This privacy policy applies to all websites and apps concerning the game "EquinePassion" operated by Natalie Chrost, in the following "operator", Schützenplatz 11D, 38461 Danndorf.
The following legal bases are relevant:
National data protection regulations in Germany: In addition to the data protection regulations of the Basic Data Protection Regulation, national regulations on data protection apply in Germany. This includes in particular the law on protection against misuse of personal data in data processing (Federal Data Protection Act - BDSG). In particular, the BDSG contains special provisions on the right to information, the right to deletion, the right of objection, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases, including profiling. Furthermore, it regulates data processing for purposes of the employment relationship (Section 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships and the consent of employees. Furthermore, state data protection laws of the individual federal states may apply.
You will find more information about your rights at the end of this declaration!
Please read this Privacy Policy carefully and only use the Website and the Game if you agree to this Privacy Policy and acknowledge that the operator may and will process data in accordance with this Privacy Policy.
1.
This privacy policy governs how the operator treats your personal data that she processes in the context of offering and operating the game "EquinePassion". At
support@equinepassion-browsergame.com you can contact the operator at any time. The operator has not appointed a separate data protection officer.
2.
The operator has committed herself to data economy and only processes data that you as a user voluntarily provide to EquinePassion or that must be saved for technical reasons.
The following data are processed:
When logging in, the IP addresses in encrypted form, in order to automatically compare them with other users and to detect fraudulent multi-accounts if necessary.
After voluntary indication the e-mail address. This is required for the purchase of a premium membership, trial members do not have to provide an email address. Only automatic
emails initiated by the user in the form of password recovery or invoices or purchase cancellations are sent. The mails are not visible to third parties and can be completely
deleted at any time in the account settings.
The addresses can be viewed by the operator from the technical service providers (server providers). However, these are only used for acts covered by the DSGVO.
Orders, invoice contents and payment allocation are carried out exclusively via user ID and invoice number. The names of the payers are displayed in the account history of payment
providers when payment is received. This data is not visible to anyone except the operator and employees of the payment provider and is not stored in the game's databases.
The operator stores the complete account history on a system used for bookkeeping in order to be able to hand it over to the tax offices and other authorized persons. The provider
PayPal offers its own privacy policy for its processing of data, about which you will be informed when you use the services of the provider. The data processed by PayPal includes
inventory data, such as name and address, bank data, such as account or credit card numbers, passwords, TANs and checksums, and contract, summary and recipient related information.
The information is necessary to carry out the transactions. However, the data entered will only be processed by PayPal and stored with them. The operator or any employee of the
operator receives account or credit card information, but only information confirming or denying payment for a premium service.
3.
If the option to purchase premium on invoice is used, the operator stores the invoice data exclusively for billing purposes and for the purposes of proper accounting and legal
obligations. So-called negative balances are stored until they are balanced by the user through advance payments. The operator also stores which account belongs to the same natural
person and which payment methods are used and the invoice status of the user.
4.
Data will only be stored to the extent that this is technically necessary or permitted by law. The data automatically sent by your browser is only collected and evaluated for
statistical purposes.
Cookies are only stored on your PC and evaluated by the operator to the extent that this is technically necessary (so-called session cookies).
Depending on whether the processing is based on consent or legal permission, you have the possibility at any time to revoke any consent given or to object to the processing of your
data by cookie technologies (collectively referred to as "opt-out"). You can initially declare your objection by means of the settings of your browser, e.g. by deactivating the use
of cookies (although this may also restrict the functionality of our online offer). An objection to the use of cookies for online marketing purposes can also be declared by means of
a variety of services. In addition, you can receive further notices of objection in the context of the information on the service providers and cookies used.
5.
Private messages are completely deleted as soon as they have been released for deletion by both conversation partners in the game. If one of the participants of the chat reports
harassment or the like, the dialogue can be viewed by supporters to verify the allegation. In the user profile, other players can see whether someone is currently online or on which
day they were last online.
6.
Under no circumstances will data be sold or alienated to third parties or passed on for the sole purpose of providing the services. Third party providers for the analysis of the
data are not used.
7.
In case of contacting the operator, for example for support services, the data of the requesting persons will be processed to the extent necessary to answer the contact requests and
possible requested measures. The answering of contact requests within the framework of contractual or pre-contractual relations is carried out in order to fulfil contractual
obligations or to answer (pre)contractual requests and otherwise on the basis of the legitimate interest in answering the requests.
8.
For the users of the Facebook fan page is subject to the privacy policy of the operating company Facebook Inc. without use of the fan page no data will be transferred to
Facebook Inc. by the operator. For this purpose, the operator has entered into a contract data agreement with Facebook in order to comply with the current case law of the
European Court of Justice.
In the case of requests for information and the assertion of the rights of the persons concerned, the operator points out that these can be most effectively asserted on Facebook.
Only Facebook has access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact the operator.
9.
Upon request, the operator will immediately delete personal data, if the deletion is not contrary to legitimate interests or if applicable data protection law or legal requirements
oppose the request for deletion. The operator will point out if a request for deletion would result in the discontinuation of the services to you as a user.
10.
In order to provide the game in a secure and efficient manner, the operator uses the services of one or more web hosting providers, from whose servers (or servers managed by them)
the online offer can be accessed. For these purposes, the operator may use infrastructure and platform services, computing capacity, storage space and database services as well as
security and technical maintenance services.
The data processed within the framework of the provision of the hosting offer may include all data concerning the users of the online offer, which are generated within the framework
of the use and communication. This regularly includes the IP address, which is necessary to deliver the contents of online offers to browsers, and all entries made within our online
offer or from websites.
The web hosting services used by the operator also include the sending, receiving and storing of emails. For these purposes, the addresses of the recipients and senders as well as
other information concerning the sending of emails and the contents of the respective emails are processed. The aforementioned data may also be processed for the purpose of SPAM
detection. The operator expressly states that emails on the Internet are generally not sent encrypted. As a rule, emails are encrypted in transit, but (unless an end-to-end
encryption method is used) not on the servers from which they are sent and received. The operator cannot therefore assume any responsibility for the transmission of emails between
the sender and the reception on its server.
The operator has concluded a data processing contract with the server provider, maxcluster GmbH.
11.
The operator collects data on every access to the server (so-called server log files). The server log files may include the address and name of the web pages and files called up,
date and time of the call-up, transferred data volumes, notification of successful call-up, browser type and version, the user's operating system, referrer URL (the previously
visited page) and, as a rule, IP addresses and the requesting provider.
The server log files can be used for security purposes, e.g. to avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks) and to ensure the
load of the servers and their stability.
12.
The operator takes reasonable precautions for the security of the stored data and has also instructed employees regarding data protection and precautions. Supporters of the game have
access to individual game data. These persons have been informed about the handling of data protection. The operator can, however, only be held responsible for possible damages in
case of unexpected data protection violations in case of gross negligence.
These measures shall include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as
access, input, disclosure, safeguarding of availability and segregation of data relating to them.
Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes in accordance with the principle of
data protection, through technology design and through data protection-friendly presettings.
13.
The operator can and will extend this privacy policy at any time as soon as changes occur. However, it is not obliged to inform individual users about every change. This privacy
policy is available without restriction on the game's website and can be viewed free of charge at any time. The operator is available at any time at the above e-mail address.
14.
The collected and processed data will be stored as long as the purpose of the contract requires it or as long as it is technically and legally necessary or as long as the respective
legal retention period (e.g. commercial and tax retention periods) exists. Billing data for payment transactions are thus stored until the expiry of these legal retention periods and
then deleted or destroyed. Data which are necessary for the pursuit of legal claims will be stored until the settlement of these legal claims. Data may be used in legal disputes if
necessary and permissible.
After expiry of all-time limits, the corresponding data is routinely deleted, provided that it is no longer required for the fulfilment or initiation of the contract and/or no
legitimate interest in further storage exists.
The applicable data protection law grants you, vis-à-vis the operator, comprehensive rights of data subjects (rights of information and intervention) with regard to the processing of your personal data, about which the operator informs you below:
Right of access under Art. 15 DPA: You have the right to obtain information about your personal data processed by the operator, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or the criteria for determining the storage period, the existence of a right of rectification, erasure, restriction of processing, opposition to processing, complaint to a supervisory authority, the origin of your data if not covered by the operator, the existence of automated decision-making, including profiling and, where applicable, meaningful information on the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees that apply under Art. 46 DPA when your data is transferred to third countries;
Right of rectification according to art. 16 DSGVO: You have the right to correct incorrect data concerning you and/or to complete incomplete data stored by the operator;
Right to deletion pursuant to Art. 17 DSGVO: You have the right to request the deletion of your personal data if the conditions of Art. 17 para. 1 DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
Right to limit processing in accordance with Art. 18 DPA: You have the right to request the limitation of the processing of your personal data as long as the accuracy of your data, which you dispute, is verified, if you refuse to have your data deleted because of unlawful processing and instead request the limitation of the processing of your data if you need your data for the assertion, exercise or defence of legal claims, after the operator no longer needs this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether justified reasons of the operator;
Right to be informed in accordance with Art. 19 DSGVO: If you have asserted the right of rectification, erasure or limitation of processing against the operator, she is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort. They shall have the right to be informed of such recipients.
Right to data transferability in accordance with Art. 20 DSGVO: You have the right to receive your personal data, which you have provided to the operator, in a structured, common and machine-readable format or to request that it be transferred to another person responsible, as far as this is technically feasible;
Right to revoke consents granted in accordance with Art. 7 Para. 3 DSGVO: You have the right to revoke at any time, with effect for the future, any consent to the processing of data that you have once granted. In case of revocation, the operator will immediately delete the data concerned, unless further processing cannot be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;
Right of appeal under Art. 77 DPA: Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of the DPA.
If the operator may, within the scope of a balancing of interests, process your personal data on the basis of an overriding legitimate interest, you have the right to object to such processing at any time for reasons arising from your particular situation, with effect for the future.
Exercise your right of objection, terminate the operator the processing of the data concerned. Further processing is reserved, however, if the operator can provide evidence of compelling reasons for processing which are worthy of protection and which outweigh its interests, fundamental rights and freedoms, or where the processing serves to assert, exercise or defend legal claims.
Your personal data will be processed by the operator processes personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. You may exercise your right to object as described above.
Exercise your right of objection, terminate the operator the processing of the data concerned for direct marketing purposes.
Status: October 2020