- 1 Introduction
- 2 Responsible
- 3 Processing overview
- 4 Safety measures
- 5 Sweepstakes and competitions
- 6 Plugins and embedded functions as well as content
- 7 Deletion of data
- 8 Change and update of the data protection declaration
- 9 Rights of data subjects
- 10 Definitions
With the following data protection declaration we would like to inform you which types of your personal data (hereinafter also referred to as "data") for which purposes and to what extent. The data protection declaration applies to all processing of personal data that we carry out, both within the scope of the provision of our services as well as in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter referred to collectively as the "online offer").
The terms used are not gender-specific.
As of February 21, 2020
- Email address : firstname.lastname@example.org
- Imprint : https://romhackraces.com
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.
Types of data processed
- Inventory data (e.g. names, addresses).
- Content data (e.g. text input, photographs, videos).
- Contact details (e.g. email, telephone numbers).
- Meta / communication data (e.g. device information, IP addresses).
- Usage data (e.g. visited websites, interest in content, access times).
Categories of data subjects
- Users (e.g. website visitors, users of online services).
- Contest and contest participants.
Purposes of processing
- Provision of our online offer and user-friendliness.
- Conducting sweepstakes and competitions.
- Safety measures.
- Contractual benefits and service.
- Management and answering inquiries.
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing, as well as the different probability of occurrence and the extent of the threat to the rights and freedoms of natural persons to ensure a level of protection appropriate to the risk.
The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling the physical and electronic access to the data as well as the access, input, transfer, safeguarding of availability and their separation. Furthermore, we have set up procedures that guarantee the exercise of data subject rights, the deletion of data and reactions to the risk to the data. We also take the protection of personal data into account when developing or selecting hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.
SSL encryption (https) : In order to protect your data transmitted via our online offer, we use SSL encryption. You can recognize such encrypted connections by the prefix https: // in the address line of your browser.
Data processing in third countries
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or the processing as part of the use of third-party services or the disclosure or transmission of data to other people, entities or companies takes place, this only takes place in accordance with the legal requirements.
Subject to express consent or contractually or legally required transmission, we only process or allow the data in third countries with a recognized data protection level, to which the US processors certified under the "Privacy Shield" belong, or on the basis of special guarantees, such as a contractual obligation Process so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data -protection / international-dimension-data-protection_de ).
Provision of the online offer and web hosting
In order to be able to provide our online offer securely and efficiently, we use the services of one or more web hosting providers, from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, we can use infrastructure and platform services, computing capacity, storage space and database services as well as security and technical maintenance services.
The data processed as part of the provision of the hosting offer can include all information relating to the users of our online offer, which is incurred in the context of use and communication. This regularly includes the IP address that is necessary to be able to deliver the content of online offers to browsers, and all entries made within our online offer or on websites.
Emailing and hosting : The web hosting services we use also include the sending, receiving and storage of emails. For these purposes, the addresses of the recipients and senders as well as other information regarding the sending of e-mails (eg the providers involved) and the content of the respective e-mails are processed. The aforementioned data can also be processed for the purpose of detecting SPAM. We ask you to note that e-mails are generally not sent encrypted on the Internet. As a rule, e-mails are encrypted during transport, but (unless an end-to-end encryption process is used) not on the servers from which they are sent and received.
Collection of access data and log files : We ourselves (or our web hosting provider) collect data on every access to the server (so-called server log files). The server log files can include the address and name of the websites and files accessed, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP Addresses and the requesting provider belong.
The server log files can be used on the one hand for security purposes, eg to avoid overloading the server (especially in the case of abusive attacks, so-called DDoS attacks) and, on the other hand, to ensure the utilization of the servers and their stability.
- Processed data types: content data (eg text input, photographs, videos), usage data (eg visited websites, interest in content, access times), meta / communication data (eg device information, IP addresses).
- Affected persons: users (eg website visitors, users of online services).
- Legal basis: legitimate interests (Art. 6 Para. 1 S. 1 lit. GDPR).
Sweepstakes and competitions
We process personal data of the participants of competitions and competitions only in compliance with the relevant data protection regulations, insofar as the processing for the provision, implementation and processing of the competition is contractually necessary, the participants have consented to the processing or the processing serves our legitimate interests (eg in the Security of the competition or the protection of our interests against misuse by possible recording of IP addresses when submitting competition contributions).
If entries by the participants are published as part of the competitions (eg in the context of a vote or presentation of the competition entries or the winners or reporting on the competition), we would like to point out that the names of the participants can also be published in this context. Participants can object to this at any time.
If the competition takes place within an online platform or a social network (eg Facebook or Instagram, hereinafter referred to as "online platform"), the usage and data protection provisions of the respective platforms also apply. In these cases, we would like to point out that we are responsible for the information provided by the participants in the context of the competition and any inquiries regarding the competition are to be addressed to us.
The data of the participants will be deleted as soon as the competition or competition has ended and the data is no longer required to inform the winners or because questions about the competition can be expected. In principle, the data of the participants will be deleted no later than 6 months after the end of the competition. Winners' data can be retained longer, for example to answer questions about the winnings or to fulfill the winnings; In this case, the retention period depends on the type of profit and is up to three years for things or services, for example, so that warranty cases can be processed. In addition, the data of the participants can be stored longer, for example in the form of reporting on the competition in online and offline media.
If data was also collected for other purposes as part of the competition, its processing and retention period are based on the data protection information for this use (eg in the case of a newsletter subscription as part of a competition).
- Processed data types: inventory data (eg names, addresses), content data (eg text input, photographs, videos).
- Data subjects: Contestants and contestants.
- Purposes of processing: Conducting competitions and competitions.
- Legal basis: performance of the contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. GDPR).
Plugins and embedded functions as well as content
We integrate functional and content elements into our online offer, which are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These can be, for example, graphics, videos or social media buttons and contributions (hereinafter: uniformly referred to as "content"). The integration always presupposes that the third-party providers of this content process the IP address of the users, since without the IP address they could not send the content to their browser. The IP address is therefore required to display this content or functions. We strive to only use content whose respective providers only use the IP address to deliver the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website.
- Processed data types: usage data (e.g. visited websites, interest in content, access times), meta / communication data (e.g. device information, IP addresses), inventory data (e.g. names, addresses), contact details (e.g. email, telephone numbers), content data (e.g. text input, photographs, videos).
- Affected persons: users (e.g. website visitors, users of online services).
- Purposes of processing: Provision of our online offer and user-friendliness, contractual services, security measures, management and answering inquiries.
- Legal basis: consent (Art. 6 Para. 1 S. 1 lit. a GDPR), contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit.f GDPR).
Services and service providers used:
Deletion of data
The data processed by us will be deleted in accordance with the legal requirements as soon as their consent for processing is revoked or other permits no longer apply (e.g. if the purpose of processing this data has ceased to apply or if it is not necessary for the purpose).
If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted to these purposes. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons or whose storage is necessary to assert, exercise or defend legal claims or to protect the rights of another natural or legal person.
Further information on the deletion of personal data can also be given in the context of the individual data protection information in this data protection declaration.
Change and update of the data protection declaration
We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes in the data processing we carry out make this necessary. We will inform you as soon as the changes make it necessary to act on your part (e.g. consent) or other individual notification.
If we provide addresses and contact information of companies and organizations in this data protection declaration, please note that the addresses can change over time and ask you to check the information before contacting us.
Rights of data subjects
As the person concerned, you have various rights under the GDPR, which arise in particular from Articles 15 to 18 and 21 GDPR:
- Right of objection: You have the right, for reasons that arise from your particular situation, at any time against the processing of your personal data, which is based on Art. 6 Para. 1 lit. e or f DSGVO takes place to object; this also applies to profiling based on these provisions. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.
- Right to withdraw consent: You have the right to withdraw consent at any time.
- Right to information: You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with the legal requirements.
- Right to correction: In accordance with the legal requirements, you have the right to request the completion of the data concerning you or the correction of the incorrect data concerning you.
- Right to deletion and restriction of processing: In accordance with the legal requirements, you have the right to request that the data relating to you be deleted immediately or, alternatively, to request that the processing of the data be restricted in accordance with the legal requirements.
- Right to data portability: You have the right to receive data relating to you that you have provided to us in a structured, common and machine-readable format in accordance with legal requirements, or to request that it be transmitted to another person responsible.
- Complaint to the supervisory authority: In accordance with the legal requirements, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you believe that the processing of your data affects you personal data violates the GDPR.
This section gives you an overview of the terms used in this data protection declaration. Many of the terms are taken from the law and are mainly defined in Art. 4 GDPR. The legal definitions are binding. The following explanations, on the other hand, are intended primarily for understanding. The terms are sorted alphabetically.
- Personal data: "Personal data" is all information relating to an identified or identifiable natural person (hereinafter "data subject"); A natural person is considered to be identifiable, if he or she can be identified directly or indirectly, in particular by assigning an identifier such as a name, an identification number, location data, an online identifier (eg cookie) or one or more special features, expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
- Responsible: The "responsible" is the natural or legal person, authority, institution or other body that alone or together with others decides on the purposes and means of processing personal data.
- Processing: "Processing" is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data. The term goes far and includes practically every handling of data, be it collecting, evaluating, storing, transmitting or deleting.
Created with free Privacy-Generator.de by Dr. Thomas Schwenke