, compiling reports for us on website activity, and providing us with other services relating to website usage and internet usage.

Google will not associate your browser’s IP address transmitted for Google Analytics purposes with any other data held by Google.

This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are further processed in abbreviated form, meaning that any association with individual persons can be ruled out. As far as the data collected about you relates to you personally, that relation is therefore excluded immediately and the personal data thus erased without delay.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics help us to improve our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing by Google Analytics is Art. 6(1) Sentence 1(f) GDPR. The Analytics cookies are deleted after 14 months at the latest.

You have the right to object. You can prevent the storage of cookies using the corresponding settings in your browser software; however, we would like to point out that if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent the recording of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the third-party provider Google, please refer to:

http://www.google.com/analytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/intl/en/policies/privacy.

2. Google Analytics features for display advertising

The Google Analytics tracking code implemented on this website supports display advertising. The remarketing function is used on this website as part of Google Analytics for display advertising. The ads are displayed on websites by third-party providers, including Google. The third-party provider Google uses cookies (see Section VII for more information). The combined use of first-party cookies (e.g. Google Analytics cookies) and cookies from third-party providers (e.g. DoubleClick cookies) allows precise and optimised targeting and distribution of ads based on previous visits to this website.

The following Google AdWords features are used on this website:

- Remarketing
- Interest categories
- Similar audiences
- Other types of interest-based advertising

We use these Google features in order to target visitors to this website later on with ads that correspond as closely as possible to the user’s specific interests, based on his or her previous internet use. We do not use cookies, remarketing lists or other anonymous IDs to collect personal information of users.

We also use the following Google Analytics features for display advertising:

- impression reports in the Google Display Network,
- integration of the DoubleClick Campaign Manager,
- Google Analytics performance reports based on demographics and interests.

These reporting features allow us to use and evaluate the data obtained through Google’s interested-based advertising as well as visitor data from third-party providers in Google Analytics. The data includes information such as age, gender and interests.

The data processing is based on Art. 6(1) Sentence 1(f) GDPR, as we have an overriding legitimate interest in optimising our ads.

You can disable Google Analytics for display advertising in the Google Ad Settings manager or adjust ads in the Google Display Network at any time – simply view your ad settings at https://www.google.de/settings/ads.

XIV. Amazon CloudFront/content delivery network (CDN)

Our website downloads the JavaScript code of Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108, USA (“Amazon CloudFront”/content delivery network (CDN)). Amazon CloudFront/content delivery network (CDN) is an online service that enables us to deliver static and dynamic web content such as HTML, CSS, .js and image files faster to website users. CloudFront provides the contents of the website via a worldwide network of data centres known as edge locations. When a user requests content provided through CloudFront, they are directed to the edge location with the lowest latency, thus allowing the best possible performance when providing the content.

If JavaScript is enabled in your browser and you have not installed a JavaScript blocker, our browser may transmit personal data to Amazon CloudFront/content delivery network (CDN).

We do not know what data Amazon CloudFront/content delivery network (CDN) links to the data received or for what purposes Amazon CloudFront/content delivery network (CDN) uses this data.

The data processing is based on Art. 6(1) Sentence 1(f) GDPR, as we have an overriding legitimate interest in optimising the usability of our website.

For further information, please refer to the Amazon CloudFront/content delivery network (CDN) privacy policy: https://aws.amazon.com/de/privacy/?nc1=f_pr.

In order to prevent the execution of JavaScript code from Amazon CloudFront/content delivery network (CDN) altogether, you can install a JavaScript blocker (e.g. http://www.noscript.net or http://www.ghostery.com).

XV. Login with Twitch/Twitter/YouTube account

We offer users the possibility to log in on our website using their access data from the following networks:

- Twitch.tv (see above for provider information), https://www.twitch.tv/p/legal/privacy-policy;
- YouTube.com (see above for provider information), https://policies.google.com/privacy?hl=de&gl=de;
- Twitter.com (see above for provider information), https://twitter.com/privacy.

This does not then require additional registration on our website. To log in, the users may be redirected to the network’s website, where they can log in with their network access data. This will link the users’ network profiles and our service. This link means that we automatically receive from the network the information that you have voluntarily provided there (in particular your email address). We use this information in order to be able to identify you when you use our website.

The legal basis for the data processing in this regard is Art. 6 (1) Sentence 1(b), (f) GDPR, as we have an overriding legitimate interest in providing a user-friendly website with simplified registration. We limit the data exchanged with the network to the minimum necessary to use this login option.

You always have the alternative option of registering directly with us in order to avoid such a transmission of data. For further information about privacy settings on these networks, please refer to the networks’ privacy policies, links to which can be found above.

XVI. Email marketing

a) We reserve the right to process the email address provided by you in accordance with the statutory provisions in order to send you, among other things, the following content by email whilst or after processing the contract, unless you have already objected to this processing of your email address:

- further interesting offers,
- further offers of the sponsors who organised the giveaway,
- technical information.

We perform this processing to maintain customer relations and to optimise our service. We will erase your data if you object to the processing, e.g. by clicking on the unsubscribe link in the newsletter, but no later than 1 year after the last complete termination of a contract.

If it is not essential to send information electronically for contract processing (e.g. email with payment information), the legal basis for processing is Art. 6(1) Sentence 1(f) GDPR. If we do not make use of this reservation of the right to conduct direct advertising for the first time within six months after receipt of the email address, this option lapses.

We would like to point out that you can object to receiving direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. To do this, click on the unsubscribe link in the newsletter or send us your objection to the contact data provided under ‘Responsible provider’.

b) The newsletter is sent via “Sendy”, a newsletter mailing platform hosted in our data centre. The email addresses of our newsletter recipients and their other data, described earlier, are stored on our servers in Frankfurt am Main. To send emails, Sendy uses Amazon Cloud Service SES data centre US West Oregon (a service of Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA).

The newsletters contain a web beacon, i.e. a pixel-sized file that is retrieved from the Sendy server when the newsletter is opened. When the newsletter is retrieved in this way, technical information, for example about the browser and your system, is initially collected. The statistical surveys include determining whether the newsletters are opened, when they are opened and which links are clicked on. For technical reasons, it is true that this information can be assigned to the individual newsletter recipients. However, it is not our aim to observe individual users. Instead, the evaluations serve to allow us to recognise the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.

Our intention here is to analyse the use of and to optimise the email advertising we send you. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR.

You can object at any time by clicking on the separate unsubscribe link provided in each newsletter or by informing us using the contact details provided under ‘Responsible provider’. You can also prevent tracking by disabling the display of images in your email client by default. This will mean that the newsletter will not be displayed completely and you may not be able to use all functions. If you choose to display the images manually, the above tracking will take place.

XVII. Amazon and eBay affiliate programmes

We are also members of the Amazon EU partner programme (Amazon EU S.à. r.l, Amazon Services Europe S.à. r. l. and Amazon Media EU S.à. r.l., all three of which are headquartered at 5, Rue Plaetis, L-2338 Luxembourg; email: ad-feedback@amazon.de; hereinafter referred to as “Amazon”), which was designed to provide a medium for websites that can be used to earn advertising refunds by placing ads and links to Amazon.de. By participating in this programme, we are pursuing the interest of showing you ads that are of interest to you and making our website more interesting for our users.

In order to provide the ads, statistical information is collected about you, which is processed by our advertising partners. By visiting the website, Amazon receives the information that you have retrieved the corresponding page of our website. For this, Amazon determines your requirements via web beacons and places a cookie on your device if necessary. The data mentioned under ‘Access data’ is transmitted. We have no influence on the data collected, and nor are we aware of the full scope of data processing or the storage period. If you are logged in to Amazon, your data may be directly associated with your account there. If you do not want the data to be associated with your Amazon profile, you must log out. It is possible that your data will be passed on to Amazon’s contractual partners and to authorities.

We have no influence on the data collected, and nor are we aware of the full scope of data processing. The data will be transferred to the USA and evaluated there. The legal basis for the processing of your data is Art. 6(1) Sentence 1(f) GDPR. We have no knowledge of how long Amazon stores data and have no way of influencing this.

There are various ways in which you can prevent the installation of cookies for the Amazon partner programme:

- by setting your browser software accordingly; in particular, disabling third-party cookies means that you will not receive any ads from third-party providers;
- by disabling interest-based ads at Amazon via the link http://www.amazon.de/gp/dra/info;
- by disabling interest-based ads from providers who are part of the “About Ads” self-regulation initiative via the link http://www.aboutads.info/choices; please note that these settings will be erased if you erase your cookies. We would like to point out that if you do so you may not be able to use the full functionality of this service.

For further information about this data processing by Amazon, please refer to the company’s privacy policy at www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401 and at http://www.amazon.de/gp/BIT/InternetBasedAds.

Amazon has subjected itself to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Copyright © by Spirit Legal LLP