Privacy Policy

This is an English translation of our privacy policy. In case of doubt, the German version applies.

We process personal data (hereinafter usually referred to as "data") only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Art. 4 No. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter "GDPR"), "processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of the processing either alone or jointly with others. We also inform you below about the third-party components we use for optimisation purposes and to improve the quality of use, insofar as third parties process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as the controller

The provider of this website responsible within the meaning of data protection law is:

Johannes Müller
Simone-Veil-Straße 30
Bonn, Germany

Phone: +49 15752086801
Email: jm.tech.info00@gmail.com

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

to confirmation as to whether data concerning them is being processed, to information about the data processed, to further information about the data processing and to copies of the data (cf. Art. 15 GDPR);
to rectification or completion of inaccurate or incomplete data (cf. Art. 16 GDPR);
to the immediate erasure of the data concerning them (cf. Art. 17 GDPR) or, alternatively, where further processing is necessary under Art. 17 (3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
to receive the data concerning them that they have provided and to have this data transmitted to other providers or controllers (cf. Art. 20 GDPR);
to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in breach of data protection provisions (cf. Art. 77 GDPR).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out pursuant to Art. 16, 17 (1) and 18 GDPR. This obligation does not apply if such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of data concerning them, insofar as the data is processed by the provider on the basis of Art. 6 (1) (f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permitted.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of storage ceases to apply, no statutory retention obligations prevent its deletion and no other information is given below on individual processing procedures.

Cookie manager

To obtain consent to the use of technically non-essential cookies on the website, the provider uses a cookie manager.

When the website is accessed, a cookie containing the settings information is stored on the user's device so that the consent query does not have to be repeated on a further visit.

The cookie is required to obtain the user's consent in a legally compliant manner.

The user can prevent or end the installation of the cookies through the settings of their browser.

Cookies

a) Session cookies

Our website uses so-called cookies. Cookies are small text files or other storage technologies that are stored on your device by the web browser you use. These cookies process certain information about you to an individual extent, such as your browser or location data or your IP address.

This processing makes our website more user-friendly, effective and secure, as it enables, for example, our website to be displayed in different languages or a shopping cart function to be offered.

The legal basis for this processing is Art. 6 (1) (b) GDPR, insofar as these cookies process data for the initiation or performance of a contract.

If the processing does not serve the initiation or performance of a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 (1) (f) GDPR.

These session cookies are deleted when you close your web browser.

b) Third-party cookies

Our website may also use cookies from partner companies with whom we cooperate for the purposes of advertising, analysis or the functionality of our website.

For details, in particular on the purposes and legal bases of the processing of such third-party cookies, please refer to the information below.

c) How to remove them

You can prevent or restrict the installation of cookies through a setting in your web browser. You can also delete cookies that have already been stored at any time. The steps and measures required for this depend on the web browser you use. If you have questions, please use the help function or documentation of your web browser or contact its manufacturer or support. In the case of so-called Flash cookies, the processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps required for this also depend on the Flash player you use. If you have questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.

If you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.

Google Analytics

We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

Google Analytics is used to analyse how our website is used. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. With this function, Google shortens the IP address within the EU or the EEA.

Google uses the data collected in this way to provide us with an evaluation of visits to our website and the usage activities there. This data may also be used to provide further services related to the use of our website and the use of the internet.

Google states that it does not link your IP address with other data. Google also provides further information on data protection at

https://www.google.com/intl/en/policies/privacy/partners

including on the options for preventing the use of data.

In addition, Google offers a so-called deactivation add-on together with further information at

https://tools.google.com/dlpage/gaoptout?hl=en

This add-on can be installed in common web browsers and gives you further control over the data that Google collects when you visit our website. The add-on tells the Google Analytics JavaScript (ga.js) that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. Whether and which other web analytics services we use is, of course, also explained in this privacy policy.

PostHog (website)

On our website we additionally use the analytics service PostHog, provided by PostHog Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA. We use PostHog's EU cloud; the data is processed and stored on servers in the EU (Frankfurt am Main, Germany).

The purpose is to understand how our service is used, where users get stuck and why someone buys a pass or not, in order to improve the website and the game and to operate them economically. We record pages viewed and time spent on them, clicks, games started, questions loaded and revealed, opening the shop, products selected, purchases started, cancelled and completed (product and amount), technical information such as browser, device type, screen size, language and approximate location, and the referrer URL. This data is linked to the random anonymous identifier our website already uses for your access; your name or email address is not sent to PostHog. Our server uses the same identifier to report purchases to PostHog.

Without consent PostHog runs cookieless: no cookies or entries in your browser's local storage are created for PostHog, and the data is only kept in memory for the duration of the page view. The legal basis for this is Art. 6(1)(f) GDPR; our legitimate interest lies in analysing, optimising and economically operating our service.

With your consent to the "Analytics" category in the cookie banner, PostHog additionally stores cookies or local storage entries (prefix "ph_") to connect visits across several page views, and records sessions (session replay): mouse movements, clicks, scrolling and page changes are captured so that the flow can be reconstructed. Input in form fields is always masked and not recorded. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via the cookie banner; PostHog then returns to cookieless operation and stops recording.

A transfer to the USA in the course of support and maintenance access by PostHog Inc. cannot be ruled out; PostHog is certified under the EU-US Data Privacy Framework for this, and we have also concluded a data processing agreement with standard contractual clauses with PostHog. We delete the data after two years at the latest.

Further information is available from PostHog at

https://posthog.com/privacy

CookieYes

We use "CookieYes" as a cookie banner. "CookieYes" is a product of CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom, hereinafter "CookieYes".

With "CookieYes" we inform users about the use of cookies on the website and allow them to decide on their use.

If the user consents to the use of cookies, the following data is automatically logged by CookieYes:

•    The user's anonymised IP address;
•    Date and time of consent;
•    User agent of the end user's browser;
•    The provider's URL;
•    An anonymous, random and encrypted key;
•    The cookies permitted by the user (cookie status), which serves as proof of consent.

The encrypted key and the cookie status are stored in a cookie on the user's device in order to restore the corresponding cookie status on future page views. This cookie is automatically deleted after 12 months.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the user-friendliness of the website and in fulfilling the legal requirements of the GDPR.

The user can prevent or end the installation and storage of the cookie, and thus their cookie consent, at any time through the settings of their browser.

CookieYes provides further information on data protection at the following link:

https://www.cookieyes.com/privacy-policy/

Google AdSense

We use Google AdSense on our website to display advertisements. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

Google AdSense stores cookies and so-called web beacons on your device via your web browser. This enables Google to analyse your use of our website. The information collected in this way, together with your IP address and the advertising formats displayed to you, is transmitted to Google in the USA and stored there. Google may also pass this information on to contractual partners. However, Google states that your IP address will not be combined with other data about you.

If you have given your consent to this processing, the legal basis is Art. 6 (1) (a) GDPR. The legal basis may also be Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

If you do not agree with this processing, you can prevent the installation of cookies through the corresponding settings in your web browser. Details can be found above under "Cookies".

Google also provides further information at

https://policies.google.com/privacy

https://adssettings.google.com/authenticated

in particular on the options for preventing the use of data.

Quizpoker app for iOS

The following information applies to our app "Quizpoker" in Apple's App Store. It supplements the other sections of this privacy policy; cookies, Google Analytics, CookieYes and Google AdSense are not used in the app.

a) Device ID and questions

The app stores a random device ID with no personal reference, your game settings and the status of your access on your device. When loading questions, it sends this device ID to our server at quizpoker.app so that free questions and passes can be assigned. It also measures how long a question was open and whether it was played through to the answer. We use this to improve the questions. Our server logs the IP address, time and requested address in order to fend off attacks and find errors; these logs are deleted after 14 days at the latest. The legal basis is Art. 6 (1) (b) GDPR, for the logs Art. 6 (1) (f) GDPR.

b) Access code and email confirmation

Every access has a six-digit access code. If you move an access to a new device, we send a six-digit confirmation code to the stored email address; only a checksum of it is stored, which is deleted after ten minutes. We send the email via the service Mailtrap (Railsware Products Studio LLC). When moving, the access receives a new device ID and the old one is signed out. The legal basis is Art. 6 (1) (b) GDPR.

c) Purchases via the App Store and RevenueCat

Purchases in the app are made via Apple's App Store. We do not receive any payment data. To assign the purchase, we use the service RevenueCat (RevenueCat, Inc., USA), which processes the device ID and Apple's purchase confirmation. We store purchase receipts with product, time and device ID in order to provide your access and to comply with statutory retention obligations. The legal basis is Art. 6 (1) (b) and (c) GDPR.

RevenueCat also reports every purchase with product, price, currency, store and device ID to our usage statistics at PostHog (see d) so that we can see which passes are bought. This also applies when usage statistics are switched off, because it concerns the evaluation of our sales and not your behaviour in the app. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the economic operation of the app. You can object to this at any time by email to jm.tech.info00@gmail.com.

RevenueCat provides further information at

https://www.revenuecat.com/privacy/

d) Usage statistics with PostHog

So that we can see where the app gets stuck and why someone buys a pass or not, the app records which screens you open and what you do there: for example games started, answers revealed and questions skipped, passes viewed and selected, purchases started and cancelled. This includes the app version, device model, system version, language and time zone. This is only linked to the random device ID, never to a name or an email address.

We use PostHog, a service of PostHog Inc. (USA), with servers in the EU (Frankfurt). PostHog does not store IP addresses in the process. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in improving the app. We delete the data after two years at the latest.

You can switch off usage statistics in the app at any time under "More", "Usage statistics". After that, the app no longer sends usage data; the purchase reports mentioned under c) are not affected.

PostHog provides further information at