Data Protection

We understand data protection as a customer-oriented quality feature. The protection of your personal data, especially with regard to the protection of your personal rights, is very important to us. If you provide us with personal data, we will treat it with the care customary in banking and in accordance with the applicable data protection regulations. In the following we inform you about the processing of personal data when using our application "Punzel". We would like to inform you at this point which personal data we collect in connection with this use and for which purposes we process the information.

1. Information About The Responsible Party

Responsible for the processing of your personal data is:
GonKu GbR, Keupstr. 11, 51063 Cologne
Tel. +49 (0) 176 43878634
E-mail: imstuckinacastle@gmail.de

You can reach our data protection officer at imstuckinacastle@gmail.de.

2. Scope and Purpose of Data Processing

2.1 Scope, Purpose and Legal Basis of Data Processing

To enable the use of the application via browser or also via app, we collect personal data. If you want to use our mobile app, we use your IP address (but do not store it), access data (username) and a randomly generated identification number (UUID = Universally Unique Identifier), which is assigned when you download the app to your mobile device, as a device identifier. The legal basis for the processing of this data is Article 6 (1) lit. b DS-GVO. We process the listed data for the assignment to a running game, to group events per game and to be able to show you a high score. The collection is only valid for one game session as long as the application is used. To measure the success, improvement and further development of InvestNuts, we create evaluations of the game behavior of our users. For this purpose, we use your UUID and data about the behavior and use of InvestNuts. There is no direct personal reference. The data collected in this way is used to create anonymous usage profiles. The legal basis is Art. 6 (1) lit. f DS-GVO.

3. Use of Service Providers

When processing personal data, VisualVest uses the support of external service providers. These service providers are carefully selected and are legally and contractually obligated to ensure a high level of data protection. They are bound to strict confidentiality and process data only on our behalf and according to our instructions. The servers used for this purpose are located exclusively at sites in Germany. The legal basis for the cooperation with these service providers is Art. 28 DSGVO.

4. Disclosure of your Personal Data

Except in the cases explained in this data protection notice, we will only pass on data to third parties without your express consent if we are obliged to do so by law or by an official or court order. We do not transfer data to third countries (countries outside the EU and the European Economic Area - EEA).

5. Deletion of your Personal Data

Your personal data will be deleted when they are no longer needed to achieve the stated purposes and legal retention periods have expired. As a rule, your game data will be deleted after 30 days. Usage data, such as your IP address, will be deleted immediately. If you change your username in the game, your previously stored data will be automatically and completely deleted.

6. Information about your Rights (Data Subject Rights)

You have the right to request information in accordance with Article 15 DS-GVO about the personal data stored about you. If you discover that your stored personal data is incorrect or incomplete, you may at any time request the immediate correction or completion of this data in accordance with Article 16 DS-GVO. Under the conditions specified in Articles 17(1) and 18(1) DS-GVO, you may also request the deletion or restriction of the processing of personal data. If your data has been processed on the basis of consent (Article 6(1)(a) of the GDPR) or a contract (Article 6(1)(b) of the GDPR), you have the right under Article 20 of the GDPR to receive the data you have provided in a structured, commonly used and machine-readable format and to request that this data be transferred to a third party. In the case of consent (Article 6(1)(a) DS-GVO), you are free to revoke your consent at any time. If your data is processed on the basis of a legitimate interest (Article 6(1)(f) DS-GVO), you have the right to object at any time in accordance with Article 21 DS-GVO. In case of complaints about the respective data use, you can also contact the competent supervisory authority. Last update of this privacy policy: October 22 We reserve the right to update or supplement this data protection notice as required (insofar as new products and services are offered by us or Internet and IT security technology develops further). We will publish any changes here.