2. Purposes and legal basis for the processing of personal data
First, we collect and process personal data about you when you use our apps, insofar as it is necessary for the fulfilment of the contract between you and us or for the implementation of pre-contractual measures at your request (Art. 6 para. 1 sentence 1 lit. b GDPR).
Furthermore, we process data whenever it is necessary to protect our legitimate interests, unless they are outweighed by your interest in protecting your personal data (Art. 6 para. 1 sentence 1 lit. f GDPR). For example, we process personal data to ensure your compliance with our terms and conditions, to verify purchases and prevent fraud, to ensure and optimise the functionality of our apps and to close security gaps and solve technical problems.
In addition, we collect and process personal data as far as this is necessary to comply with our legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR).
Lastly, we may collect and process your personal data when you use our apps if we have your prior consent ( (Art. 6 para. 1 sentence 1 lit. a GDPR). The consent only applies to the respective app for which you have declared it. You can revoke your consent at any time (see point 10.7). Based on your consent, we can show you individualised content such as customised offers or personalised advertising in our apps. This helps us to show you offers and advertising relating to products and services that may be of interest to you. The data used for this purpose includes device-related information, usage data and other demographic and interest-based information that we collect when you use the app or that we receive from our third-party marketing partners or other third parties who are authorised to share this data with us.
We have no intention to use your personal data for any automatic decision making processes (including profiling).
We only process your personal data for a different purpose than mentioned above if we are allowed to do so by statutory law or if we have your prior consent in the changed purpose of our data processing.
We offer our apps for download via Google Play. When you do this, Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA (hereinafter „Google“) collects personal data about you that is required for the download. They may, for example, collect your email address, individual device identification number, payment information and the time of the download. However, it is not us who collect this data, but Google. Accordingly, Google, not we, is responsible for the collection and processing of your personal data during the download.
4. Scope of data processing
We collect and process the following personal data when you use our apps:
5. Data security
We apply appropriate technical and organisational security measures to ensure your personal data stored with us is protected against unauthorised access, accidental or intentional manipulation and loss. When choosing our security measures based on state-of-the-art technology, we consider the type of data, the likelihood of a data breach and its potential impact on you. We continuously improve our security measures following the latest technological developments.
Your data may be shared with our business partners (hereinafter referred to as “third party companies”). We let you know in detail separately at the appropriate place (see 7. in particular) to which third party companies and to what extent we pass on personal data. Third party companies may be located outside the European Economic Area (hereinafter referred to as “third countries”). In its so-called adequacy decisions, the European Commission certifies that some of these third countries provide data protection comparable to that in the European Economic Area. If this is not the case, we ensure that sufficient data protection is in place by appropriate legal and contractual obligations.
6. Storage period and deletion of personal data
We will only store your personal data for as long as it is needed to fulfil the purpose it was originally stored for. After that, or if the legal basis for storing and processing the data no longer applies, we will delete your personal data. We usually store your personal data for the duration of the usage or contractual relationship via the app. However, storage beyond this point may occur for example in the event of an (imminent) legal dispute with you.
This does not affect legal requirements for the storage or deletion of personal data. We will delete your personal data stored with us right after the expiration of any legally prescribed storage periods unless further storage by us is required and allowed by statutory law.
7. Sharing your information
7.2 Marketing partners
7.3 Legal obligations to share personal data
In certain cases, we are obliged by law to share data with third parties. For example, in cases of fraud, we may be obliged to pass on the data we have lawfully stored about you to the relevant law enforcement agency. The legal basis for sharing the data is in this case Art. 6 para. 1 sentence 1 lit. c GSDPR.
8.1 General information
8.2 Types of cookies
Some cookies may contain data that allow us to recognise the device you are using. Other cookies only contain information about certain settings that cannot be linked to your person. We use some cookies to collect data about your user behaviour regarding our app. When we collect data that way, we pseudonymise taking all necessary technical precautions. Direct identification of the user via cookies is impossible.
So-called session cookies are automatically deleted as soon as you close the app or log out. We also use so-called permanent cookies that are stored beyond the individual session and are deleted after a specific period of time.
In terms of their function, the following types of cookies can be distinguished:
8.3 Preventing the setting of cookies and consent
The way mobile apps work require the use of technical cookies. Without these cookies, our apps cannot be (fully) used and we cannot offer support functions. Technical cookies are usually session cookies (see 8.2) which are deleted after the end of the respective use of the app. You cannot deselect these cookies if you want to use the app. Art. 6 para. 1 sentence 1 lit. f) GDPR is the legal basis for the processing of personal data using necessary technical cookies.
9. Services used
We need your consent to use Chartboost. We may ask for this consent when you use our app for the first time. Art. 6 para. 1 sentence 1 lit. a) GDPR the legal basis for the corresponding processing of personal data.
We need your consent to use AdMob. We may ask for this consent when you use our app for the first time. Art. 6 para. 1 sentence 1 lit. a) GDPR the legal basis for the corresponding processing of personal data.
10. Your rights
Whenever we process your personal data, you as a data subject within the meaning of Art. 4 no. 1 of the GDPR are, in addition to the rights already mentioned, entitled to the following rights:
10.1 Right of access
In accordance with Art. 15 GDPR, you have the right to request information from us about whether or not personal data concerning you is being processed and to what extent and for what purposes we process it. Upon your request (see 11. for contact details), we are also obliged to provide you with information on whether personal data about you is transferred to a third country. In that case, you have the right to request information about the safeguards in place in connection with the transfer, as required by Art. 46 GDPR. Please address any such request to the person indicated as contact (see under 11.).
10.2 Right to rectification
In case your personal data processed by us is incorrect, you have the right, pursuant to Art. 16 GDPR, to obtain from us without undue delay the rectification of your personal data or to have incomplete data completed. Please address any such request to the person indicated as contact (see under 11.).
10.3 Right to erasure (‘right to be forgotten’)
Under the conditions set out in Art. 17 GDPR, you have the right to request the erasure of your personal data stored with us without undue delay. This can be the case once the respective data is no longer necessary for the collection or processing purposes, if the data processing period has elapsed, if there is an objection to the processing of personal data (see 10.6.) or if the legal basis for the processing has ceased to exist or does not exist. Please address any such request to the person indicated as contact (see under 11.).
10.4 Right to restriction of processing
Under the conditions set out in Art. 18 GDPR, you have the right to request that we restrict the processing of your personal data. You have this right for example if the accuracy of the data in question is disputed between you and us. In this case, you have the right to request the restriction of processing the respective data for a period enabling us to verify the accuracy. The same right exists if the successful exercise of your right of objection (see 10.6) is still disputed between you and us. In addition, whenever you have a right to erasure (see 10.3), you can choose to request limited processing of your personal data instead of erasure. Please address any such request to the person indicated as contact (see under 11.).
10.5 Right to data portability
Under the conditions set out in Art. 20 GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format. Please address any such request to the person indicated as contact (see under 11.).
10.6 Right to object
Under the conditions set out in Art. 20 GDPR, you can object at any time to us processing your personal data. We will stop processing the respective data immediately, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or, if we need to process the data for the establishment, exercise or defence of legal claims. Please address any such request to the person indicated as contact (see under 11.).
10.7 Recht auf Widerruf deiner Einwilligung in die Verarbeitung
Where processing is based on consent, you may at any time, in accordance with Art. 7 para. 3 GDPR, withdraw your consent. The withdrawal of your consent means that we are not allowed to continue processing the data based on your withdrawn consent in the future.
Please address any such request to the person indicated as contact (see under 11.).
10.8 Right to lodge a complaint with a supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a competent supervisory authority. This is possible with the supervisory authority responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, D-20459 Hamburg, e-mail: email@example.com, tel.: +49 40 428544040.
11. Controller and contact
We are the controller for the processing of your personal data within the meaning of Art. 4 no. 7 GDPR (see our imprint at https://www.glhf-games.net/imprint):
GLHF Games GmbH
If you contact us by e-mail, the data you provide (your e-mail address and, if included in your e-mail, your name and your telephone number) will be stored by us in order to be able to answer your enquiry. As soon as we no longer need the data for this purpose, we will delete it. In case we have to store the data for a longer period of time due to legal retention periods, we will restrict the processing.
Last modified: 05/2022