1. person responsible
Responsible for the processing of personal data is: 49Skins GmbH Zöllners Garten 1 30900 Wedemark E-Mail: info@49skins.com
2. hosting
Our website is hosted by MaxCluster GmbH with server location in Germany. MaxCluster is operated by:
MaxCluster GmbH Technologiepark 8, 33100 Paderborn, Germany
Connection data (e.g. IP addresses) are temporarily stored in order to ensure the technical operation of the website. This data is processed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest), as it is necessary for the secure and stable operation of the website.
3. type of data processed
We collect and process the following personal data
- Email address and associated Steam account to create a user account.
- IP address to analyze and improve the website (analytics).
- Cookies
4. contact forms
If you contact us via the contact form on our website, the data you enter will be processed to answer your request.
Data collected:
Name
e-mail address
Subject and message
Legal basis for processing:
The processing of the data provided is based on Art. 6 para. 1 lit. b GDPR (fulfillment of a contract or pre-contractual measures) if your request is related to the fulfillment of a contract or a business relationship.
If your request is of a general nature or does not concern a direct business relationship, the processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest), as we have a legitimate interest in processing and responding to user requests.
Storage period:
The data transmitted via the contact form will only be stored for as long as is necessary to process the request. Statutory retention obligations remain unaffected by this.
Disclosure to third parties:
The data will not be passed on to third parties unless this is necessary to fulfill the request or required by law.
Security:
The data transmitted via the contact form is encrypted (e.g. via SSL/TLS) to ensure secure data transfer.
5 Cookies, tracking technologies & Google services
Our website uses cookies. A detailed list and description of the cookies used will be added here later. [Placeholder for cookie specifications]
Depending on the type of cookie, cookies are processed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest) for technically necessary cookies or Art. 6 para. 1 lit. a GDPR (consent) for optional cookies (e.g. tracking or marketing cookies).
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5,
Ireland (“Google”).
Google Analytics uses cookies to analyze the use of the website by users.
The information generated by cookies about the use of this website (e.g. time, place and frequency of use) is usually transferred to a Google server in the USA and stored there. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Google uses this data on behalf of the website operator to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage. According to Google, the IP address transmitted by your browser will not be merged with other data.
Deactivation of Google Analytics You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, this may mean that not all functions of this website are fully usable.
You can also prevent Google Analytics from collecting data by installing the following browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=en. When using mobile devices, an opt-out cookie can be set instead to deactivate Google Analytics for this website.
To ensure the best possible protection of your data, Google Analytics has been extended on this website by the code “anonymizeIp”. This anonymizes your IP address (IP masking) by removing the last 8 bits of the IP address. This means that Google shortens your IP address within EU member states or other contracting states of the European Economic Area before transmission.
Data transfer to third countries Google may transfer the collected data to the USA. The data transfer is based on the EU Standard Contractual Clauses (SCCs), which provide appropriate safeguards for personal data. Nevertheless, it is possible that data protection in the USA is not guaranteed to be equivalent to that in the EU. US authorities may have access to this data without suitable legal remedies for data subjects.
Google Tag Manager
This website uses Google Tag Manager, a service provided by Google Ireland Limited. Google Tag Manager itself does not process any personal data, but enables the integration of tracking tags that may collect personal data.
collect personal data. The Tag Manager does not access this data.
If you deactivate tracking at domain or cookie level, this will remain in place for all tracking tags implemented with Google Tag Manager.
Further information on Google services and data protection can be found here: https://policies.google.com/privacy.
Our website uses cookies. A detailed list and description of the cookies used will be added here later. [Placeholder for cookie specifications]
Depending on the type of cookies, cookies are processed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest) for technically necessary cookies or Art. 6 para. 1 lit. a GDPR (consent) for optional cookies (e.g. tracking or marketing cookies).\
6. payment service provider
We use Stripe Payments Europe, Ltd. as payment provider. Stripe is operated by:
Stripe Payments Europe, Ltd. The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland
When a payment is made, personal data (e.g. name, payment data) is passed on to Stripe in order to process the payment and create so-called Stripe Connect accounts for users. Payments cannot be made without this processing.
Data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (fulfillment of contract).
Further information on data processing by Stripe can be found in Stripe's privacy policy: https://stripe.com/de/privacy
7. user accounts & newsletter
- The creation of a user account is required to use our website.
- Our newsletter is only sent with your express consent as part of the double opt-in procedure in accordance with Art. 6 para. 1 lit. a GDPR. After registering, you will receive a confirmation email with a link that you must click to complete your registration. The newsletter will not be sent without this confirmation.
- You can revoke your consent at any time with effect for the future by clicking on the unsubscribe link in one of our emails or deactivating the setting in your user account settings.
The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (necessity for contract fulfillment) for the user account and Art. 6 para. 1 lit. f GDPR (legitimate interest) for the newsletter dispatch.
8. affiliate tracking with LeadDyno
We use LeadDyno, LLC for our affiliate program. LeadDyno is operated by:
LeadDyno, LLC 9715 Washburn Rd, Downey, CA 90241, USA
When a user enters an affiliate code, the purchase data is automatically synchronized with LeadDyno so that the affiliate can see the referrals made.
As LeadDyno is based in the USA, personal data is transferred to the USA. The level of data protection in the USA is not comparable to that in the EU. Therefore, data is only transferred with your express consent in accordance with Art. 49 para. 1 lit. a GDPR.
When entering an affiliate code, you will be actively asked for your consent via a checkbox. Without your consent, no data will be transferred to LeadDyno and affiliate tracking will not be activated.
You can revoke your consent at any time with effect for the future by contacting us or deleting your affiliate data in your user account.
Further information on data processing by LeadDyno: https://www.leaddyno.com/privacy-policy
9. data transfer to third parties
We only pass on personal data to third parties in the following cases:
- To Stripe Payments to process payments.
- To LeadDyno to enable affiliate tracking.
Data is only transferred to third countries if this is necessary for the aforementioned purposes and GDPR-compliant data protection standards are maintained. In doing so, we ensure that an appropriate level of data protection is maintained through suitable protective measures such as standard contractual clauses of the EU Commission or an adequacy decision. If you have any further questions about these protective measures, please contact us.
10 Storage duration & deletion
We only store personal data for as long as the user account exists. As soon as an account is deleted, the stored data will also be deleted.
Payment data relevant to tax and commercial law is stored for a period of up to 10 years in accordance with § 147 AO and § 257 HGB. As payments are processed via Stripe Payments, the corresponding transaction data is stored and managed by Stripe. Users can view their payment information via their Stripe dashboard.
We have concluded an order processing agreement (AVV) with Stripe to ensure the GDPR-compliant processing of personal payment data.\
11. social media pages
We are represented on various social media and operate so-called social media pages. You can find our social media profiles on the following platforms
- Discord
- TikTok
- YouTube
- Steam
We provide information about our offers and services on these platforms. You can also contact us there to obtain further information about us and our services.
Responsibility
As the operator of the social media pages, we are jointly responsible with the respective platform provider for the processing of personal data (Art. 4 No. 7 GDPR). When you visit our pages, personal data is processed by the respective platform operators.
We have concluded agreements with the providers of the platforms that regulate the conditions for the use of the social media pages. The terms of use and the data protection guidelines of the respective platform apply.
Use of insights & cookies
Depending on the platform, we use so-called insights functions to obtain anonymized statistical data about the use of our fan pages. For this purpose, the respective platform operators generally place cookies on the user's end device, which enable unique identification. This information can be linked to the profile data of registered users.
The collected data can be processed by the platform operators and in some cases also passed on to third parties. For further information on the use of cookies, we recommend consulting the data protection notices of the respective platform operators.
Purpose of the processing
The processing of the information by the platform operators serves, among other things, to enable targeted advertising and to evaluate the use of the platforms. As the operator of the fan pages, we receive anonymized statistics in order to adapt our content to the interests of the users.
We can obtain demographic and geographical analyses of visitors to our pages in order to target our content. These statistics are provided anonymously so that we do not have direct access to personal user data.
Legal basis & legitimate interest
The use of social media platforms and the associated processing of personal data is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR to present our company online and communicate with interested parties.
Data transfer to the USA
The information collected may be transferred to the USA by the respective platform operators and processed there. There is a risk that US authorities may be able to access this data without the data subjects having any legal recourse. The responsibility for these data transfers lies with the respective social media provider.
Possibilities of objection
The processing of personal data on social media platforms can be influenced by appropriate settings in the respective platforms. Users can also block or delete cookies from third-party providers in order to minimize the collection of data.
Further information
Further information on data processing by social media providers can be found in their respective privacy policies:
- Discord: https://discord.com/privacy
- Instagram: https://privacycenter.instagram.com/policy
- Twitter: https://twitter.com/de/privacy
- TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en
- YouTube: https://policies.google.com/privacy
- Facebook: https://www.facebook.com/privacy/policy
- Steam: https://store.steampowered.com/privacy_agreement
12. rights of data subjects
You have the right to:
Information about the processed data (Art. 15 GDPR),
Correction of incorrect data (Art. 16 GDPR),
erasure of the data (Art. 17 GDPR),
Restriction of processing (Art. 18 GDPR),
Objection to processing (Art. 21 GDPR),
data portability (Art. 20 GDPR).
To exercise your rights, you can contact us at info@49skins.com
13. changes to this privacy policy
This Privacy Policy may be updated from time to time to reflect legal requirements or changes to our services. Users will be informed of significant changes to the privacy policy in an appropriate manner, for example by e-mail or by a notice on our website. This Privacy Policy may be updated from time to time to reflect legal requirements or changes to our services. Users will be informed of significant changes to the privacy policy in an appropriate manner, for example by e-mail or by a notice on our website.