Data Protection

We understand data protection as a customer-oriented quality feature. The protection of your personal data, especially with regard to the protection of your personal rights, is very important to us. If you provide us with personal data, we will treat it with the care customary in banking and in accordance with the applicable data protection regulations. In the following we inform you about the processing of personal data when using our application "Punzel". We would like to inform you at this point which personal data we collect in connection with this use and for which purposes we process the information.

1. Information About The Responsible Party

Responsible for the processing of your personal data is:

Greta Hoffmann
Keupstr. 11
51063 Cologne
Tel. +49 (0) 176 43878634

You can reach our data protection officer at

2. Scope and Purpose of Data Processing

2.1 Scope, Purpose and Legal Basis of Data Processing

To enable the use of the application via browser or also via app, we collect personal data. If you want to use our mobile app, we use your IP address (but do not store it), access data (username) and a randomly generated identification number (UUID = Universally Unique Identifier), which is assigned when you download the app to your mobile device, as a device identifier. The legal basis for the processing of this data is Article 6 (1) lit. b DS-GVO. We process the listed data for the assignment to a running game, to group events per game and to be able to show you a high score. The collection is only valid for one game session as long as the application is used. To measure the success, improvement and further development of InvestNuts, we create evaluations of the game behavior of our users. For this purpose, we use your UUID and data about the behavior and use of InvestNuts. There is no direct personal reference. The data collected in this way is used to create anonymous usage profiles. The legal basis is Art. 6 (1) lit. f DS-GVO.

3. Use of Service Providers

When processing personal data, VisualVest uses the support of external service providers. These service providers are carefully selected and are legally and contractually obligated to ensure a high level of data protection. They are bound to strict confidentiality and process data only on our behalf and according to our instructions. The servers used for this purpose are located exclusively at sites in Germany. The legal basis for the cooperation with these service providers is Art. 28 DSGVO.

4. Disclosure of your Personal Data

Except in the cases explained in this data protection notice, we will only pass on data to third parties without your express consent if we are obliged to do so by law or by an official or court order. We do not transfer data to third countries (countries outside the EU and the European Economic Area - EEA).

5. Deletion of your Personal Data

Your personal data will be deleted when they are no longer needed to achieve the stated purposes and legal retention periods have expired. As a rule, your game data will be deleted after 30 days. Usage data, such as your IP address, will be deleted immediately. If you change your username in the game, your previously stored data will be automatically and completely deleted.

6. Information about your Rights (Data Subject Rights)

You have the right to request information in accordance with Article 15 DS-GVO about the personal data stored about you. If you discover that your stored personal data is incorrect or incomplete, you may at any time request the immediate correction or completion of this data in accordance with Article 16 DS-GVO. Under the conditions specified in Articles 17(1) and 18(1) DS-GVO, you may also request the deletion or restriction of the processing of personal data. If your data has been processed on the basis of consent (Article 6(1)(a) of the GDPR) or a contract (Article 6(1)(b) of the GDPR), you have the right under Article 20 of the GDPR to receive the data you have provided in a structured, commonly used and machine-readable format and to request that this data be transferred to a third party. In the case of consent (Article 6(1)(a) DS-GVO), you are free to revoke your consent at any time. If your data is processed on the basis of a legitimate interest (Article 6(1)(f) DS-GVO), you have the right to object at any time in accordance with Article 21 DS-GVO. In case of complaints about the respective data use, you can also contact the competent supervisory authority. Last update of this privacy policy: October 22 We reserve the right to update or supplement this data protection notice as required (insofar as new products and services are offered by us or Internet and IT security technology develops further). We will publish any changes here.

7. YouTube

We use YouTube on our website. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube". YouTube is a subsidiary of Google LLC, Gordon House, Barrow Street, Dublin 4, Irland, hereinafter referred to as "Google". Through certification according to the EU-US Privacy Shield

Privacy Shield Framework

Google and its subsidiary YouTube guarantee that they will follow the EU's data protection regulations when processing data in the United States. We use YouTube in its advanced privacy mode to show you videos. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the advanced privacy mode means that the data specified below will only be transmitted to the YouTube server if you actually start a video. Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of our webpages on which a YouTube video is embedded. This connection is required in order to be able to display the respective video on our website within your browser. YouTube will record and process at a minimum your IP address, the date and time the video was displayed, as well as the website you visited. In addition, a connection to the DoubleClick advertising network of Google is established. If you are logged in to YouTube when you access our site, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting our site or make the appropriate settings in your YouTube account. For the purpose of functionality and analysis of usage behavior, YouTube permanently stores cookies on your device via your browser. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above. Further information about the collection and use of data as well as your rights and protection options in Google's privacy policy found at

Google Privacy Policy and Terms of Service