The use of this website may involve the processing of personal information. Our intention is for the following information to provide you with an overview of these processes so that you can understand them. In order to ensure fair processing, we would also like to inform you about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
Altigi GmbH, Borselstraße 20, 22765 Hamburg (hereinafter referred to as “we” or “us”) is responsible for the data processing.
Table of Contents
- 1. Contact Us
- 2. General Information on the Processing of Personal Data
- 3. Duration of Storage
- 4. Transmission of data
- 5. Contact Form
- 6. Registration and Login
- 7. Facebook Connect
- 8. Data Processing in our Games
- 9. Payments made on our Website
- 10. Community (Forum)
- 11. Publisher Backend
- 12. Job Applications
- 13. Newsletter
- 14. Use of email address
- 15. Surveys
- 16. Processing Server Log Files
- 17. Bugsnag
- 19. Combating Fraud
- 18. Cookies
- 20. Facebook (Visitor Action Pixel)
- 21. Information about our Facebook Page
- 22. Google Analytics
- 23. Google Marketing Services
- 24. Microsoft Bing Ads
- 25. Twitter Conversion Tracking
- 26. Taboola
- 27. Analysis of advertising on third-party websites
- 28. Integrated Services and Third Party Content
- 29. Advertising in Games
- 30. Your Rights
- 31. The Right to Object
- 32. Minor’s privacy
- 33. Data Protection Officer
- 34. Complaints to Government Authorities
- 35. California Residents Privacy Statement
If you have any questions or suggestions about this information or would like to contact us to exercise your rights, please contact us via: https://support.goodgamestudios.com/
The use of the products and services we offer may result in the processing of personal data. The term “personal data” under data protection law refers to all information relating to a specific or identifiable person. An IP address can also be considered personal data. An IP address is assigned to each device connected to the internet by the internet service provider, so that it can send and receive data. When you use the website, we collect data that you provide yourself. In addition, when you use the website, we automatically collect certain information about your use of it. We process personal data in compliance with the relevant data protection regulations of the GDPR and the German BDSG. We will only process data where we are legally permitted to do so. When you use this website, we will process personal data only with your consent (Art. 6 paragraph 1 sentence 1 letter a GDPR), for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract (Art. 6 paragraph 1 sentence 1 letter b GDPR), for compliance with a legal obligation (Art. 6 paragraph 1 sentence 1 letter c GDPR) or if the processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data (Art. 6 paragraph 1 sentence 1 letter f GDPR).
Unless otherwise stated in the following sections, we will store the data only as long as necessary to achieve the purpose of processing or to fulfill our contractual or statutory obligations.
Unless otherwise stated in the following sections, data will be processed on the servers of technical service providers commissioned by us for this purpose. These service providers will only process the data after having received express instructions and they are contractually obliged to guarantee adequate technical and organizational measures for data protection. Insofar as we refer to integrated services of other providers in this Data Protection Declaration, it can be assumed that personal data will be transmitted to the specified headquarters of these providers. These providers may be based in a so-called third country outside the European Union or the European Economic Area. Further information can be found in the sections describing each service.
Our website contains a contact form with which you can send us messages. The transfer of your data is encrypted. The legal basis for processing this data is Art. 6 paragraph 1 sentence 1 letter b GDPR. All data fields marked as mandatory are required for processing your request. If they are not provided, your request cannot be carried out. The provision of any additional data is voluntary. Alternatively, you can also send us a message to the contact e-mail address.
In order to use certain functions within the app, registration via the website is required. The information required can be seen on the registration screen. It is absolutely essential to provide the information marked as mandatory in order for you to complete the registration process. The data provided will be processed for the purpose of providing the service. The legal basis of this processing is Art. 6 paragraph 1 sentence 1 letter b GDPR. We store your data for as long as you are registered with us, unless you delete it beforehand.
We also offer you the option of easier registration for our games and services through Facebook. You can use your existing Facebook user account for this purpose. By clicking the “Log in with Facebook” link, you can use this registration method via our online portal. To do this, you need to already have a Facebook account or have access to Facebook. If you would like to register for one of our services using your Facebook account, the first step in the registration process will immediately redirect you to Facebook. Facebook will then ask you to log in or to register. Under no circumstances will we receive your personal access data (user name and password). In a second step, you will connect your Facebook profile with the service for which you would like to register. At this point, you will be told what data from your Facebook profile will be transmitted to us. This information is usually your “public information” on Facebook and information which you have made available to the public or authorized for the application in question. Information of this type generally includes your name, profile picture and cover photo, your gender, your networks, your username (Facebook URL), and your user ID number (Facebook ID). We will also use the email address you have saved with Facebook in order to contact you outside of Facebook. You can see an overview of information in your profile that is available to the public via the General Account Settings menu of your Facebook profile (https://www.facebook.com/settings?tab=applications). The legal basis for data collection and storage is your consent, within the meaning of Art. 6 paragraph 1 sentence 1 letter a GDPR. If you would like to remove the connection between Facebook Connect and our service, please log in to Facebook and make the required changes to your profile. We will then no longer have the right to use information from your Facebook profile.
In our games we are able to track and evaluate various actions at the player level. This especially includes contact data provided during registration and your actions during the games. For this purpose, we collect your connection data, such as your IP address. We need to be able to process this information to execute gaming operations. It is, therefore, processed on the basis of Art. 6 paragraph 1 sentence 1 letter b GDPR
In principle, you can enjoy our games without having to provide personal contact data. If you pay for chargeable activities in our games, your personal data will be collected by the corresponding payment service providers listed. All payment-relevant data, such as your contact and payment data, are initially collected and processed by the corresponding payment provider. The legal basis for this data processing is Art. 6 paragraph 1 sentence 1 letter b GDPR. For payments, we collect the geolocation of your IP address, which allows us to determine in which country you are located. The legal basis for this data collection is Art. 6 paragraph 1 sentence 1 letter c GDPR, as the processing is necessary for compliance with a legal obligation. The legal obligation arises from Directive 2006/112/EC (MOSS Directive). We also receive information from payment providers related to payment fraud prevention. The legal basis for this data collection is Art. 6 paragraph 1 sentence 1 letter f GDPR, as the processing serves the legitimate interests of our company.
To use our forums, you must provide personal registration data, such as your user name and e-mail address. The e-mail address is not visible to other users. Registration is necessary to be able to punish possible infringements of our Community guidelines by excluding those responsible from the forum. The legal basis for the storage of this data is Art. 6 paragraph 1 sentence 1 letter b GDPR. Our forum is monitored by moderators. In order to prevent and punish serious violations, we monitor your IP address. The collection of this information to combat fraud is based on our legitimate interests in accordance with Art. 6 paragraph 1 sentence 1 letter f GDPR, and serves to protect our forum. We expressly reserve the right to delete your comments if they are objected to as unlawful by third parties. You can object to this storage of the aforementioned data at any time.
Our company operates what is referred to as a “Publisher Backend”, in which companies and private individuals can register to participate in our Publisher Program. For this purpose, we collect and process your contact and payment data, which we require in accordance with Art. 6 paragraph 1 sentence 1 letter b GDPR for the performance of the respective contractual relationship.
You can apply for a job with us through our website in the “career” section. To this end, we collect personal contact data from you, which specifically includes your name, your CV, your cover letter and other content provided by you. Your personal application data will only be collected, stored, processed and used for purposes in connection with your interest in current or future employment with us and the actual processing of your application. Your online application will only be processed and handled by the relevant contact people in our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. We use softgarden e-recruiting GmbH’s software for application processing (Tauentzienstraße 14, 10789 Berlin, Germany). The legal basis for this data collection is Section 26 BDSG 2018.
In the following section, we will inform you about our newsletter as well as other types of business emails and electronic communications and your right to object. By subscribing to our newsletter, you agree to receive it and you agree to the processes described below. The legal basis is your consent pursuant to Art. 6 paragraph 1 sentence 1 letter a GDPR and Section 7 paragraph 2 no. 3 of the German Act against Unfair Competition (UWG). We do not include the following information under the term “advertising communication”: Information about technical and organizational processes and information relating to the provision of services to our users. To subscribe to our newsletter, we use the double opt-in procedure, which serves to confirm your e-mail address. This confirmation is required so that no one can register with an e-mail address that does not belong to them. Subscriptions to the newsletter are logged in order to be able to provide evidence of the registration process in accordance with statutory requirements. This includes the storage of the login itself, the time of confirmation, as well as the IP address. Any changes to your data stored with the service provider that sends the newsletters are also logged. The processing of this data is necessary in order to be able to prove that consent has been granted. The legal basis results from our legal obligation to document your consent (Art. 6 paragraph 1 letter c in conjunction with Art. 7 paragraph 1 GDPR). Newsletters are sent with the help of an EU-based external service provider, whom we have engaged for this processing activity in accordance with statutory requirements. The newsletters contain pixels that are retrieved by the server of the service provider that sends the newsletter as soon as the newsletter is opened. Within the scope of this retrieval, some information such us your IP address and time of retrieval are collected. This information is used for technical improvement or to analyze the target groups and their reading behavior on the basis of their retrieval locations (which can be determined using the IP address) or access times. The statistical data collection also includes determining if and when the newsletters are opened and which links are clicked and when they are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. These analyses are primarily intended to help us to identify the reading habits of our users and to adapt our content to them or to send different content based on user interests. The personalized analysis is performed with your consent, which we obtain when collecting your email address. The legal basis is Art. 6 paragraph 1 sentence 1 letter a GDPR. You can revoke your consent at any time with effect for the future. You can do so easily by using the link at the bottom of each of our communications or by using our support form. Unfortunately, you cannot request separate cancellations for the service provider that sends the newsletter or for the statistical analysis. If you wish to cancel, you must cancel the entire subscription.
We can use the email address you provide during registration or payment to keep you informed about similar products and services that we offer. This serves our legitimate interest in contacting existing customers for the purpose of direct marketing. The legal basis is Art. 6 para. 1 lit. f GDPR in conjunction with. § Section 7 (3) Act Against Unfair Competition. You can revoke your permission at any time without incurring any costs other than transaction costs according to the basic rates. To do this, you can unsubscribe by clicking the link contained in every email.
We conduct occasional customer satisfaction surveys for our games. For this purpose, we collect and process your contact data as provided in the surveys. The legal basis for the use of this information is your consent in accordance with Art. 6 paragraph 1 sentence 1 letter a GDPR. Your participation in the survey is voluntary. Your consent to its use may be revoked at any time. We use the services of SurveyMonkey Inc (San Mateo, One Curiosity Way, San Mateo, California 94403, “SurveyMonkey”) to conduct the surveys. SurveyMonkey collects additional information from participants in the form of cookies, which are only intended to ensure that the survey service is fully usable and that the surveys run as intended. The legal basis for processing this additional information is Art. 6 paragraph 1 sentence 1 letter f GDPR. If you do not participate in our survey, no personal information will be collected. We guarantee the adequacy of data transfer to the third country USA through the agreement of EU standard contractual clauses.
When using our website for informational purposes only, general data is initially stored automatically (i.e. not via registration) and transmitted to our server by your browser. By default, these include: The browser type/version, the operating system used, the page accessed, the page previously visited (referrer URL), the IP address, the date and time of the server request and the HTTP status code. The processing is carried out for the purposes of our legitimate interests, the legal basis of which is Art. 6 paragraph 1 sentence 1 letter f GDPR. This processing is used for technical administration and website security.
We process pseudonymous information, such as the IP address or device ID, for the analysis of signals in order to identify fraud by third parties in the context of customer acquisition. To accomplish this, we are supported by external service providers whom we have ensured are committed to the same statutory requirements. The legal basis is Art. 6 paragraph 1 sentence 1 letter f GDPR. This processing contributes to the organizational security of the website.
We use the “visitor action pixels” from Meta Platforms, Inc. (1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”)) on our website. This allows user behavior to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which is why we are informing you, based on our knowledge of the situation. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes. The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR. You can object to the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by contacting the following address: https://www.facebook.com/settings?tab=ads. We guarantee the adequacy of data transfer to the third country USA through the agreement of EU standard contractual clauses.
When you visit our Facebook Pages, which we use to represent our company or individual products or services, some of your personal data will be processed. The sole controller responsible for the processing of personal data is Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, “Facebook”). Further information about the processing of personal data by Facebook can be found at https://www.facebook.com/privacy/explanation. Processing of Page Insights Facebook provides us with anonymized statistics and insights for our Facebook page, which help us to understand the types of actions that people take on our Page (so-called “Page Insights”). These Page Insights are created based on specific information about individuals who have visited our Page. This processing of personal data is carried out by Facebook and by us as joint controllers. The processing serves our legitimate interest to evaluate the types of actions being taken on our Page and to improve our Page based on these findings. The legal basis for this processing is Article 6 paragraph 1 letter f GDPR. We are in no case able to assign the information obtained via Page Insights to a specific Facebook profile using the “Like” data for our Page. We have reached an agreement with Facebook to share joint responsibility for the processing, in which the division of data protection obligations between ourselves and Facebook is set out. Details about the processing of personal data for creating Page Insights and the agreement entered into between ourselves and Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data. Processing of data that is provided to us via our Facebook pages We also process data that you make available to us via our Facebook Pages. Such information might be your Facebook user name, your player name in one of our games, contact details or a communication to us. We only process this personal data if we have previously expressly asked you to share this data with us, for example as part of a survey or a competition. This processing will be done by us as the sole data controller. If you have communicated data to us because you are taking part in a contest, we will only process this if it is necessary to send you a prize. After delivery of the prize, or if you do not win, your data will be deleted. The legal basis for this processing is Article 6 paragraph 1 letter b GDPR. Personal data that we have collected through surveys will be processed in anonymized form, to ensure that customers are happy with our offers. This processing serves our legitimate interest of continuously improving our offers, and the legal basis therefor is Article 6 paragraph 1 letter f GDPR.
We use the conversion and tracking tool Bing Ads from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, “Microsoft”) as part of our website. Microsoft stores a cookie on the user’s computer to enable an analysis of the use of our online services. The prerequisite for this is that the user has accessed our website through an ad from Microsoft Bing Ads. This enables Microsoft and us to know that someone has clicked on an ad, has been redirected to our online services and has reached a predetermined target page. We only see the total number of users who clicked on a Bing ad and were then forwarded to the target page (conversions). No IP addresses are stored. No other personal information about the identity of the user will be disclosed. Users can find further information on data protection and the cookies used at Microsoft Bing ads in Microsoft’s data protection declaration: https://privacy.microsoft.com/de-de/privacystatement. The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR. If you do not wish to participate in the Bing Ads tracking process, you can communicate your objection to Microsoft here: http://choice.microsoft.com/de-DE/opt-out. We guarantee the adequacy of data transfer to the third country USA through the agreement of EU standard contractual clauses.
On our website, we use the Conversion Tracking Service of Twitter Inc. (1355 Market Street #900, San Francisco, California 94103, “Twitter”). Twitter stores a cookie on the user’s computer to enable an analysis of the use of our online products and services. Twitter Conversion Tracking tracks the actions of users after they have viewed ads or interacted with ads on Twitter. Twitter’s Conversion Tracking allows you to assign conversions such as link clicks, retweets or “like” data. The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR. If you wish to object to tracking, you can do so using the Digital Advertising Alliance tool at optout.aboutads.info. We guarantee the adequacy of data transfer to the third country USA through the agreement of EU standard contractual clauses.
We use services and content provided by third parties on our website (hereinafter collectively referred to as “content”). For this kind of integration, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address will therefore be transmitted to the respective third party provider. In each case, this data processing is carried out to safeguard our legitimate interests in the optimization and the commercial operations of our website, the legal basis of which is Art. 6 paragraph 1 sentence 1 letter f GDPR. The Java programming language is regularly used to integrate content. Therefore, you can object to data processing by deactivating Java operations in your browser. We have integrated contents from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) into our website:
- “Google Maps” for displaying maps;
- “Google Web Fonts” for using Google’s fonts;
- “YouTube” for displaying videos.
A transmission of your data to the USA cannot be excluded. We guarantee the adequacy of data transfer to the third country USA through the agreement of EU standard contractual clauses.
We offer in-game advertising on our web games allowing you to view video sequences from third-party providers funded through advertising. This allows paid content, for example, to be used free of charge. The data you provide when using advertising media is collected and analyzed, which will be explained in more detail below. Our service provider Google Ad Manager by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) allows us to put this type of ad monetization into practice. The service provider assumes control of the in-game advertising networks. This involves some parameters being shared via an interface with the advertising networks: IP address, browser, operating system, region (more info). The aim of this transmission of information is to display the most relevant advertising material for the user. The advertising networks mentioned may possibly also process personal data, such as the IP address, in order to be able to provide that advertising material. Opting out from personalized or contextual ads does not remove ads in our games. Limited ads, which do not process any personal data and are less relevant to the users, will still be shown. The legal basis for the processing of information in connection to the in-game advertisement is your consent (Art. 6 paragraph 1 letter a GDPR). As a user, you can opt out the use of personal data in advertising at any time in our Preference Center (link below). In such a case, all pseudonymous information is anonymized, meaning that only limited ads will be shown. Privacy Preference Center
Potential advertising partners https://goodgamestudios.com/iga-advertising-partners/
As the person concerned, you are entitled to exercise your rights against us. In particular, you have the following rights:
- In accordance with Article 15 GDPR and Section 34 BDSG, you have the right to request information as to whether or not, and to what extent, we process personal data about you.
- You have the right to have us correct your data in accordance with Article 16 GDPR.
- You have the right to have us delete your personal data in accordance with Article 17 GDPR and Section 35 BDSG.
- You have the right to have the processing of your personal data restricted in accordance with Article 18 GDPR.
- You have the right, in accordance with Article 20 GDPR, to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format and to transmit this data to another controller.
- You can exercise your rights by contacting us via our contact form.
In accordance with Article 21 GDPR, you have the right to object to any processing operations executed that use Art. 6 paragraph 1 sentence 1 letter e and letter f GDPR as their legal basis. Privacy Preverence Center
The Service is not targeted towards, nor intended for use by anyone under the age of 16. We do not collect personal data from any person we actually know is under the age of 16.
You can reach our data protection officer at: Peter Birgersson Deloitte AB Rehnsgatan 11 113 79 Stockholm, Sweden email@example.com
If you believe that the processing of your personal data constitutes an infringement of the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR.
If you are a California resident, you may be able to exercise different / additional rights granted by California law in relation to the Personal Data / Personal Information about you that we have collected (subject to certain limitations). Click Here for the CA Residents Privacy Statement To exercise these rights, to opt-out, or for any inquiries regarding how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”) please contact us via our support form or send an email to firstname.lastname@example.org.