Privacy Policy

General Information

1. Controller

Below we explain which personal data we collect and process when you use our services and offers. We are:


Chilipixel Games GmbH
Brunnenstr. 11
91094 Langensendelbach
Germany

Email: contact@chilipixel-games.com


2. Legal Basis

As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation. We collect and process personal data based on the following statutory regulations:

‍
  • Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent for a certain case, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
  • Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
  • Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.

3. Rights of affected

You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:

‍
  • Right of access by the data subject to Art. 15 GDPR
  • Right to rectification according to Art. 16 GDPR
  • Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR
  • Right to restriction of processing according to Art. 18 GDPR
  • Right to data portability according to Art. 20 GDPR
  • Right to object according to Art. 21 GDPR
    • ‍

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.

4. Data Erasure and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage lapsed. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

Concrete Data Processing

5 Visit of the Website

When you visit our website, we automatically collect information that your browser transmits to our server.

5.1 Scope of data processing

The data collected includes:

  • Requested website or file
  • Referrer (URL from wich the web page was requested)
  • Browser type and version
  • Operating system used
  • Device type used
  • Time and date of access
  • Anonymized IP address

Data is stored in the log files of our system. This data is not stored together with other personal data of the user. The storage takes place on rented servers within the European Union.

5.2 Legal Basis

The legal basis for processing the data is Art. 6 para. 1 (f) GDPR. The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability. The legal basis for the storage of the data on the rented servers is Art. 28 para. 3 GDPR.

5.3 Purpose of the data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session. Furthermore, the IP address is recorded to prevent attacks on the website. The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

5.4 Duration of storage

The logfiles will be deleted after seven days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events. The IP address is kept for 14 days for the purpose of defence against attacks on the website and then deleted. Storage beyond that is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment to a specific user is no longer possible.

5.5 Objection and possibility of removal

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation and protection of the website. There is consequently no possibility of objection by the user.

6 Hosting Provider

We host our website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter: Hetzner). When you visit our website, Hetzner collects various log files including your IP addresses. The use of Hetzner is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

‍

6.1 Order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

‍ BACK