Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data means any data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Nikola-Nino Maslovaric, Koigra Games, Lilistr. 27, 63067 Offenbach am Main, Germany, Tel.: 015901960812, Email: hello@koigra-games.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website purely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the server of the site (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to us). You can recognize an encrypted connection by the “https://” string and the lock icon in your browser’s address bar.
3) Hosting & Content Delivery Network
For hosting our website and displaying site content, we use a provider who performs their services themselves or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your device. Some cookies are automatically deleted after closing the browser (“session cookies”), while others remain on your device longer and allow storage of page settings (“persistent cookies”). The storage duration of persistent cookies can be found in your web browser’s cookie settings.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of given consent, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contacting Us
When contacting us (e.g., via contact form, email, or phone), personal data is collected. The data collected in the case of using a contact form is visible in the respective form. This data is stored and used solely for the purpose of responding to your request or for contacting you and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted once your inquiry has been fully processed, provided there are no statutory retention obligations.
6) Use of Customer Data for Direct Advertising
6.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed that you agree to receive newsletters. We will then send you a confirmation email asking you to confirm your subscription by clicking the appropriate link.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address entered by your internet service provider (ISP) as well as the date and time of registration to trace possible misuse of your email address at a later time. The data collected by us when registering for the newsletter will be used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the above-mentioned controller. After unsubscribing, your email address will be immediately removed from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and of which we inform you in this statement.
6.2 Amazon SES
The sending of our email newsletters is carried out via this provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA
Based on our legitimate interest in effective and user-friendly newsletter marketing, we forward your data provided during newsletter registration to this provider in accordance with Art. 6 para. 1 lit. f GDPR so that they can send the newsletter on our behalf.
With your express consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also conducts statistical success analyses of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated but not merged with other datasets.
You may revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects our website visitors’ data and prohibits disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
7) Web Analytics Services
WP Statistics
This website uses the web analytics service of the following provider: VeronaLabs OÜ, Tornimäe 5, 10145, Tallinn, Estonia.
This service is self-hosted on our servers, so no information is transmitted to the provider at any time.
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about your device such as the IP address and browser information, to evaluate them for statistical analysis of user behavior on our website and to create pseudonymized usage profiles. Among other things, this makes it possible to evaluate movement patterns (“heatmaps”), which show the duration of page visits and interactions with page content (e.g., text input, scrolling, clicks, and mouseovers). Pseudonymization generally excludes direct personal identification. There is no merging with other personal data collected elsewhere.
All of the above-described processing, especially reading or storing information on the device used, is carried out only if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the “cookie consent tool” provided on the website.
8) Tools and Miscellaneous
8.1 Cookie Consent Tool: Real Cookie Banner
To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and the related consents, we use the consent tool “Real Cookie Banner.” Details about the functionality of “Real Cookie Banner” can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal bases for processing personal data in this context are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.
8.2 Lexware Office
For accounting purposes, we use the cloud-based accounting software service of the following provider: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany.
The provider processes incoming and outgoing invoices and, if applicable, our company’s bank transactions to automatically capture invoices, match them to transactions, and generate financial accounting in a partially automated process.
If personal data is processed in this context, it is done on the basis of our legitimate interest in efficient organization and documentation of our business transactions.
9) Rights of the Data Subject
9.1 The applicable data protection law grants you the following rights regarding the processing of your personal data by us, with reference to the legal basis for each right:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH ADVERTISING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
10) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the processing purpose, and—where applicable—also by the respective statutory retention period (e.g., commercial and tax retention periods).
If personal data is processed on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data will be stored until you revoke your consent.
If statutory retention periods apply for data processed within the scope of contractual or quasi-contractual obligations under Art. 6 para. 1 lit. b GDPR, the data will be routinely deleted after expiry of the retention periods, unless it is still required for contract fulfillment or initiation and/or there is a legitimate interest in continued storage.
If personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If personal data is processed for direct marketing purposes based on Art. 6 para. 1 lit. f GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the specific processing situations in this policy, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
