Grandginrummy.com Website Privacy Policy

This is the Privacy Policy for the www.grandginrummy.com website. The Privacy Policy of the Grand Gin Rummy App can be found here.

We take data protection seriously and respect your privacy. In this privacy policy we explain what data we collect within the scope of our online offer and how we process this data. We refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR) regarding the terminology used, i.e. "personal data" or "processing".

Overview

• Name and address of the Controller
• Name and address of the Data Protection Officer
• What data do we collect?
• What do we use your data for?
• How do we protect your data?
• Will your data be shared with third parties?
• Transfers to third countries
• What are your rights?
• When will your data be deleted?
• Communication
• Collection of access data and log files
• Use of Matomo
• Use of cookies
• Protection of minors
• Changes and updates to the Privacy Policy
• Contact

Name and address of the Controller

The Controller in regard to GDPR and other national data protection laws of member states as well as other data protection regulations is:

GameDuell GmbH
Taubenstr. 24-25
10117 Berlin, Germany
Phone: +49 (0) 30 288 768 661
Email: dataprotection@grandginrummy.com

Name and address of the Data Protection Officer:

Berit Schubert
DataSolution LUD GmbH
Isarstr. 13
D-14974 Ludwigsfelde, Allemagne
Phone.: +49 (0) 3378 205729
Email: mail@ds-lud.de
Web: https://www.datenschutzberater365.de

General information regarding data processing

What information do we collect?

• Usage data (websites visited, interest in content, and access times)
• Meta / Communication data (IP address)

No special categories of data are processed (GDPR Art. 9(1)).

Categories of data involved:

• Visitors of the website
• In the following, we refer to subjects as "users"

What do we use your data for?

• Responding to inquiries and communicating with users
• To prevent fraud and misuse
• For security purposes

How do we protect your data?

In accordance with GDPR Article 32, we take appropriate technical measures that take technical standards, implementation costs, and the nature, scope, circumstance, and purpose of processing as well as the likelihood and severity of the risk to your rights and freedoms into consideration. Technical and organisational measures are used to ensure a level of appropriate protection to avoid any possible risks. Measures include ensuring confidentiality, integrity, and availability of data by controlling physical access to the data, as well as its access, input, disclosure, the securing of availability, and its separation. We have also set up procedures to ensure data subject rights, data deletion, and data vulnerability. In accordance with GDPR Article 25, the protection of personal data is already considered from the development phase (while selecting hardware, software, and others) on.

Your data is protected electronically, technically, contractually, and administratively against misuse and loss through various measures. We use security techniques (including SSL encryption, cryptography) to protect your data against access by unauthorized third parties.

Will your data be shared with third parties?

If your data is disclosed to a contracted partner or third party, then this is done under a legal contract and is protected.

In order to be able to offer you an optimal service, we use a number of contracted service providers who work on our behalf and in accordance with GDPR Article 28.

Transfers to third countries

If we process any data in a third country (outside of the European Union (EU) or the European Economic Area (EEA)), or this happens in the context of third party services, or the procurement or transmission of data to third parties, then this will only be done if it is necessary to fulfil our (pre-) contractual obligations, based on your consent, due to a legal obligation or based on our legitimate interests. Subject to legal or contractual permissions, we only process data in a third country if certain conditions of GDPR Article 44 are met. This means that processing will be done only when certain requirements, such as meeting officially recognised EU level standards of data protection or observing officially recognised special contractual obligations (so-called "standard contractual clauses").

What are your rights?

You have a right to freely access your stored data as well as the right to correct, delete, or block any data. You can also object to the transference of this data at any time. Please contact us for further information or to withdraw your consent: dataprotection@grandginrummy.com. You also have the right of appeal to a regulatory body.

When will your data be deleted?

The data processed by us is deleted or limited in its processing pursuant to GDPR Articles 17 and 18. The data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal storage obligations or well-founded interests to prevent deletion, if otherwise not expressly stated in this privacy policy, i.e. If there is a well-founded interest, for example, in asserting, exercising, or defending legal claims or avoiding fraud cases (for your protection). If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes.

Communication

When contacting us, e.g. via e-mail or through the contact form, your details are used to process your enquiry in accordance with GDPR Article 6 paragraph 1 lit. b), or with consent granted by the user in accordance with GDPR Article 6 paragraph 1 lit. a). This information may be stored in our systems.

We delete the data if it is no longer required. We review the necessity to keep the information every two years. We store user requests from users with permanent accounts and refer to the above for deletion under the "Provision of contractual services". In the case of legal archiving obligations, the deletion takes place after expiration of the respective legally prescribed periods (after 6 years in the case of commercial law and after 10 years in the case of tax law).

Collection of access data and log files

On the basis of our legitimate interests within GDPR Article 6(1)(f), we collect data each time the server is accessed through which this service is provided (so-called server log files). The access data includes the date and time of retrieval, page accessed, browser type and version, the user's operating system, possible error details, referrer URL (the previously visited page), and the requesting provider.

For security purposes, log file information is stored until it is no longer required (e.g. to verify and eradicate errors or to prevent misuse or fraud). Once its purpose is served, this information is deleted or made anonymous. Certain data may only be deleted once the case has been closed.

Use of Matomo

We use the open-source web analytics service “Matomo” to analyze how visitors use the website in order to optimize our website. If you have consented, cookies have been enabled for this purpose and contain usage information and your anonymized IP address. This information is not passed on to third parties.

Processing is carried out based on your explicit consent pursuant to GDPR Art. 6 Para. 1 S. Lit. a. Information on how to amend or revoke your consent/cookie settings is located below “Use of Cookies” and can be changed at any time.

Use of cookies

Cookies are small text files that are transferred from our web server or third-party web servers to a user’s web browser and are stored there for subsequent retrieval.

In our case these cookies are persistent cookies which remain on your device for a set period of time, even after you close your browser. Persistent cookies remember your data and your usage behaviour on our website and helps us to provide you with information which may be relevant or important to you. The information gathered can be used to track your usage behaviour over multiple browser sessions.

We use the following types of cookies:

Necessary cookies enable basic website functions, such as website navigation and saving your cookie preferences. They are required for the website’s operation and cannot be disabled.

The legal basis for the processing of personal data using necessary cookies is the fulfilment of our contract made with you pursuant to Art. 6 Para. 1 lit. b. GDPR.

Tracking cookies are used for to analyse how the website is used. This allows us to continuously optimise our offer for you. These cookies are only enabled if you allow them. Alternatively, you can select to “Accept all cookies”.

The processing of personal data using tracking cookies takes place only if there is corresponding consent pursuant to art. 6 para. 1 lit. a. GDPR as a legal basis.

You can change your cookie banner preferences at any time by clicking here.

Protection of minors

GameDuell services are exclusively intended for adult use. We do not knowingly collect age information, nor do we knowingly collect any personal data from children under the age of 16. We advise all visitors to our website under the age of 16 not to disclose or provide any personal data to our service.

Changes and updates to the Privacy Policy

We reserve the right to change, update, or amend this privacy policy at any time. Any revised privacy policy applies only to personal data collected or amended after the effective date of the revised privacy policy.

Contact

If you have any further questions, please do not hesitate to contact us. Please send an e-mail to dataprotection@grandginrummy.com.