Privacy Policy (GDPR)
This privacy policy explains which personal data is processed in the context of participation in and handling of giveaways.
The giveaways are carried out by the person named in the imprint as the controller.
1. Controller
The person responsible for data processing is the individual named in the imprint.
2. Purpose of data processing
Personal data is collected exclusively for the purpose of conducting and handling giveaways. This includes in particular:
- Checking eligibility to participate
- Identifying and notifying winners
- Collecting the shipping address
- Shipping the prize
- Documenting consent
3. Processed data
3.1 Participant data
- Username (e.g. platform name or stream account)
- Unique user ID of the platform used
3.2 Winner data (only in case of an actual win)
- First name
- Last name
- Street and house number
- ZIP code and city
- Country
- Prize(s) won
- Time of submission
These data are only collected if a prize exists and shipping is necessary.
4. Legal basis
- Art. 6 para. 1 lit. b GDPR – performance of the giveaway
- Art. 6 para. 1 lit. a GDPR – consent to transmit the shipping address
5. Storage and deletion
Address data of winners are stored only as long as necessary to ship the prize.
After the prize has been shipped or the giveaway has been fully completed, the data are completely deleted.
No long-term storage takes place.
6. Disclosure to third parties
Personal data are only passed on if this is necessary to ship the prize, for example to:
- the shipping service provider
- the email/communication service provider
7. Your rights
Data subjects have the following rights under the GDPR:
- Access to the data stored about them
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Withdrawal of consent with effect for the future
To exercise your rights, a simple informal request to the contact address stated in the imprint is sufficient.
8. Data security
All transmitted data are treated confidentially and protected against unauthorized access by appropriate technical and organizational measures.
9. Server location
Processing takes place exclusively on servers within the European Union or in countries for which an adequate level of data protection has been recognized in accordance with the GDPR.
10. Contact
If you have any questions about data protection or the processing of your data, please contact the address stated in the imprint.