Privacy policy
I. General information
Thank you for your interest in our website and welcome! Below we explain which personal data we collect and process when you use our services or make use of our offers.
Our standard
The protection of your privacy is of the utmost importance to us. For this reason, compliance with the statutory provisions on data protection is a given for us. However, it is also important to us that you know at all times which personal data we collect and why, and how we process it. We will also be happy to explain to you what rights you have and how you can exercise them.
What is personal data?
In short, anything that can be used to identify you as an individual person, whether through the information itself or in connection with other information. Examples of this are your name, your e-mail address or even a customer number, but also the time at which you visit our website, if this is stored together with your IP address. We always endeavour to collect as little personal data as possible. At the same time, we inform you in detail in this document about your personal data, if we collect any.
Why is this document so long?
The legislator requires that we describe all personal data to you individually,
- What personal data we collect (= type of data collected)
- Which law, regulation or provision allows us to do this (= legal basis)
- Why we collect this data (= purpose of use)
- What exactly happens to your data (= type of processing)
- How long we store your personal data
- Which rights you have in relation to your personal data (= data subject rights)
1. Responsible body & company data protection officer
We are responsible within the meaning of the European General Data Protection Regulation (GDPR):
astragon Development GmbH
Münsterstraße 5
HAMTEC House 2b
59065 Hamm
E-Mail: info@astragon-development.de
Homepage: http://www.astragon-development.de
For all enquiries regarding data protection, please contact our company data protection officer. You can reach the data protection officer at: data@independent-arts-software.de
2. Legal basis
We collect and process personal data based on the following legal bases:
- Consent pursuant to Article 6 para. 1 lit. a of the General Data Protection Regulation (GDPR). Consent is a declaration of intent. This can be given in writing in the form of a declaration or by any other unambiguous affirmative act. Either way, consent must be voluntary, apply to a specific case and unequivocally express that the data subject agrees to the processing of their personal data. To this end, the data subject must be adequately informed and understand the consent.
- Necessity for contract fulfilment or implementation of preparatory measures pursuant to Article 6 para. 1 lit. b GDPR.
This means: the data is required so that we can fulfil our contractual obligations towards you or we need the data to prepare the conclusion of a contract with you. - Processing for the fulfilment of legal obligations pursuant to Article 6 para. 1 lit. c GDPR.
This means that we are required to process the data, e.g. due to a law or other regulations. - Processing to safeguard legitimate interests in accordance with Article 6 para. 1 lit. f GDPR
This means that the processing of data is necessary to protect our legitimate interests or those of third parties, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail.
We store and access information on your device based on the following legal bases:
- Consent pursuant to Section 25 para. 1 of the Telecommunications and Digital Services Data Protection Act (TDDDG).
3. Rights of data subjects
When it comes to your personal data, you are the data subject. You are entitled to the following rights with regard to data processing by us to the extent specified in the respective articles of the General Data Protection Regulation:
- Right to information in accordance with Art. 15 GDPR - i.e. the right to be informed by us about how your personal data is processed and which personal data is processed by us
- Right to rectification in accordance with Art. 16 GDPR - i.e. the right to demand the immediate rectification of incorrect personal data concerning you, including the completion of incomplete data
- Right to erasure ("right to be forgotten") in accordance with Art. 17 GDPR - i.e. the right to request the erasure of your personal data, provided that certain conditions are met
- Right to restriction of processing in accordance with Art. 18 GDPR - i.e. the right to request the restriction of the processing of your personal data, provided that certain conditions are met
- Right to data portability in accordance with Art. 20 GDPR - i.e. the right to request that you receive the personal data you have provided to us in a structured, commonly used and machine-readable format and the right to transmit this data to a third party, provided that certain conditions are met
- Right to object pursuant to Art. 21 GDPR - i.e. the right to object to the processing of your personal data if the processing is based on our legitimate interests, provided that certain conditions are met
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, work or the place of the alleged infringement if you believe that the processing of personal data relating to you infringes the GDPR.
4.Deletion of data and duration of storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
II. Specific data processing
1. Data collection when visiting the website
a) Scope of the data processing
When you visit our website, the following data will be gathered and saved by our web server:
- IP address
- Date and time of the request
- Time zone difference in relation to Greenwich Mean Time (GMT)
- The content of the request (specific page)
- The access status/http status code
- Amount of data transferred in each case
- The website from which the request came, i.e. the referrer URL
- Browser
- Operating system and its interface
- Language and version of the browser software.
The IP address or host name is only available to us in anonymised form in the log files. This data is stored in the log files of our system. This data is not stored together with other personal data of the user. Our websites are hosted by our hosting service provider Strato AG, which also processes this data for us.
b) Legal basis
The legal basis for the processing of the aforementioned data is Art. 6 para. 1 lit. f GDPR. The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in the functionality of our website and its availability, which fulfils the requirements of the users and takes their usage preferences into account.
The processing by the hosting service provider is based on Art. 28 para. 3 GDPR./p>
c) Purpose of the data processing
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The data is stored to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.
d) Duration of the storage
The log files are deleted from the system after 6 weeks at the latest. If there is a need to retain the data for the aforementioned purpose due to specific events, the data may be stored for longer. In any case, as already mentioned, the IP addresses of users are anonymised so that it is no longer possible to assign them to a specific user.
e) Right to objection and removal
The collection of data for the provision of the website and the storage of the data is absolutely necessary for the operation of the website. Consequently, the user has no option to object.
2. Contact via E-Mail
a) Scope of the data processing
It is possible to contact us via the e-mail addresses provided. In such cases, the personal data transmitted with the e-mail will be stored.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
b) Legal basis
The legal basis for the processing of the data transmitted in the course of making contact is Article 6(1)(f) GDPR and, where applicable, also Article 6(1)(a) GDPR. If the contact aims at concluding a contract or relates to an existing contractual relationship, the additional legal basis for processing is Article 6(1)(b) GDPR.
The legitimate interest within the meaning of Article 6(1)(f) GDPR lies in responding to customer inquiries or general contact requests. The storage of data on our servers is based on Article 28 GDPR.
c) Purpose of the data processing
The purpose of data storage is to make contact at the request of the communication partner.
d) Duration of the storage
The data will be stored for as long as is necessary to respond to the inquiry. If the communication constitutes a commercial letter subject to retention under commercial or tax law, it will be stored for the legally required retention period.
e) Right to objection and removal
The user has the option at any time to revoke their consent to the processing of personal data with effect for the future or to object to further use in accordance with the above-mentioned processing purposes. The objection can be sent by e-mail to data@independent-arts-software.de. Deletion can only take place if we no longer need to store the message or if it is no longer required for warranty purposes; in this case, however, the data will be blocked for any other use. In such a case, the conversation cannot be continued.
3. YouTube embedded
a) Scope of the data processing
We embed videos from Youtube.com on our websites. In this case, this content is not initially loaded. Only when you click on a correspondingly labelled link with information about the respective provider of the integrated content, this content will be loaded. This establishes a direct connection to the web server of the respective provider and the respective provider can process your personal data. Please refer to the provider's privacy policy to find out what data is involved:
Google / YouTube provides data protection information here: https://policies.google.com/privacy
b) Legal basis
The legal basis for enabling data collection by the respective content provider is your express consent pursuant to Art. 6 para. 1 lit. a GDPR by clicking on the corresponding link despite a corresponding notice.
c) Purpose of the data processing
The purpose of enabling data collection by the content providers is to enable access to further content of interest to the visitor on our website.
d) Duration of the storage
We do not store any data.
e) Right to objection and removal
You can decide for each embedded content whether you want to give the corresponding consent. Claims for objection or deletion must then be addressed to the data controller.
4. Social media presence
a) Scope of the data processing
We maintain publicly accessible profiles on various social media platforms. Visiting these profiles initiates a number of data processing activities. These processing activities may be required for certain functionalities of our social media presence. Such functionalities may be unavailable or only partially available to users if they do not provide their personal data.
When users visit our profiles, their personal data is not only collected, used, and stored by us, but also by the respective social media platform providers. This occurs even if users do not have an account with the respective platform. The specific processing operations and their scope vary by provider and are not necessarily transparent to us. Details regarding the collection, processing, and use of personal data by the respective platform can be found in their privacy policies.
We do not have access to the databases of the social media providers.
b) Legal basis
The legal basis for the data processing is Article 6(1)(a) and (f) GDPR. These processing operations serve our legitimate interest (and yours) in enabling interaction with you and other players and in tailoring the user experience to the respective audience when visiting our social media profiles. We share joint controllership with the social media providers pursuant to Article 26 GDPR.
c) Purpose of the data processing
The purpose of data processing is to enable interaction with you and other players regarding our game and to enhance the user experience in a manner appropriate to our audience on our social media profiles.
d) Duration of the storage
The duration of storage for data processed via our social media profiles is determined by the privacy policies of the respective social media providers.
e) Right to objection and removal
You can delete your messages or your customer account on the respective social media platforms at any time, or you may contact the data protection contact points specified in the privacy policies of the respective providers.