Privacy policy

Cookie Settings

AMIGO Spiel + Freizeit GmbH (hereinafter referred to as “We” or “Us”) pays special attention on the processing of your personal data in accordance with the General Data Protection Regulation EU 2016/679 (GDPR) and the applicable national protection laws.

We want you to know when we collect which data and how we use it. We have taken technical and organisational measures to ensure that the data protection regulations are observed both by us and by our external service providers. In the following data protection notice we provide you with comprehensive information about the collection and processing of your personal data.

General Information

Responsible

The person who determines the purposes and means of the processing of personal data - in relation to the services and this website:

AMIGO Spiel + Freizeit GmbH, Waldstraße 23 – D5, 63128 Dietzenbach

Managing Director:	Uwe Pauli
Telephone:	+49 (60 74) 37 55-0
Telefax:	+49 (60 74) 37 55-666
E-Mail:	info@amigo-spiele.de or datenschutz@amigo-spiele.de

Scope of application

This data protection notice applies to the following services:

Our online service www.amigo-spiele.de
Our online service blog.amigo-spiele.de
Whenever reference is made to this data protection notice from one of our services (e.g. websites, subdomains, mobile applications, web services or integrations in third-party sites), irrespective of the way in which you access or use it.

All these services and offers are referred to collectively as „services“.

Data Protection Officer

Contact details of our Data Protection Officer:
Ronald Baranowski
SIX DATENSCHUTZ GmbH
+49 6101 982 94 22
rb@six-datenschutz.de

No obligation to provide & consequences of non-provision

The provision of personal data is not required by law or contract and you are not obliged to provide data. We will inform you during the input process if the provision of personal data is required for the respective service (e.g. in contact forms by designating it as a "mandatory field"). If data is required, failure to provide it will mean that the service in question cannot be provided. Otherwise, failure to provide the data may mean that we are unable to provide our services in the same form and quality.

Transfer of data to third countries

If we transfer data to third countries, i.e. countries outside the European Union, then the transfer takes place exclusively in compliance with the legally regulated permissibility requirements.

If the transfer of data to a third country is not for the purpose of fulfilling our contract with you, we do not have your consent, the transfer is not necessary for the assertion, exercise or defence of legal claims and no other exemption under Article 49 of the GDPR applies, we will only transfer your data to a third country if an adequacy decision under Article 45 of the GDPR or appropriate safeguards under Article 46 of the GDPR are in place.

Due to the declaration of invalidity of the EU-US Privacy Shield (ECJ 2020-07-16), processing in the USA is only possible with your consent pursuant to Article 6 para. 1 lit. a GDPR. A transfer to the USA in the sense of the European data protection level is not guaranteed with the declaration of invalidity.

Alternatively or additionally, create appropriate safeguards pursuant to Article 46 (2) c GDPR and an adequate level of data protection by entering into the EU standard data protection clauses issued by the European Commission with the receiving entity. Copies of the EU standard data protection clauses are available on the website of the European Commission, available here.

Disclosure of personal data

Your personal data will not be passed on, sold or otherwise transferred to third parties unless this is necessary for the purpose of processing the contract. Otherwise, we will only pass on your personal data to third parties within the framework of a legal permit or your consent, which can be revoked at any time for the future.

Service partners require your personal data and process it exclusively on our behalf within the framework of so-called order processing, which is expressly provided for in accordance with Article 28 (3) GDPR.

We only transfer your personal data to state institutions or authorities if we are obliged to do so by law.

Special terms of use

Insofar as special conditions for individual uses of this website deviate from the aforementioned enumerations, this will be expressly indicated at the appropriate place. In this case, the special terms of use apply in the respective individual case.

How do we secure your data?

We have implemented technical and organisational measures to protect your data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons. Our security measures are continuously improved in line with technological developments. Our employees are obliged by us to maintain confidentiality.

General information on the processing of your personal data

In the following, we will show you for which different purposes we collect which data within the scope of this website:

To be able to display our online presence to you, your IP address is automatically transmitted to our web server when you visit our website and is stored for the duration of your session on our website. After you leave our website, your IP address is deleted again.

Amazon Web Services

We use the Amazon Web Services ("AWS") service of Amazon EU S.a.r.l., 5, Rue Plaetis, 2338 Luxembourg to host the database and web content. Corporate headquarter is Amazon Web Services Inc, P.O. Box 81226, Seattle, WA 98108-1226, USA. We use this service to be able to provide a secure and fast online offer. The data is stored exclusively in a German data centre in Frankfurt, which is certified according to international security standards. Various categories of personal data are processed, e.g. personal data, technical data, contact data, etc. The data is automatically encrypted so that only we, as the responsible party, have access to the data.

We have concluded contractual agreements with AWS for the processing of data in accordance with Art. 28 GDPR.

When using this service, data may be transferred to third countries outside the EU; this is done in accordance with the above notes on transfer to third countries. The processing is carried out in accordance with your consent pursuant to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time by changing the cookie settings or by contacting us using the above contact options.

For more information, please refer to AWS Privacy Policy and Terms of Use:

https://aws.amazon.com/privacy/?nc1=h_ls

https://aws.amazon.com/service-terms/

Visiting our website

In the case of mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis for this is Art. 6 para. 1 p. 1 lit. f) GDPR):

The name of your internet service provider
The website from where you are visiting us, as well as the date and time of your visit
The amount of data transferred in each case
Your browser, the language and version of your browser software as well as your operating system and its interface

We evaluate this technical data anonymously and only for statistical purposes in order to optimise our internet presence and to be able to make our internet services even more attractive. This anonymous data is stored separately from personal information on secure systems and does not allow any conclusions to be drawn about an individual person.

Cookie consent

We use the services of consentmanager (consentmanager AB, Haltegelvägen 1b, 72348 Västeras, Sweden, referred to here as "consentmanager") to obtain, manage and optimise your consent to the use of cookies and other services for the operation of our website. Before the functions of the website can be fully used, consentmanager obtains the necessary consent from the user in accordance with data protection regulations. You have the option of giving your consent for all services or only for certain services. Consentmanager administers these and you have the right to revoke your consent at any time. You can adjust your consent yourself in the so-called "data protection settings". You will find the symbol for this service at the bottom left of our website. The use of this service requires the processing of your IP address and the storage of your preferences regarding the services to be used. The data will be stored for the duration of your consent (until you revoke it). For the processing of personal data (in this case IP address), we have concluded a contract with consentmanager in accordance with the provisions of Art. 28 GDPR. We use the service on the legal basis of Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest here is the data protection-compliant operation of our website and its functions. Processing outside the EU does not take place.

a) Online shopping / e-commerce

In the following, we describe how your personal data is processed when you place orders in the online shop.

For identification, contacting, registration as a customer, age verification, for advertising purposes (e.g. by e-mail) of our own offers, personal master data (name, title, customer number), address data and contact data, such as your e-mail address, as well as your product orders are processed. Your order data (invoice amounts, orders, name, total amount of open and/or paid items, due date) are received:

Our order processing department
Other internal departments for the purpose of checking incoming payments and, if necessary, for carrying out dunning procedures and
Our shipping and storage partner, which is also contractually bound in accordance with Art. 28 GDPR, for processing your order and for determining open items and balances

Payment data are required for the payment processing of our services. This data is forwarded to our contractually bound service provider for payment processing. The storage period for all data and receipts required by tax law (such as invoices) is 10 years after processing of the last order, counting from the following year of receipt creation. We so not store any other payment data.

Data processing is based on Art. 6 para. 1 lit. b (performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract) and lit. f (legitimate interest pursued by the controller or a third party) GDPR. Our legitimate interests are economic reasons (ensuring incoming payments), advertising purposes, maintaining the customer relationship with you and marketing our services. The storage period is 10 years after processing of the last order.

We use PayPal, a service of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. By selecting payment by PayPal, we redirect you to a PayPal web page. All PayPal transactions are subject to PayPal's privacy policy. PayPal and we act independently in terms of data protection.

b) Data processing through the use of cookies

Our website uses cookies. These are text files that are stored on your computer in order to be able to track visitor preferences and optimally design our website accordingly.

We use transient cookies. These are automatically deleted when you close the browser. These include, in particular, session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your device to be recognised when you return to the website. Session cookies are deleted when you log out or close your browser.

To prevent cookies from being stored, "do not accept cookies" must be selected in the browser settings. If no cookies are accepted by the browser, the functionality of the website may be limited.

This stored information is processed separately from any other data stored by us. In particular, the cookie data is not linked to your other data.

You can adjust the cookie settings at any time.

The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR (consent).

c) Tracking to analyse and optimise our services and their use

The analysis of user behaviour by means of tracking helps us to check the effectiveness of our services, to optimise them and to adapt them to the needs of the users and also serves to eliminate errors. In addition, we use the analysis to determine statistical parameters about the use of our services (reach, intensity of use, surfing behaviour of users) and thus obtain values that can be compared across the market.

The evaluation of information obtained through tracking is necessary in order to provide you with optimised services in accordance with the contractual purpose and to guarantee you the greatest possible benefit.

In the case of services provided by us in connection with consent, the tracking and the associated analysis of user behaviour is carried out in accordance with the consent you have given us. The legal basis for this processing of personal data is Art. 6 lit. a) GDPR. You can revoke your consent at any time in the cookie settings.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices or the EU site http://www.youronlinechoices.com. Furthermore, the storage of cookies can be disabled by deactivating them in the browser settings.

Please note that you may then not be able to use all the functions of this online offer.

The tracking methods used in detail:

Web analytics service Google Analytics 4.0

We use Google Analytics Version 4.0 of Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland) and Google Inc, USA. Google processes personal user data unless you have previously objected to this use in your Google account. In addition to the so-called "events", Google also processes cookies that allow an analysis of your website visit. In this way, your data is also transferred to the insecure third country USA.

Legal basis for the use of Google Analytics 4.0 is your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you can revoke at any time with effect for the future via this link.

Google creates user profiles based on various data and so-called "events" that reflect your user behaviour. Events and data can be:

Client ID, device used, last online status
Page views
First visit to the website
Start of session
Your „click path“, interaction with the website
Scrolls (whenever a user scrolls to the bottom of the page (90 %)
Clicks on external links
Internal search queries
Interaction with videos
File downloads
Ads seen / clicked on
Language settings

In addition, your approximate location (region), your IP address (in shortened form), technical information about your browser and the end devices you use (e.g. language setting, screen resolution), your internet provider, the referrer URL (= via which website or advertising material you came to this website) are recorded.

Evaluations based on the above-mentioned data as well as, among other things, on those of Google Signals, which collects and evaluates cross-device tracking data, can thus be created. For example, whether you visited our website for the first time and how this was done (e.g. via an advertisement), or whether further interactions followed the website visit (e.g. shop purchases).

Purpose: We only receive statistical, anonymised information from Google based on the above information in order to analyse our websites and optimise our web offering.

Your IP address will be anonymised by Google. This usually already takes place within the European Union or in other contracting states of the Agreement on the European Economic Area. In exceptional cases, the full IP address is transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

More information on Google’s data protection policy can be found here: https://policies.google.com/privacy?hl=en or via Google Analytics support information: https://support.google.com/analytics/?hl=en#topic=1008008

We have concluded a data processing agreement with Google and implement the requirements of the German data protection authorities when using Google Analytics.

We use the data obtained to determine how you have used our website. This helps us to optimise the website and to continually improve its user-friendliness. This is also a legitimate interest.

We delete your personal data when it is no longer necessary to achieve the purpose for which it was processed. This is the case after 14 months.

You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will then be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics.

Google Tag Manager

We use the service Google Tag Manager from Google. “Google” is a group of companies and consists of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as well as other affiliated companies of Google LLC.

We have concluded an order processing agreement with Google. The Google Tag Manager is an auxiliary service and only processes personal data itself for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data. The Google Tag Manager does not access this data.

For more information on the Google Tag Manager, please see Google’s privacy policy.

Please note that American authorities, such as intelligence agencies, could potentially gain access to personal data that is inevitably exchanged with Google due to the Internet Protocol (TCP) when this service is integrated, due to American laws such as the Cloud Act.

d) Tracking to measure the success of advertising campaigns and optimise the display of advertising

In the following, we describe how your personal data is processed using tracking technologies on the basis of Art. 6 para. 1, lit a GDPR in order to make the success of advertising campaigns measurable and to optimise the display of advertisements.

Tracking to measure the success of advertising campaigns serves to optimise our ads for the future and to enable marketers and advertisers to also optimise their ads accordingly. Tracking to optimise the display of advertisements has the purpose of displaying advertisements to users tailored to their interests, to increase the success of the advertisements and thereby also to increase advertising revenues.

The legal basis for this processing of personal data is Art. 6 para. 1 lit. a GDPR (consent). If you have given us consent, you can revoke this at any time via this link.

Details of the services that are also used for tracking:

GoogleAds

The purpose of Google Ads is to promote our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertising on our website.

If a data subject accesses our website via a Google advertisement, a so-called conversion cookie will be stored on the IT system of the data subject by Google. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. The conversion cookie enables us and Google, provided that the cookie has not yet expired, to recognise when a particular page is visited that the data subject has clicked on an advertisement and been redirected to our page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers.

The operating company of the Google Ad services is Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Ads is to promote our website by displaying interest-relevant advertisements on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertisements on our website.

If a data subject accesses our website via a Google advertisement, a so-called conversion cookie will be stored on the data subject’s IT system by Google. A conversion cookie becomes invalid after 30 days and is not used to identify the data subject. The conversion cookie enables us and Google, provided that the cookie has not yet expired, to recognise when a particular page is visited that the data subject has clicked on an advertisement and been redirected to our page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ad customers.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via the ads, i.e. to determine the success or failure of the respective ad and to optimise our ads for the future. Neither our company nor other advertisers of Google Ads receive information from Google by means of which the data subject could be identified.

By means of the conversion cookie, personal information, for example the internet pages visited by the data subject, is stored. Each time the data subject visits our website, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America (USA) and stored there. Google may also pass on personal data collected via this technical procedure to third parties.

In addition, the data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programmes.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject can adapt his or her personalisation settings and cookies with any of the internet browsers he or she uses via this link.

More information on Google’s data protection policy can be found here: https://policies.google.com/privacy?hl=en

Google Marketing Platform (formerly DoubleClick by Google) / Campaign Manager

This website continues to use the online marketing tool Campaign Manager from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Campaign Manager uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being shown more than once. In addition, Campaign Manager can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager ad and later visits the advertiser's website with the same browser and makes a purchase. According to Google, Campaign Manager cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Campaign Manager, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is still possible for the provider to obtain and store your IP address.

You can prevent participation in this tracking process in various ways:

by setting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving ads from third-party providers
by disabling conversion tracking cookies by setting your browser to block cookies from the googleadservices.com domain via this link, however, these settings will be deleted as well when you delete your cookies
by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads", via the link http://www.aboutads.info/choices - this setting will also be deleted when you delete your cookies
by permanently disabling them in your Firefox, Internet Explorer or Google Chrome browsers at this link.
by means of the corresponding cookie setting. Please note that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookies about your use of the websites and the processing of this data by Google by downloading and installing the browser plugin available at https://support.google.com/adsense/answer/142293?hl=en-GB&sjid=1420141456602813198-EU under "Display settings", "Extension for Campaign Manager deactivation".

The data sent by us and linked to cookies will be automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

For more information on the Google Marketing Platform, please visit https://marketingplatform.google.com/intl/en_uk/about/ and on Google privacy in general https://policies.google.com/privacy?hl=en. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Matomo

This website uses the open-source web analytics service Matomo. This service is currently used as a locally installed "on-premises" variant.

The service provider is InnoCraft Ltd, PO Box 625, 7 Waterloo Quay, Wellington 6011, New Zealand. Matomo uses so-called "cookies". These are text files which are stored on your computer and which can be used to analyse your use of the website and derived from this, to create usage profiles based on pseudonyms. For this purpose, the information generated by the cookie about website usage is stored on our server.

Matomo can be used externally and locally. We use the local installation, in which your IP address on our web server is anonymised by us locally before storage. In this process, data blocks are automatically removed from the IP address (example: 123.123.123.123 becomes 123.123.0.0). In this way, it is no longer possible to identify the user and geolocation is only possible to a very limited extent. Only anonymised IP addresses are stored, which are deleted after 90 days.

Matomo thus receives no data from you and you remain anonymous as a user. The information generated by the cookie about your use of this website is not otherwise passed on to third parties.

It is no longer possible to draw conclusions about an individual visitor from the existing data.

The legal basis for this is Art. 6 para. 1 lit. a GDPR - your consent, which you can revoke at any time.

e) Other services

Google Maps

On our website, we use Google Maps as a tool for competitions - e.g. for displaying clues to the hiding places of games and other locations - or possibly also for directions or locations of our company or events.

To enable the display of maps and a location on our website, a connection to the Google server in the USA is established when you access our website.

If you call up the Google Maps component integrated into our website, Google will store a cookie on your end device via your internet browser. In order to display our location and create directions, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA.

The connection to Google established in this way enables Google to determine which website your request was sent from and to which IP address, e.g. directions or locations, are to be transmitted.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your internet browser. You can find details on this under the point "1. Data processing through the use of cookies".

The processing only takes place after you have given your consent (Art. 6 para. 1 lit a GDPR), which you can also revoke at any time in the cookie settings. In addition, the use of Google Maps and the information obtained via Google Maps is carried out in accordance with the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=en and the Terms and Conditions for Google Maps https://www.google.com/intl/en_en/help/terms_maps/.

Google offers a website at

https://adssettings.google.com/authenticated

https://policies.google.com/privacy?hl=en

for further information.

Google Fonts und Fontawesome

For the graphically uniform display of fonts, we use the fonts of the two providers Google Webfonts (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) and Fontawesome (Fonticons Inc. (6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA).

Only static elements are used here. This means that the fonts are initially loaded and installed by us and no personal data (such as your IP address) is required for the operation of these services and is not transmitted to the providers.

The use of the above-mentioned services is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of the legal basis of Art. 6 para. 1 lit. f GDPR.

Notes on processing, procedures and services : Plentymarkets

Plentymarkets is a platform through which e-commerce services are offered and carried out. The services and processes carried out in connection with them include in particular online shops, websites, their offers and content, community elements, purchase and 15 payment transactions, customer communication as well as analysis and marketing. The service provider is Plentysystems AG, Bürgermeister-Brunner-Straße 15, 34117 Kassel, Germany.

The processing is carried out in our legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR).

For more information, please visit the Plentymarkets website:https://www.plentymarkets.com

f) Data processing by social networks

We maintain publicly accessible profiles on social networks.

As a rule, the social networks comprehensively analyse your user behaviour when you visit their websites. Visiting our social media sites therefore triggers numerous data protection-relevant processing operations. For the social networks Facebook, Instagram, Twitter and YouTube, we have included a direct link to our pages. You can recognise the link by the corresponding symbols.

If you are logged into your social media account and visit our social media presence on a social network, the operator of the social network can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social network. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social networks can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside the respective social networks. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we are not able to track all processing operations of the social networks. Depending on the provider, further processing operations may therefore be carried out. For details, please refer to the terms of use and data protection provisions of the respective social network (see below).

Our social media presences are intended to ensure the most comprehensive possible presence of our company, our goods and services on the Internet. This is a legitimate interest within the meaning of Article 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on deviating legal bases to be specified by the operators of the social networks (e.g. your consent within the meaning of Article 6 para. 1 lit. a GDPR), as is the case with YouTube, for example.

If you visit one of our social media sites (e.g. our Facebook page), we are jointly responsible with the operator of the respective social network for the data processing operations triggered during this visit. In principle, you can assert your rights (to information, correction, deletion, restriction of processing, data portability as well as your right of complaint) against both us and the operator of the respective social network.

Please note that despite the joint responsibility pursuant to Article 26 GDPR, we do not have full influence on the data processing operations by the operators of the respective social network. Our (influence) possibilities are largely determined by the corporate policy of the respective provider.

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete your data, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions and retention periods remain unaffected.

We have no influence on the duration of the storage of your personal data by the operators of the social networks for their own purposes. Please obtain information directly from the operators of the social networks (e.g. in their data protection notices, see below).

Social media in detail:

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (>>Facebook<<).

According to Facebook, the data collected is also transmitted to the USA and other third countries and stored on Facebook servers in the USA or other third countries. Due to the declaration of invalidity of the EU-US Privacy Shield (ECJ 2020-07-16), processing in the USA is only possible with your consent pursuant to Article 6 para. 1 lit. a GDPR. A transfer to the USA in the sense of the European data protection level is not guaranteed with the declaration of invalidity.

We have concluded a joint data processing agreement (Controller Addendum) with Facebook. This agreement specifies the data processing operations for which we or Facebook are responsible when you visit our Facebook page. You can view this agreement under the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in:

www.facebook.com/settings

For details, please refer to Facebook's privacy policy: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

Instagram

We have a profile on Instagram. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (>>Instagram<<).

For details on how they handle your personal data, please refer to Instagram's privacy policy:

https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

When using this service, personal data may be transmitted to Meta servers located in the USA. Processing is only possible with your consent in accordance with Art. 6 para. 1 lit. a GDPR. A level of data protection in the sense of the GDPR is not guaranteed.

YouTube and Google Photos

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin4, Ireland (>>YouTube<<).

For details on how they handle your personal data, please refer to YouTube's privacy policy:

https://policies.google.com/privacy?hl=en

We have also embedded YouTube videos on our website, which uses the Google Photos service. When you click on videos on our website, a connection to the YouTube servers is established. In the process, YouTube is informed of your IP address and which website you visited. If you have your own YouTube account and are already logged in there, YouTube can assign your surfing behaviour directly to your personal profile. You can prevent this association if you log out of your account beforehand.

The legal basis for the use of YouTube is your consent, Art. 6 para. 1 lit. a GDPR.

Web messaging service Twitter

We have a Twitter profile. We have integrated the tweet function of the twitter.com web messaging service on our website. This is provided by the Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND (hereinafter: Twitter). Twitter offers the so-called "tweet" function. This allows you to publish 280-character messages, including website links, in your own Twitter account. If you use the "tweet" function of Twitter on our website, the respective website will be linked to your account on Twitter and may be publicly announced there. Data is also transferred to Twitter in the process.

We do not receive any knowledge of the content of the transmitted data and its use by Twitter. For further information, please consult Twitter's data protection declaration: http://twitter.com/en/privacy.

Twitter offers you the possibility to define your own data protection settings under the following link: http://twitter.com/en/account/settings.

When using this service, personal data may be transmitted to Twitter servers that are not located in the EU, e.g. in the USA. Due to the declaration of invalidity of the EU-US Privacy Shield (ECJ 2020-07-16), processing in the USA is only possible with your consent pursuant to Article 6 para. 1 lit. a GDPR. A transfer to the USA in the sense of the European data protection level is not guaranteed with the declaration of invalidity.

TikTok web messaging service

We also have a TikTok profile. Our posted content can be accessed through the TikTok app. The TikTok app is a social network where short videos can be made and shown to users of the app. TikTok is a service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, referred to hereinafter as "TikTok". We use TikTok as a platform to interact with our customers and showcase our products.

In order to publish own videos and to view those of others, it is necessary that the user has downloaded the app (mobile or on your computer) and has registered. Users agree to TikTok's terms of use and privacy policy. The following user data are processed:

Content from audio and video chats
All installed and deleted apps
Location (via GPS); depending on the app version, the location is queried every 30 seconds, which can also be used to create movement profiles.
IP addresses and names of network connections
Mac addresses of routers and smartphones
Information on whether your device is rooted (you have all access rights) or jailbroken (you can load unauthorised apps).
Clipboard (on the iPhone)

TikTok processes this data for various purposes, such as to provide its services, to notify users of changes to the services, to provide support when needed and to enable users to share content with other users.

The data is stored for as long as it is necessary to provide the service to users and to fulfil contractual obligations. For information on the storage period, please refer to TikTok's privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en.

TikTok processes your data on the basis of the consent you gave when loading the app (Art. 6 para. 1 lit. a GDPR) and a contract you entered into with TikTok to use the app (Art. 6 para. 1 lit. b GDPR).

TikTok offers its users the possibility to control and manage their own user data via the settings options. Automated information services are also offered to provide you with information on how your data is processed. Within the framework of the legal requirements, you have the right to delete and correct the data and can object to the use of your data or have the processing restricted. You also have the right to revoke your declared consent at any time.

Please note that your data may be transferred to third-party providers that are not located in the European Union, in this case China. In addition, data will be transferred to business partners, other TikTok Group companies (e.g. in the USA), moderation service providers, measurement service providers, advertisers and analytics providers.

For more information, please see TikTok's Terms of Use:

https://www.tiktok.com/legal/page/eea/terms-of-service/en

g) Video conferencing

In the following we inform you about the different possibilities to contact us via video conference. This may be necessary, for example, in the context of our business or customer relationship. Should we wish to use this option with you, this will take place within the framework of our contractual relationship in accordance with Art. 6 Para. 1 lit. b) DSGVO. In the course of this communication with you, we will inform you of the service we wish to use (see below).

As a matter of principle, video conferences are not recorded. Should this be necessary in individual cases, we will expressly point this out to you. Recording only takes place with your consent pursuant to Art. 6 para. 1 lit. a) DSGVO. Please deactivate your camera and microphone if you do not consent!

When using these services, personal data may be transmitted to servers in third countries, e.g. the USA. Due to the declaration of invalidity of the EU-US Privacy Shield (ECJ 2020-07-16), processing in the USA is only possible with your consent pursuant to Article 6 para. 1 lit. a GDPR. A transfer to the USA in the sense of the European data protection level is not guaranteed with the declaration of invalidity.

Teams

We use the Teams tool to conduct online meetings, video conferences, teleconferences and/or webinars. Teams is a service of Microsoft Corporation (South County Business Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521, Ireland). The privacy notice and further information can be found here:

Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement

When using this service, personal data may be transmitted to servers in third countries, e.g. the USA. Due to the declaration of invalidity of the EU-US Privacy Shield (ECJ 2020-07-16), processing in the USA is only possible with your consent pursuant to Article 6 para. 1 lit. a GDPR. A transfer to the USA in the sense of the European data protection level is not guaranteed with the declaration of invalidity.

Discord

Discord, Inc. is a communication platform that provides online and mobile social chat services ("Discord" VeraSafe Ireland Ltd Unit 3D North Point House North Point Business Park New Mallow Road Cork T23AT2P Ireland). This service may take place in communities (group chats). Discord's privacy policy and terms of use can be found here:

https://discord.com/privacy

https://discord.com/terms

h) Online games platforms

In the following, we inform you about various providers of online gaming platforms that you can use via links on our website. The respective valid terms of use and data protection information of the respective provider apply.

Please note that when using these services, personal data may be transmitted to servers in third countries, e.g. the USA. Due to the declaration of invalidity of the EU-US Privacy Shield (ECJ 2020-07-16), processing in the USA is only possible with your consent pursuant to Article 6 para. 1 lit. a GDPR. A transfer to the USA in the sense of the European data protection level is not guaranteed with the declaration of invalidity.

Boardgame Arena

We provide you with the link to Boardgame Arena on our website. Boardgame Arena is a service provided by AD2G StudioSAS (19 rue des Ormeaux, 92 260 Fontenay-aux-Roses, France). The game platform offers the possibility to play classic games online with other users worldwide. To participate, the user creates a profile on the website https://de.boardgamearena.com/ein in order to be able to participate in games. The corresponding terms of use and data protection information of Boardgame Arena apply:

https://en.boardgamearena.com/legal?section=legal

Brettspielwelt

Brettspielwelt (Brettspielwelt GmbH, Schreinerweg 2d, 51789 Lindlar) provides online board games that can be played together with other users of this service in a so-called "room". To participate, the user creates a profile on the https://www.brettspielwelt.de/ website. The terms of use and data protection information of Brettspielwelt apply:

https://intro.brettspielwelt.de/agb.html

https://intro.brettspielwelt.de/datenschutz.html

Tabletopia

Tabletopia (Tabletopia Inc, 490 Post St Ste 526, San Francisco, CA 94102, USA) provides you with a worldwide online gaming platform. In order to participate, you must create a user profile on the https://tabletopia.com/ website. Please note that the service is provided by a provider based in a third country (USA).Due to the declaration of invalidity of the EU-US Privacy Shield (ECJ 2020-07-16), processing in the USA is only possible with your consent pursuant to Article 6 para. 1 lit. a GDPR. A transfer to the USA in the sense of the European data protection level is not guaranteed with the declaration of invalidity.

The terms of use and the privacy policy of Tabletopia apply

https://tabletopia.com/pages/terms-of-use

https://tabletopia.com/pages/privacy-policy

i) Data processing when using our general contact form

If you contact us via our website, we will process the following information in order to respond appropriately to your enquiry:

Your first and last name
Your e-mail address – your message/remarks

Without these mandatory fields, we may not be able to fully process your request.

You can provide the following additional data voluntarily:

Your telephone number, fax, company name and address

If this data is missing, we cannot contact you via the corresponding channel, but only via your e-mail address.

The data will be deleted as soon as it is no longer required for processing your enquiry and there are no legal obligations to retain the data.

The legal basis for data processing is Art. 6 para. 1 lit. b GDPR, insofar as the processing of your enquiry is for the purpose of explaining our services and our company or your enquiry is in preparation for the conclusion of a contract, the legal basis is Art. 6 para. 1 lit. b GDPR.

Otherwise, your request is based on your implied consent (Art. 6 para. 1 lit. a GDPR).

j) Data processing when using our press contact form

As a media representative, you can contact us via our press contact form. In doing so, we process the following data:

Date and time of the request
Your first and last name
Medium
e-mail address
Subject line
Message/Remark

You can enter the following additional data voluntarily:

Your telephone number, fax, address, editorial office/department

If this data is missing, we will not be able to contact you via the corresponding channel, but only via your e-mail address.

For the maintenance of the business relationship, your data will be stored by us until revoked.

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR (legitimate interest of the responsible party: economic interests).

k) Newsletter

Within the framework of our press contact form, you can also subscribe to our newsletter. The dispatch of the newsletter is controlled via the "Brevo" service. The provider of this service is Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin (hereinafter "Sendinblue"). The parent company is Sendinblue SAS at 7 RUE DE MADRID, 75008 PARIS 8, France, e-mail: datenschutz@brevo.com. For the subscription, we need your e-mail address and your last name.

The newsletter will only be sent after you have entered your e-mail address and confirmed that you are the owner of the e-mail address and that you agree to receive the newsletter ("double opt-in procedure"). The data is only collected and used for the purpose of sending you the requested newsletter. The legal basis is your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

The processing is carried out in accordance with the provisions of Art. 28 GDPR. Processing does not take place outside the EU. The processing takes place on servers in Germany. Further information on the data protection of our service provider can be found here: https://www.brevo.com/de/legal/privacypolicy/

You can unsubscribe from an e-mail newsletter at any time with effect for the future and revoke your consent with effect for the future either by clicking on the link provided for this purpose in every e-mail newsletter or by contacting us using the contact details provided.

l) Data processing when using our brand ambassador form

Bloggers who are interested in our brand ambassador programme can apply via our brand ambassador contact form.

In doing so, we process the following data:

Date and time of the request
Your first and last name
Your email address
URL of the main channel
Information on the average page views of the main channel per month
Indication of why you would like to test AMIGO games

You can voluntarily provide the following additional data:

Address, age, indication of social media channels, indication of with whom you would like to test games, which games you would like to test.

If this data is missing, we will need to request it separately to the extent that it is necessary for our decision-making process and to contact you.

Our selection process may take several months. If you are not considered for our Brand Ambassador Programme, your data will be deleted on Jan. 01 of the following year. We only send written confirmations of acceptance, no rejections. You can reapply at any time.

In the event of an acceptance, the data provided will be stored for the purpose of sending product samples and for further communication until revoked.

m) Data processing for applications and in the application procedure

AMIGO collects and processes personal data of applicants internally for the purpose of handling the application procedure, for checking the application prospects and for the selection of applicants. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR - pre-contractual measures as well as Art. 88 GDPR in conjunction with § 26 BDSG (new) (data processing in the context of employment). Insofar as you provide us with documents containing "special categories of personal data" pursuant to Art. 9 para. 1 GDPR, the legal basis for the processing of these data is Art. 9 para. 2, lit. a GDPR (explicit consent), as the data were provided voluntarily and knowingly. If this includes data required for the exercise of the profession, the legal basis is Art. 9, para. 2, lit. b GDPR (performance of contract).

The processing may also be carried out by electronic means. This is in particular the case when an applicant sends the relevant application documents to the data controller by electronic means, for example by e-mail or via a web form on the website.

The data will be processed exclusively for the above-mentioned purposes. As a matter of principle, only those persons have access to your data who require this for the proper conduct of the application procedure. Your data will not be disclosed to unauthorised third parties and will be stored by contractually bound software providers (on the basis of a contract within the meaning of Art. 28 GDPR or/and EU standard data protection clauses). They are primarily processed on German servers and may be transferred to the USA if necessary.

Your data will be deleted 6 months after the decision on the job assignment, provided that no employment contract has been concluded, no legal or contractual or no legitimate interests of the responsible person are opposed to this. A legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Act on Equal Treatment Act (AGG). In the event that we would like to consider your application for future job offers and store it for a longer period of time for this purpose, we will ask you for your consent in accordance with Art. 6, para. 1, lit. a GDPR beforehand.

If an employment contract is concluded with an applicant, the transmitted data will be processed for the purpose of handling the employment relationship.

Please also note the detailed information on the application procedure.

The application procedures in detail:

n) Data processing when using our applicant contact form

You can send us your applications as a promoter or helper at tournaments and events via our application forms in the "Events" section. In doing so, we process the following data:

Date and time of the request
Surname and title
Postcode, place of residence and country
E-mail address
Enquiry text

We cannot process your request without this data.

You can provide the following additional data voluntarily:

First name
Street and number
Telephone number
Date of birth
Recruited by
Application photo

If this data is missing, we will request it separately insofar as it is necessary for our decision-making and for contacting you.

The data is processed for the purpose of assessing your application prospects and selecting applicants.

o) Data processing when using our career website

You can send applications by e-mail to the address bewerbung@amigo-spiele.de.

The following data is required:

Name, first name
E-mail address
Place of residence
Telephone number
Lebenslauf
Testimonials

If data is missing for application purposes, we may request it separately, insofar as it is necessary for our decision-making process and for contacting you.

The data will be processed internally for the purpose of checking your application prospects and selecting applicants.

p) Booking Calendar

We use the open-source software of the WordPress plugin "Booking Calendar" to make appointments at fairs and events. With this we store:

Your last name
Your e-mail address
Your telephone number
Your appointment request

This data is used to arrange and organise an appointment between you and us.

The legal basis for this is Art. 6 para. 1, lit. b GDPR (pre-contractual or contractual measures), e.g. if you are interested in our products and services or have questions about them, have questions about orders or your enquiry is related to the performance of a contract. Otherwise, your request is based on your implied consent (Art. 6 para. 1 lit. a GDPR).

Your data will be deleted as soon as the appointment has taken place and there are no legal or contractual reasons against this deletion.

Your rights

In accordance with the EU Data Protection Regulation (GDPR), you have the right to request information from us at any time about whether personal data about you is stored by us. Furthermore, you have the following rights in relation to personal data stored about you:

the right of access by the data subject (Art. 15 GDPR)
the right to rectification (Art. 16 GDPR)
the right to erasure of data (“right to be forgotten”) (Art. 17 GDPR)
the right to restriction of processing (Art. 18 GDPR)
the right to object (Art. 21 GDPR) and
the right to data portability (Art. 20 GDPR)

If you have given your consent to the use of data, you can revoke this consent at any time with effect for the future.

Please address all general requests for information as well as requests for information or objections to data processing by e-mail to info@amigo-spiele.de or to the company address provided in the imprint.

You also have the right to appeal to the competent supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged breach, if you believe that the processing of personal data concerning you violates the GDPR (Art. 77 GDPR).

Unsubscribe

Opting out of interest-based advertising via our targeting cookies as well as the targeting cookies of other service providers is possible on the following websites.

www.aboutads.info/choices/
www.youradchoices.ca/choices/
www.youronlinechoices.com www.youronlinechoices.com (by clicking on the "Your ad choices" link after selecting the appropriate country).

Please contact us if you have any questions about the tracking procedures and the exercise of your right of withdrawal: datenschutz@amigo-spiele.de

Other information

Children and adolescents

Persons under the age of 18 are not permitted to submit personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect it and do not pass it on to third parties.

Changes to our data protection notice

We reserve the right to change our data protection measures if this becomes necessary due to technical developments or changes in legislation or jurisdiction. In these cases, we will also adapt our data protection notice accordingly. Please therefore note the current version of our data protection notice.

Issued: July 13, 2023