Privacy Policy

We run our websites according to the following principles:

We undertake to comply with the legal provisions on data protection and strive to always observe the principles of data avoidance and data minimization as well as transparency and other data protection principles.

1. Name and address of the person responsible and the data protection officer

(1) The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:

www.handy-games.com GmbH
Represented by Managing Directors Markus und Christopher Kassulke

I_Park Klingholz 13
97232 Giebelstadt
Deutschland
Tel.: 09334/ 9757 – 0
Fax: 09334/ 9757 – 19
E-Mail: info@handy-games.com
Webseite: https://handy-games.com

(2) The data protection officer of the person responsible is:

Thorsten Krietsch
Datenschutzbeauftragter (TÜV)

Carstennstraße 47
12205 Berlin

E-Mail: mail@thorsten-krietsch.de
Tel.: + (0)30 47 03 32 15
Mobil: + (0)151 22 08 88 55
Fax: +49 (0)30 50 17 56 50
Internet: https://www.tedeka-consulting.com

2. Explanation of terms

We have designed our data protection declaration according to the principles of clarity and transparency. The definitions of the GDPR shall apply. Please find the definitions here or under https://dsgvo-gesetz.de/art-4-dsgvo/.

3. Legal basis for processing personal data

We only process your personal data such as your surname and first name, your e-mail address and IP address, etc. if there is a legal basis for this. According to the General Data Protection Regulation, the following regulations in particular come into consideration here:

  • Article 6 (1) sentence 1 lit. a GDPR: The data subject has given their consent to the processing of their personal data for one or more specific purposes.
  • Article 6 (1) sentence 1 lit. b GDPR: Processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures that are carried out at the request of the data subject.
  • Article 6 paragraph 1 sentence 1 lit. c GDPR: The processing is necessary to fulfill a legal obligation to which the person responsible is subject
  • Article 6 paragraph 1 sentence 1 lit. d GDPR: Processing is necessary to protect the vital interests of the data subject or another natural person
  • Art. 6 (1) sentence 1 lit. e GDPR: the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible

However, at the relevant points in this data protection declaration, we will always point out the legal basis on which the processing of your personal data takes place.

4. Disclosure of personal data

The transfer of personal data is also processing within the meaning of the previous paragraph 3. However, at this point we would like to inform you separately about the topic of transfer to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.

It will therefore only be passed on to third parties if there is a legal basis for processing. For example, we pass on personal data to persons or companies who work for us as processors in accordance with Art. 28 GDPR. Processor is anyone who processes personal data on our behalf – i.e. in particular in an instruction and control relationship with us.

In accordance with the requirements of the GDPR, we conclude a contract with each of our processors (due to Art. 28 clause 3 GDPR) in order to oblige them to comply with data protection regulations and thus to provide your data with comprehensive protection. The contract can be proven at any time upon first request.

If we work with third parties as joint controllers within the meaning of Art. 26 GDPR, we conclude a contract within the meaning of Art. 26 clause 1 GDPR, which can be verified upon first request.

5. Duration of Storage and Deletion

Your personal data will be irretrievable deleted by us if they are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation reasons of public interest or to assert, exercise or defend legal claims. In the event of an assertion or defense, the statutory limitation periods under German law apply.

6. SSL Encryption

For security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator, this site uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL encryption is activated, the data that you transmit to us cannot be read by third parties.

7. Collection and storage of personal data and their type and purpose of use

1. Newsletter
Content of the newsletter and registration data
We will only send you a newsletter if you order it from us and have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 lit. The contents of the newsletter are specifically described when registering for the newsletter. To register for the newsletter, it is sufficient to provide your e-mail address. If you provide further voluntary information such as your name and/or your gender, this will only be used to personalize the newsletter addressed to you.
Double opt-in and logging
For security reasons, we use the so-called double opt-in procedure to register for our newsletter so that nobody can register with someone else’s e-mail address. Therefore, after registering for our newsletter, you will first receive an e-mail asking you to confirm your registration. This only becomes effective once the registration has been confirmed.
Furthermore, your registration for the newsletter will be logged. The logging includes the storage of the registration and confirmation time, your specified data and your IP address. If you make changes to your data, these changes will also be logged.
Revocation
If you no longer wish to receive our newsletter, you can revoke your consent at any time for the future. To do this, you can click on the unsubscribe link at the end of each newsletter or send us an email to the following email address: info@handy-games.comBy withdrawing your consent, the legality of the consent processing that took place up until the revocation is not affected.

Legal basis for the data processing is your consent due to Art. 6 clause 1 lit. a GDPR.

2. Contact form / email contact
We provide you with a form on our website so that you can contact us at any time. In order to use the contact form, it is necessary to provide a name for a personal address and a valid e-mail address for contacting us, so that we know who sent the request and can also process it. If you send us requests via the contact form, Your details from the request form, including the contact data you provided there and your IP address in accordance with Article 6 Paragraph 1 Sentence 1 lit. b and f GDPR, will be used to carry out pre-contractual measures that are based on your request or for perception processed in our legitimate interest, namely to carry out our business activities. You are also welcome to send us an e-mail instead using the e-mail address given on our website. In this case, we store and process your e-mail address and the information you provide in the e-mail in accordance with Article 6 Paragraph 1 Sentence 1 lit. b and f GDPR in order to process your message The associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.

8. Cookies

We use cookies on our website. Cookies are small data packages that your browser creates automatically and that are stored on your end device when you visit our website. These cookies are used to store information related to the end device used. Personal identification of your person is not possible through the cookies.

The data processed by cookies are required for the stated purposes to protect our legitimate interests and those of third parties in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.

Most browsers automatically accept cookies based on the browser settings. However, you can configure your browser in such a way that either no cookies are stored on your device at all or at least a message is displayed before a new cookie is stored. If you completely deactivate the cookie function in your browser, you may not be able to use all the functions of our website.

You also have the option of individually adjusting your cookie settings using our cookie consent tool. You can access our Cookie Consent Tool here.

Below we explain the different types of cookies that we use.

  1. Session cookies
    In order to make the use of our offer more pleasant for you, we use so-called session cookies to recognize that you have already visited individual pages on our website. These session cookies are automatically deleted after you leave our site.
  2. Temporary cookies
    We also use cookies that allow us to recognize you when you visit our website and use our services again. In this way, you do not have to repeat the entries and settings you made last time. These temporary cookies are stored on your end device for a specific period of time.
  3. Cookies for marketing and optimization purposes
    Finally, we also use cookies for marketing and optimization purposes. These record the use of our website statistically and are evaluated for the purpose of optimizing the offer for you. The cookies enable your internet browser to be recognized when you visit our website again. These cookies are automatically deleted after a defined period of time.

9. Video Embedding

YouTube

Our website uses the YouTube plugin, which is operated by YouTube, LLC (901 Cherry Ave., San Bruno, CA 94066, USA). YouTube is a service provided by Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland Tel: +353 1 543 1000. Fax: +353 1 686 5660. However, your data may be transferred to Google LLC, Mountain View, California. United States is coming.Google Inc. is certified under the EU US Data Privacy Framework (decision of the EU Commission of July 10, 2023 in accordance with Art. 45 GDPR): https://www.dataprivacyframework.gov/s/participant-search

If you activate the YouTube plugin during your visit, a connection to the YouTube servers will be established and the YouTube server will be informed which of our pages you have visited. This allows YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your member account before visiting our website.
Further information on the handling of user data can be found in YouTube’s data protection declaration at:

https://policies.google.com/privacy?hl=en

The legal basis results from Art. 6 Para. 1 S. 1 lit. f GDPR. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR.

10. Use of Google AdMob

We sometimes use Google AdMob, a service for personalized marketing to the user. AdMob is a service provided by Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland Tel: +353, 543 1000. Fax: +353 1 686 5660. However, your data may be transferred to Google LLC, Mountain View, California, United States.

Google Inc. is certified under the EU US Data Privacy Framework (decision of the EU Commission of July 10, 2023 in accordance with Art. 45 GDPR):
https://www.dataprivacyframework.gov/s/participant-search

According to the decision of the EU Commission, this is a data transfer to a third country with an appropriate level of protection.

The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR, i.e. our legitimate interest in providing you with a pleasant user experience and in individualizing and improving our services for you.

Further information on how to handle user data can be found in AdMob’s privacy policy at:
https://admob.google.com/intl/de/home/

11. Rights of the data subject

You have the following rights:

1. Information
According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about

  • the processing purposes
  • the categories of personal data
  • the recipients or categories of recipients to whom your data has been or will be disclosed
  • the planned storage period or at least the criteria for determining the storage period
    the existence of a right to rectification, erasure, restriction of processing or objection
  • the existence of a right of appeal to a supervisory authority
  • the existence of a right of appeal to a supervisory authority
  • the origin of your personal data, if they were not collected from us
  • the existence of automated decision-making including profiling and, where appropriate, meaningful information about its details

2. Correction
According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about

  • the processing purposes
  • the categories of personal data
  • the recipients or categories of recipients to whom your data has been or will be disclosed
  • the planned storage period or at least the criteria for determining the storage period
    the existence of a right to rectification, erasure, restriction of processing or objection
  • the existence of a right of appeal to a supervisory authority
  • the existence of a right of appeal to a supervisory authority
  • the origin of your personal data, if they were not collected from us
  • the existence of automated decision-making including profiling and, where appropriate, meaningful information about its details

3. Deletion
According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about

  • the personal data are still necessary for the purposes for which they were collected or otherwise processed
  • to exercise the right to freedom of expression and information
  • to fulfill a legal obligation that requires processing under European Union or Member State law to which the controller is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been delegated to the controller
  • for reasons of public interest in the field of public health in accordance with Art. 9 (2) lit. h and i and Art. 9 (3) GDPR
  • for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the law mentioned under section a) is likely to make it impossible or seriously impair the achievement of the objectives of this processing

4. Restriction of processing
According to Art. 18 GDPR, you can request the restriction of the processing of your personal data for one of the following reasons:

  • You contest the accuracy of your personal data.
  • The processing is unlawful and you oppose the erasure of the personal data.
  • We no longer need the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims.
  • You object to the processing in accordance with Art. 21 (1) GDPR.

5. Information
If you have requested the correction or deletion of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 Para. 1 and Art. 18 DSGVO, we will inform all recipients to whom your personal data has been disclosed, it unless this proves impossible or involves a disproportionate effort. You can ask us to inform you of these recipients

6. Transmission
You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format.
You also have the right to request the transmission of this data to a third party, provided that the processing was carried out using automated procedures and is based on consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a or Article 9 Paragraph 2 Letter a or based on a contract in accordance with Article 6 Paragraph 1 Sentence 1 lit. b GDPR.

7. Withdrawal
According to Art. 7 Para. 3 GDPR, you have the right to withdraw your consent to us at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.

8. Complaints
According to Art. 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR.

9. Objection
If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying the particular situation. If you would like to make use of your right of revocation or objection, an e-mail to info@handy-games.com is sufficient.

10. Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which has legal effect on you or significantly affects you in a similar way. This does not apply if the decision

i. is necessary for entering into, or the performance of, a contract between you and us
ii. is permitted on the basis of legislation of the European Union or the member states to which we are subject and this legislation contains appropriate measures to protect your rights and freedoms and your legitimate interests
iii. with your express consent
iv. However, these decisions must not be based on special categories of personal data according to Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases referred to in i) and iii), we take appropriate measures to protect your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to contest the decision heard

12. Changes to the Privacy Police

Should we change the data protection declaration, this will be indicated on the website.

Version: 15th January 2024