Source: https://www.mimimi.games/privacy-policy/
Timestamp: 2019-04-26 10:20:01+00:00

Document:
Dr. Christian Rauda, attorney and board-certified attorney for information technology law.
If we obtain the consent of a data subject for processing personal data, the legal basis for processing such personal data is Art. 6 para. 1 let. a) EU General Data Protection Regulation (hereinafter “GDPR”). If we process personal data that are necessary to perform a contract to which the data subject is a party, the legal basis for processing such personal data is Art. 6 para. 1 b) GDPR. The same applies if processing personal data is necessary to perform pre-contractual measures. If processing personal data is necessary to perform a legal obligation of our company, the legal basis for such data processing is Art. 6 para. 1 c) GDPR. If processing personal data is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh that legitimate interest, the legal basis for such data processing is Art. 6 para. 1 let. f) GDPR.
Personal data of a data subject will be erased or blocked as soon as they are no longer needed for the purposes for which they are stored. Data may also be blocked if provided for by EU or national regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased if recordkeeping obligations under the aforementioned norms expire, unless continued storage of such data is necessary to enter into or perform a contract.
When our Website is accessed, our system will automatically collect data and information from the computer system of the terminal device accessing the Website.
Such data will be stored in log files of our system. Such data are needed only to analyze any malfunctions and will be erased at the latest within seven days. The legal basis for temporarily storing data in log files is Art. 6 para. 1 let. f) GDPR. Temporary storage of the IP address for the system is necessary for making the Website available to the terminal device of the user. For this purpose the IP address of the user must be stored for the duration of the session. Data are stored in log files to ensure the functionality of our Website. In addition, such data are used to optimize the Website and to ensure the security of our IT systems. Data will not be analyzed for marketing purposes in this connection, and we will draw no inferences as to your identity. The aforementioned purposes also provide the basis of our legitimate interest in data processing within the meaning of Art. 6 para. 1 let. f) GDPR. Collecting data to make available the Website and storing data in log files is necessary for operating the Website. Consequently, users have no right to object to the collection or use of such data for the aforementioned purposes.
We maintain an online presence on social networks and platforms to communicate with clients, interested parties, and users who are active on those networks, and to be able to inform clients, interested parties, and users of our services.
Our Website therefore links to the website of Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, U.S.A., or, if you reside in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, (“Facebook”). Otherwise no data are exchanged with Facebook on our Website.
Our Website also links to the website of Twitter, operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, U.S.A. or, if you reside in the EU, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.
Our Website also links to the website of Discord Inc., 401 California Dr, Burlingame, CA 94010, U.S.A. (“Discord”).
Our Website also links to the website of Instagram (“Instagram”), operated by Instagram Inc., 1201 Willow Road, Menlo Park, CA, 94025, U.S.A. or, if you reside in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
On the basis of our legitimate interests (interest in optimization and economic operation of our online-service in accordance with Art. 6 para. 1 let. f GDPR) we use services of Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA („Cloudflare“) by storing data which stems from the use of Discord (see above) on our website.
Cloudflare offers server infrastructure which enables a faster and safer access to data because of the proximity the user. Cloudflare’s main task is to forward data to the user. Which data will be forwarded depends on tour use of Cloudflare’s services as well as the user’s request.
Further information about Cloudflare can be found here: https://www.cloudflare.com/de-de/privacypolicy/. Questions about Cloudflare’s use of data can be asked here: privacyquestions@cloudflare.com.
Cloudflare’s services are provided as commissioned data processing, please address us if you would like to object to the use of the data. We notify you that in the case of an objection you might not be able to use our website anymore.
On the basis of our legitimate interests (interest in optimization and economic operation of our online-service in accordance with Art. 6 para. 1 let. f GDPR) we use web-analysis services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google is certified under the Privacy-Shield framework and hereby provides a guarantee to conform with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information as a commissioner to analyze the usage of our online-services, to issue a report about the activities within our online-services and to perform other services for us which are connected with the usage of our online-services and the internet. The processed data can be used to create pseudonymized user profiles.
We only use Google Analytics with activated IP-anonymization. That means, the user’s IP-address will be shortened by Google in the area of EU-member states or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP-address will be transmitted to a Google server in the U.S.A. and shortened there.
We use “Google Tag Manager” to implement and manage Google analysis and marketing services.
The IP-address collected from the user will not be linked with other data from Google. Users can prevent the collection of information by cookies via his browser settings; further, users can prevent the collection of the data collected by the cookie with regards to their usage of the online-services and Google’s processing of this data by installing a browser-plugin which is available here: http://tools.google.com/dlpage/gaoptout?hl=de.
You can register for a newsletter on our website. For this we require your email-address. In addition, we check in compliance with the relevant law whether you are the true holder of the email-address and agreed to receive the newsletter. For this purpose, we send you a validation email. Our newsletter informs about important announcements, exclusive insights into the development and invitations for beta-versions of our new games.
As receiving the newsletter is dependent from your consent, you may revoke your consent to the collection and storage of your data at any time, without giving reasons. Use the “unsubscribe” link on the bottom of every email or contact us.
For sending the newsletter we use the “MailChimp” service of the online dispatch service Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, U.S.A. (“Rocket Science”). Their privacy policies can be found here: https://mailchimp.com/legal/privacy/. Rocket Science is certified under the Privacy-Shield framework and hereby provides a guarantee to conform with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). The usage of MailChimp is based on our legitimate interests in accordance with Art. 6 para. 1 let. f GDPR. We have an interest to see whether the newsletter is opened and which parts of it are read. In this way, we improve our services in the future. We entered into an order-processing contract with Rocket Science. Rocket Science may use the pseudonymized data of recipients to optimize and improve their services, for instance in respect to the technical dispatch of the newsletter or for statistical purposes. Rocket Science does not use the data to send you newsletters themselves and the data will not be transmitted to third-parties.
We do not use social-plugins and also no font-plugins.
You may demand that the controller confirm whether or not personal data about you are processed by us.
whether your personal data will be transferred to any third country or international organization; in connection with such transfers you may demand to be informed of appropriate safeguards within the meaning of Art. 46 GDPR.
You have a right against the controller to have incorrect personal data rectified and/or to have incomplete personal data completed if the personal data we process are incorrect or incomplete. The controller must rectify data without undue delay.
if you have objected to processing of your personal data in accordance with Art. 21 para. 1 GDPR and it has not yet been determined whether there are overriding legitimate reasons of the controller.
If processing of your personal data is restricted, such data may – except for their storage – be processed only with your consent, or to assert, exercise, or defend legal rights or claims, to protect the rights of another natural person or legal entity, or for reasons related to an important public interest of the European Union or any member state.
If processing of your personal data has been restricted under the aforementioned conditions, you will be notified by the controller before the restriction is lifted.
your personal data were collected with respect to offered information society services within the meaning of Art. 8 para. 1 GDPR.
Where the controller has made personal data public and has an obligation under Art. 17, para. 1 to erase such personal data, the controller, taking into account available technology and the cost of implementation, must take reasonable steps, including technical measures, to inform controllers which are processing such personal data that the data subject has requested the erasure by such controllers of any links to, or copies or duplicates of, such personal data.
to assert, exercise, or defend legal rights or claims.
If you have exercised your right to rectification, erasure, or restricted processing against the controller, the controller has an obligation to notify all recipients to whom your personal data have been disclosed of such rectification, erasure, or restricted processing, unless this proves impossible or would be associated with unreasonable expense.
You have a right to be informed of all such recipients by the controller.
In exercising the right to data portability you further have the right to have your personal data transferred directly from one controller to another controller, if and to the extent that this is technically feasible. No rights or freedoms of any other persons may be infringed thereby.
The right to data portability does not apply to processing of personal data that is necessary to perform a task that is in the public interest or to processing of personal data in the exercise of official authority vested in the controller.
You have the right for reasons related to your particular situation to object to processing of your personal data at any time based on Art. 6 para. 1 let. e) or f) GDPR; the same applies to any profiling based on the aforementioned provisions.
If you object, the controller will no longer process your personal data, unless the controller can show that there are compelling protected reasons for processing your personal data that override your interests, rights and freedoms, or if your data are processed to assert, exercise, or defend legal rights or claims.
If your personal data are processed for direct advertising purposes, you have a right to object to processing of your personal data for purposes of such advertising at any time; the same applies to any profiling associated with such direct advertising.
If you object to processing of your personal data for purposes of direct advertising, your personal data will no longer be processed for such purposes.
In connection with use of information society services you may exercise your right of objection – regardless of Directive 2002/58/EC – by using automated processes for which technical specifications are used. For this purpose you may send an email to our data protection officer.
You have a right to revoke your consent to data processing at any time. If you exercise your right of revocation, the lawfulness of data processing that occurs before revocation based on your consent will remain unaffected.
However, such decisions may not be made with respect to special categories of personal data within the meaning of Art. 9 para. 1 GDPR, unless Art. 9 para. 2 let. a) or g) GDPR applies and appropriate safeguards have been implemented to protect your rights, freedoms, and legitimate interests.
In cases 1) and 3) above the controller must implement appropriate safeguards to protect your rights, freedoms, and legitimate interests, which must include, at a minimum, a right to have a person acting on behalf of the controller take action, a right to present your own point of view, and a right to contest the decision.
Without prejudice to any other available administrative or judicial remedies, you have a right to lodge a complaint with a supervisory authority, in particular a supervisory authority located in the member state of your habitual residence, at your workplace, or at the place of the purported infringement, if in your opinion the processing of your personal data violates the GDPR.
The supervisory authority where the complaint is lodged will then notify the complainant of the progress and outcome of the complaint, including judicial remedies available under Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78