I. General information
1. Responsible body, introduction
Below we explain which personal data we collect and process when you visit this website and apply for and participate in the Games Founding Grant. This applies in addition to our general privacy policy. We are game – Verband der deutschen Games-Branche e.V. (The Association of the German Games Industry), based at Friedrichstraße 165, 10117 Berlin and you can contact us by post or email at datenschutzbeauftragter[at]game.de.
The protection of your privacy is very important to us. We therefore explain below which personal data we collect and process when you use our services or make use of our offers. Personal data are individual details about the personal or factual circumstances of a specific or identifiable natural person. This includes, for example, the name, e-mail address or telephone number.
The collection, processing (including storage, modification, transmission, blocking and deletion) and use of your data is carried out in compliance with the provisions of data protection law. Personal data is only collected, used and passed on if this is permitted by law or if the users give their consent to the collection of data and if this is technically or legally necessary for the provision of the service. Under no circumstances will the data collected be sold or unlawfully passed on to third parties for any other reason.
2. Legal basis
We collect and process personal data based on the following legal bases:
– Consent pursuant to Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR). Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her
– Necessity for contract fulfilment or implementation of preparatory measures in accordance with Article 6 para. 1 lit. b GDPR, i.e. the data is required so that we can fulfil our contractual obligations towards you or we need the data to prepare the conclusion of a contract with you.
– Processing for the fulfilment of legal obligations pursuant to Article 6 para. 1 lit. c GDPR, i.e. processing of the data is required, for example, by law or other regulations.
– Processing for the purposes of legitimate interests in accordance with Article 6 para. 1 lit. f GDPR, i.e. processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.
3. Rights of data subjects
You are entitled to the following rights with regard to data processing by us to the extent specified in the respective articles of the General Data Protection Regulation:
- Right of access in accordance with Article 15 GDPR, i.e. the right to be informed about how your personal data is processed and which personal data is processed by us,
- Right to rectification pursuant to Article 16 GDPR – i.e. the right to obtain without undue delay the rectification of inaccurate personal data concerning you, including the completion of incomplete data,
- Right to erasure (“right to be forgotten”) under Article 17 GDPR – i.e. the right to request the erasure of your personal data if certain conditions are met,
- Right to restriction of processing under Article 18 GDPR – i.e. the right to request the restriction of the processing of your personal data, provided that certain conditions are met,
- Right to data portability in accordance with Article 20 GDPR – i.e. the right to request that you receive the personal data you have provided to us in a structured, commonly used and machine-readable format and the right to transmit those data to a third party, provided that certain conditions are met,
- Right to object under Article 21 GDPR – i.e. the right to object to the processing of your personal data where the processing is based on our legitimate interests, provided certain conditions are met.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
4. Data erasure and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract or you have expressly consented to the further use of your data.
II. Specific data processing
1. Data collection when visiting the website
a) Scope of data processing
The following data is collected and stored when you visit our website:
Information about the browser type and version used
The user’s operating system
The user’s internet service provider
The IP address of the user
Date and time of access
Log file about errors or successful delivery
Websites from which the user’s system accesses our website (referrer URL)
Host name of the user’s system
The data is stored in the log files of our system by our hosting provider within the European Union. This data is not stored together with other personal data of the user.
b) Legal basis
The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in the functionality of our website and its availability.
The legal basis for processing by our hosting provider is Art. 28 para. 3 GDPR.
c) Purpose of data processing
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The data is stored in order to ensure the functionality of the website. We also use the data to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.
d) Duration of storage
The log files are anonymised by shortening the IP address, unless there is a need to retain the data for the aforementioned purpose due to specific events. Archived log files are deleted after 190 days.
e) Possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.
2. Contact by e-mail
a) Scope of data processing
You can contact us via the e-mail addresses provided on the websites. In this case, your personal data that you send to us by e-mail will be stored. If you apply for the scholarship and enter your e-mail address, we may subsequently use it to send you e-mails. In such a case, only information about news and information about the scholarship will be sent to your e-mail address. Some of
the data will be processed and stored by an e-mail provider based in the United States of America and commissioned by us. The data is partially processed by Stiftung Digitale Spielekultur gGmbH (Foundation for Digital Games Culture).
b) Legal basis
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in responding to a contact enquiry or implementing the scholarship programme.
Processing by our email provider is carried out on the basis of Art. 28 para. 3, 6 GDPR in conjunction with the use of the standard contractual clauses of the EU Commission and Art. 45 para. 1 GDPR by means of the EU-U.S. Data Privacy Framework (10 July 2023). The service provider is certified accordingly (https://www.dataprivacyframework.gov/list). The processing by Stiftung Digitale Spielekultur gGmbH is also based on Art. 28 para. 3 GDPR.
c) Purpose of data processing
The purpose of data storage is to contact you at your request.
d) Duration of storage
The data will be stored for as long as is necessary to deal with the enquiry. Insofar as these are commercial letters subject to retention under commercial and tax law, they will also be stored in accordance with the statutory retention periods.
e) Possibility of objection and removal
You have the option to object to further use at any time. You can declare your objection by sending an email to: datenschutzbeauftragter@game.de. Deletion can only take place if there is no legal obligation to retain the data; in this case, however, the data will be blocked for any other use. In the event of an objection, the conversation cannot be continued.
3. Processing for the application Implementation, utilisation review and evaluation
a) Scope of data collection
The following data is collected and stored as part of the application and participation for the Games start-up grant:
- Surname, first name
- E-mail address and login data (user name and password)
- Residential address (street, house number, town, postcode)
- Information on nationality, existing scholarships, motivation and self-description, curriculum vitae, start-up status and, if applicable, already founded company.
- Sum, date and account details for the paid grant amounts
The aforementioned data will also be passed on to the Minister of State for Culture and The Media as part of the review of the utilisation of funds and the project evaluation, which processes this data as the responsible body. In addition, the grant holders are named on this website, as stipulated in the grant agreement. The data will be processed and stored by the accounting department as well as the funding agency commissioned by us and the Stiftung Digitale Spielekultur gGmbH. As part of the application and selection process, members of the programme jury also receive access to personal data from the applications.
b) Legal basis
The collection of data for the application for the scholarship programme and its disclosure is based on Art. 6 para. 1 lit. a and f GDPR. The processing due to participation in the scholarship programme is based on Art. 6 para. 1 lit. b GDPR.
The data is processed by the the Stiftung Digitale Spielekultur, jury members, accounting and funding agency on the basis of Art. 28 para. 3 GDPR.
The legitimate interest lies in the fact that the scholarship is funded with public funds awarded by the Federal Government Commissioner for Culture and Media, which requires project evaluation and monitoring of the use of funds.
c) Purpose of data processing
The data is used to monitor and evaluate the utilisation of funds on the part of the Federal Government Commissioner for Culture and the Media and for proper accounting and tax recording.
d) Duration of storage
The data will be stored for the duration of the statutory retention obligation under tax and commercial law. Applicant data is stored for 5 years and participant data for 10 years.
e) Objection and cancellation options
You have the option to object to further use at any time. You can declare your objection by sending an email to: datenschutzbeauftragter@game.de. Data can only be deleted if there is no legal obligation to retain it; in this case, however, the data will be blocked for any other use. Otherwise, there is no right of objection.
4. Communication and programme planning as part of the training courses and workshops of the Games Founding Grant
a) Scope of data collection
The grant holders are obliged to take part in training courses and workshops as part of the Games Founding Grant. We have commissioned the Stiftung Digitale Spielekultur gGmbH to organise these training courses and workshops. For communication, programme planning and implementation with the grant holders, coaches and third parties as part of the training courses and workshops, our processor, Stiftung Digitale Spielekultur gGmbH, uses Miro from RealtimeBoard Inc (USA), Notion from Notion Labs Inc (USA), Planner and Teams from Microsoft Corp (USA) and Zoom from Zoom Communications Inc (USA) as sub-processors. Notion is also used by Stiftung Digitale Spielekultur gGmbH o store and organise the contact details of the aforementioned persons.
The companies Microsoft Corp, Notion Labs Inc, RealtimeBoard Inc and Zoom Communications Inc. process data outside the European Union.
If video conferences and other communication formats take place, data such as participation in meetings, duration and chat or message content as well as IP addresses or, if applicable, e-mail addresses are recorded during the process. As part of contact management, Stiftung Digitale Spielekultur gGmbH and Notion also process the names and address data of the aforementioned persons.
In addition, attendance lists are kept for events that are mandatory for grant holders. If grant holders have given their consent, their email addresses will be made available to coaches and speakers as well as other grant holders in the programme.
b) Legal basis
The legal basis for the collection is Art. 6 para. 1 lit. a, b and f GDPR, in the form of consent to participate in the communication, in the context of the exchange on contractual topics, insofar as a contractual relationship exists, as well as our legitimate interest in documenting our communication, especially if the contact with us was initiated by you.
The legal basis for processing by Stiftung Digitale Spielekultur gGmbH as a processor is Art. 28 para. 3 GDPR and for the companies Microsoft Corp, Notion Labs Inc, RealtimeBoard Inc. and Zoom Communications Inc. as sub-processors of Stiftung Digitale Spielekultur gGmbH is Art. 28 para. 3, 6 GDPR in conjunction with the standard contractual clauses of the EU Commission.
c) Purpose of data processing
The purpose of data processing is to document and organise meetings and workshops with the participants. In addition, personal data and attendance records of the grant holders are used to monitor the use of funds and evaluate the programme by game – Verband der deutschen Games-Branche e.V. and the Minister of State for Culture and the Media. Grant holders’ email addresses are passed on to coaches, speakers and other grant holders for the purpose of networking between the participants.
d) Duration of storage
Meeting data that is only collected for the purpose of carrying out communicative measures, such as the IP address, is only collected during the connection for the purpose of carrying out the communication. Data relating to programme planning and implementation is stored for the duration of the project and the monitoring of the use of funds and then deleted. We only store communication for longer if it involves data that must be retained. This data is stored for the duration of the statutory retention obligation under tax and commercial law.
e) Objection and deletion options
You have the option to object to further use of your data at any time. You can declare your objection by e-mailing to: datenschutzbeauftragter[at]game.de. Deletion can only take place if there is no legal obligation to retain the data; in this case, however, the data will be blocked for any other use. Otherwise, there is no right of objection.
Last update: 02.04.2025
