Privacy Policy for the Games Founding Grant

I. General information

1. Responsible body, introduction

Below we explain which personal data we collect and process when you visit this website and apply for and participate in the games founding grant. This applies in addition to our general privacy policy. We are the game – Verband der deutschen Games-Branche e.V., based at Friedrichstraße 165, 10117 Berlin and you can contact us by post or email at datenschutzbeauftragter@game.de.

The protection of your privacy is very important to us. We therefore explain below which personal data we collect and process when you use our services or make use of our offers. Personal data are individual details about the personal or factual circumstances of a specific or identifiable natural person. This includes, for example, the name, e-mail address or telephone number.

The collection, processing (including storage, modification, transmission, blocking and deletion) and use of your data is carried out in compliance with the provisions of data protection law. Personal data is only collected, used and passed on if this is permitted by law or if the users give their consent to the collection of data and if this is technically or legally necessary for the provision of the service. Under no circumstances will the data collected be sold or unlawfully passed on to third parties for any other reason.

2. Legal basis

We collect and process personal data based on the following legal bases:
– Consent pursuant to Article 6 paragraph 1 lit. a of the General Data Protection Regulation (GDPR). Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her
– Necessity for contract fulfilment or implementation of preparatory measures in accordance with Article 6 para. 1 lit. b GDPR, i.e. the data is required so that we can fulfil our contractual obligations towards you or we need the data to prepare the conclusion of a contract with you.
– Processing for the fulfilment of legal obligations pursuant to Article 6 para. 1 lit. c GDPR, i.e. processing of the data is required, for example, by law or other regulations.
– Processing for the purposes of legitimate interests in accordance with Article 6 para. 1 lit. f GDPR, i.e. processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.

3. Rights of data subjects

You are entitled to the following rights with regard to data processing by us to the extent specified in the respective articles of the General Data Protection Regulation:

  • Right of access in accordance with Article 15 GDPR, i.e. the right to be informed about how your personal data is processed and which personal data is processed by us,
  • Right to rectification pursuant to Article 16 GDPR – i.e. the right to obtain without undue delay the rectification of inaccurate personal data concerning you, including the completion of incomplete data,
  • Right to erasure (“right to be forgotten”) under Article 17 GDPR – i.e. the right to request the erasure of your personal data if certain conditions are met,
  • Right to restriction of processing under Article 18 GDPR – i.e. the right to request the restriction of the processing of your personal data, provided that certain conditions are met,
  • Right to data portability in accordance with Article 20 GDPR – i.e. the right to request that you receive the personal data you have provided to us in a structured, commonly used and machine-readable format and the right to transmit those data to a third party, provided that certain conditions are met,
  • Right to object under Article 21 GDPR – i.e. the right to object to the processing of your personal data where the processing is based on our legitimate interests, provided certain conditions are met.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

4. Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract or you have expressly consented to the further use of your data.

 

II. Specific data processing

1. Data collection when visiting the website

a) Scope of data processing

The following data is collected and stored when you visit our website:

Information about the browser type and version used
The user’s operating system
The user’s internet service provider
The IP address of the user
Date and time of access
Log file about errors or successful delivery
Websites from which the user’s system accesses our website (referrer URL)
Host name of the user’s system

The data is stored in the log files of our system by our hosting provider within the European Union. This data is not stored together with other personal data of the user.

b) Legal basis

The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR.

The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in the functionality of our website and its availability.

The legal basis for processing by our hosting provider is Art. 28 para. 3 GDPR.

c) Purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The data is stored in order to ensure the functionality of the website. We also use the data to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

d) Duration of storage

The log files are anonymised by shortening the IP address, unless there is a need to retain the data for the aforementioned purpose due to specific events. Archived log files are deleted after 190 days.

e) Possibility of objection and removal

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

2. Contact by e-mail

a) Scope of data processing

You can contact us via the e-mail addresses provided on the websites. In this case, your personal data that you send to us by e-mail will be stored. If you apply for the scholarship and enter your e-mail address, we may subsequently use it to send you e-mails. In such a case, only information about news and information about the scholarship will be sent to your e-mail address. Some of
the data will be processed and stored by an e-mail provider based in the United States of America and commissioned by us. The data is partially processed by the Stiftung Digitale Spielekultur.

b) Legal basis

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in responding to a contact enquiry or implementing the scholarship programme.
Processing by our email provider is carried out on the basis of Art. 28 para. 3, 6 GDPR in conjunction with the use of the standard contractual clauses of the EU Commission and Art. 45 para. 1 GDPR by means of the EU-U.S. Data Privacy Framework (10 July 2023). The service provider is certified accordingly (https://www.dataprivacyframework.gov/list). The processing by the Stiftung Digitale Spielekultur is also based on Art. 28 para. 3 GDPR.

c) Purpose of data processing

The purpose of data storage is to contact you at your request.

d) Duration of storage

The data will be stored for as long as is necessary to deal with the enquiry. Insofar as these are commercial letters subject to retention under commercial and tax law, they will also be stored in accordance with the statutory retention periods.

e) Possibility of objection and removal

You have the option to object to further use at any time. You can declare your objection by sending an email to: datenschutzbeauftragter@game.de. Deletion can only take place if there is no legal obligation to retain the data; in this case, however, the data will be blocked for any other use. In the event of an objection, the conversation cannot be continued.

3. Processing for the application Implementation, utilisation review and evaluation

a) Scope of data collection

The following data is collected and stored as part of the application and participation for the Games start-up grant:

Surname, first name
E-mail address and login data (user name and password)
Residential address (street, house number, town, postcode)
Information on nationality, existing scholarships, motivation and self-description, curriculum vitae, start-up status and, if applicable, already founded company.

The aforementioned data will also be passed on to the Federal Government Commissioner for Culture and Media as part of the review of the utilisation of funds and the project evaluation, which processes this data as the responsible body. The data will be processed and stored by the accounting department as well as the funding agency commissioned by us and the Stiftung Digitale Spielekultur. As part of the application and selection process, members of the programme jury also receive access to personal data from the applications.

b) Legal basis

The collection of data for the application for the scholarship programme and its disclosure is based on Art. 6 para. 1 lit. a and f GDPR. The processing due to participation in the scholarship programme is based on Art. 6 para. 1 lit. b GDPR.
The data is processed by the the Stiftung Digitale Spielekultur, jury members, accounting and funding agency on the basis of Art. 28 para. 3 GDPR.
The legitimate interest lies in the fact that the scholarship is funded with public funds awarded by the Federal Government Commissioner for Culture and Media, which requires project evaluation and monitoring of the use of funds.

c) Purpose of data processing

The data is used to monitor and evaluate the utilisation of funds on the part of the Federal Government Commissioner for Culture and the Media and for proper accounting and tax recording.

d) Duration of storage

The data will be stored for the duration of the statutory retention obligation under tax and commercial law. Applicant data is stored for 5 years and participant data for 10 years.

e) Objection and cancellation options

You have the option to object to further use at any time. You can declare your objection by sending an email to: datenschutzbeauftragter@game.de. Data can only be deleted if there is no legal obligation to retain it; in this case, however, the data will be blocked for any other use. Otherwise, there is no right of objection.

Last update: 13.11.2024


Sponsored by