Privacy Policy of Aesir Interactive GmbH

I. General Information

1. Responsible Body & Data Protection Officer

Below we explain to you which personal data is collected and processed by us when using our services and offers.

We are:
Aesir Interactive GmbH
Seidlstraße 21
80335 München
Germany

Email : privacy [at] aesir-interactive.com

Our company data protection officer is: Thomas Schneider

Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person, this means all information that relates to a person.

2. Legal Basis

As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation. This comes into effect from May 25, 2018. Prior to this, the corresponding provisions of the Federal Data Protection Act apply without us naming them.

We collect and process personal data based on the following statutory regulations:

Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.

3. Rights of affected

You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:

• Right of access by the data subject to Art. 15 GDPR
• Right to rectification according to Art. 16 GDPR
• Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR
• Right to restriction of processing according to Art. 18 GDPR
• Right to data portability according to Art. 20 GDPR
• Right to object according to Art. 21 GDPR

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.

4. Data Erasure and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

II. Concrete Data Processing

1. Data collection when visiting the website

a. Scope of data processing

When visiting our website, the following data is collected and stored by our web server:

• Information about the browser type and version used
• The operating system of the user
• The Internet service provider of the user
• The IP address of the user
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites accessed by the user’s system through our website

The data is stored in the log files of our system. A storage of this data together with other personal data of the user does not take place. The is stored with our hosting provider alfahosting who processes the data exclusively inside the EU.

b. Legal basis

The legal basis for processing the data is Art. 6 para. 1 (f) GDPR.

The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.

Legal basis for the transfer of data to the hosting provider is Art. 28 GDPR.

c. Purpose of data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session.

The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

d. Duration of storage

The log files will be deleted after 30 days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events.

Storage beyond that is possible. In this case, the IP addresses of the users are deleted or anonymised, so that an assignment to a specific user is no longer possible.

e. Objection and removal possibility

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user.

2. Email contact

a. Scope of data processing

If you purchase goods or services on our website and provide your email address, we may subsequently use this information to send you product information by email regarding the booked product or similar products of the processor. In such a case, only direct advertising for our own similar goods or services will be sent by email. We will also send you emails related to your transactions, such as order confirmations, shipping notices, invoices etc.

It is possible to subscribe to a free newsletter on our website or in our app, which contains direct advertising for our products or products of our cooperation partners. When you sign up for the newsletter, the data from the input mask will be transmitted to us or the email address already stored will be used. In this case, the date and time of registration for the newsletter and the IP address used are also stored. As part of the confirmation of the newsletter registration, the date and time at which you click on the confirmation link for the newsletter registration as well as the IP address used will also be saved.

When sending the product information, your email address will be forwarded to the external service provider MailChimp, who will be responsible for sending the newsletter on our behalf. Any further use is not made by the service provider. The service provider is located outside the European Union in the United States of America. By submit your information through email contact you acknowledge that the information you provide will be transferred to MailChimp for processing in accordance with their Privacy Policy and Terms.

b. Legal basis

The legal basis for the processing of the data when sending out the newsletter due to the prior acquisition of goods or services is Article 6 para. 1 sentence 1 (f) GDPR in conjunction with § 7 para. 3 UWG.

The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR is therefore in direct advertising and the increase in sales to existing customers.

The legal basis for processing the data when registering directly for the newsletter is Art. 6 para. 1 (a) GDPR.

The legal basis for contacting in connection with current bookings is Article 6 para. 1 (b) GDPR.

The legal basis for the transfer of the data to the shipping service provider is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR. The standard data protection clauses of the EU Commission are used in contractual relation with the provider.

c. Purpose of data processing

The purpose of storing the email address is the possibility of electronic contact for advertising purposes. The date and IP address of the registration as well as the confirmation of the registration will be recorded in order to document the consent to the newsletter shipment and to prevent misuse. Furthermore, for information regarding ongoing bookings, the proper execution of the contract is the purpose of the contact.
The transfer to the service provider is done for the purpose of sending the newsletter as a mass mailing.

d. Duration of storage

If we have received your email address as part of the purchase of goods or services, it will be used for the delivery of advertising until you object to further use.

As far as you have expressly consented to the receipt of the newsletter, we will only delete or block the email address for the advertising mailing, if you revoke your consent. The data confirming the order of the newsletter will be stored for the same amount of time.

The emails sent, as far as business letters are concerned, are stored for the duration of retention periods of the Tax Code or the Commercial Code. The further emails are deleted as soon as no further response by the user has to be expected.

e. Objection and removal possibility

You may object or revoke your consent to the use of the email address for advertising purposes at any time, without incurring any costs beyond the charges of your communications tariff. You can object to the use of any advertising mail by clicking on a link provided there with effect for the future. You may also opt-out of advertising for future use by emailing privacy [at] aesir-interactive.com. In the case of opposition by email, the implementation of the cancellation or blocking can take up to 5 working days; In this period, you may still receive advertising emails. You can not contradict the use of the email address for addressing in the context of the performance of the contract. If you no longer wish this, you would have to delete the account or have it deleted, otherwise we would not be able to properly fulfil the contract.

3. Contact Form

a. Scope of data processing

The website has a contact form which can be used for electronic contact. If you enter data in the input mask, these are transmitted to us and stored. This data is: your name, your email address, if necessary your telephone number, the nature of your request and your individual message to us. In addition, the date and time of your message is automatically recorded.

Alternatively, contact via the provided email address is possible. In this case, the user’s personal data transmitted by email will be stored.

b. Legal basis

The legal basis for the processing of the data transmitted in the course of sending an email is Article 6 para. 1 (f) and if necessary also (a) GDPR. If the email contact aims to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 (b) GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR lies in answering a customer inquiry or answering a contact request on other topics.

c. Purpose of data processing

The purpose of the data storage is the contact at the request of the communication partner.

d. Duration of storage

The data will be stored for as long as necessary to complete the request. Insofar as these are commercial letters subject to commercial and tax law, these are also stored in accordance with the statutory retention periods.

e. Objection and removal possibility

You have the option at any time to revoke your consent to the processing of personal data with effect for the future or to object to further use. The contradiction can be explained by email to: privacy [at] aesir-interactive.com. A deletion can only take place, as far as no legal storage period is given; in this case, the data will be locked for another use. In such a case, the conversation cannot continue.

4. Google Analytics

a. Scope of data processing

The website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). This software collects information about how you use the website and compiles various statistics. The increased usage data include in particular the concrete selection of links, the length of stay on individual pages and the order of use of the website, the frequency of the page request. This data is collected together with your IP address. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

We have activated a so-called IP anonymization on the website, this means that the IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to retransmission to the USA.

Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google itself describes here https://www.google.com/policies/privacy/ its data processing activity.

b. Legal basis

The legal basis for the processing of data when using the website is Article 6 para. 1 (f) GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR is a customer-oriented design of the website, which meets the requirements of the users and takes their user preferences into account.
The legal basis for the transfer of data to Google are Article 28 para. 3, and Article 45 para. 3 GDPR. The service provider is certified under the Privacy Shield Framework and is therefore subject to the EU Commission’s decision on adequacy (Implementing Decision 2016/1250), this means that the data protection level of the service provider is recognized as being equivalent to the GDPR, although it is based in the USA.

c. Purpose of data processing

The purpose of the processing is to analyse this website and the usage behaviour of its visitors.

d. Duration of storage

The data is already anonymized directly after the survey. Personal data is therefore collected only in the context of the transfer and not permanently stored.

e. Objection and removal possibility

You can prevent the storage of cookies, including the generation and transmission of data to Google, by restricting or prohibiting the use of cookies in your browser software. This may result in the deactivation of non-Google-related cookies as well as the inability to use all functions of this website to the full extent.

You can prevent the collection of the data generated by the cookie and your use (including your IP address) and their transmission to Google as well as the processing of this data by Google by downloading the browser plugin available under the following link and to install: http://tools.google.com/dlpage/gaoptout?hl=de.

Munich, 24.05.2018