Datenschutz.

The protection of your personal data is very important to us. Therefore, at rxgames we comply with the applicable data protection regulations of the European Union and the Federal Republic of Germany.

With this privacy policy, we inform you about which data is collected on our websites, for what purposes we process this data, to which recipients we may transfer data, the legal basis for data processing, the duration of data storage, the controllers responsible for data processing, and your rights.

1. Controller for data processing

The controller for data processing within the meaning of Art. 13 para. 1 a) General Data Protection Regulation (GDPR) is:

RXGAMES
Krummer Weg 8
21423 Drage
04177/3099975
E-mail: datenschutz at rxgames de

2. Specific information on data processing

2.1. Personal data

According to Art. 4 No. 1 GDPR, personal data is defined as any information relating to an identified or identifiable natural person. Such personal data includes, for example, name, address, telephone number, email address or payment information.

2.2. Data processing for the fulfilment of a contract

When you order from rxgames, we need personal data for the processing of the purchase, including the shipment of your ordered goods, the handling of returns or complaints. Specifically, we need information on name, address, email address, and, if necessary, payment information. Providing your email address is necessary to confirm receipt of your order, notify you of the shipment of your goods, or to contact you. The processing of data is therefore for the purpose of fulfilling the contract.

Even before the conclusion of the contract, you can contact rxgames and send us an inquiry by email, for example, to get advice from us. In this case, we process the data received from you, such as email address and name, for the purpose of carrying out pre-contractual measures.

The legal basis for data processing for the purpose of contract fulfilment or for the performance of pre-contractual measures as a result of an inquiry by the data subject is Art. 6 para. 1 b) GDPR.

For the processing of your order, rxgames forwards personal data to service providers such as payment service providers (including banks, Paypal, Klarna, credit card companies) and shipping service providers (including DHL & Deutsche Post), insofar as this is necessary to fulfil your contract. The data transmitted may only be used by the recipient to fulfil his task. Any use beyond this is not permitted.

We store the data required for contract processing until the expiry of the statutory warranty periods.

The data required in accordance with commercial or tax law is stored for the period specified by law in accordance with § 257 HGB and § 157 AO, usually for a period of 10 years.

Personal data processed for pre-contractual measures will be deleted within 12 months if no contract is concluded.

2.3. Newsletter

You can subscribe to the rxgames newsletter via our online shop. We always use the double opt-in procedure. This means that you will receive an email from us with a link that you can use as the owner of the email address to confirm your subscription to the newsletter. The subscription to the newsletter is only complete after this confirmation.

After successful registration for the newsletter, rxgames will use your email address for advertising purposes. We will then regularly inform you about product news, restocked inventory or discount promotions.

The legal basis for this data processing is Art. 6 para. 1 a) GDPR. Data processing is only carried out after express consent.

We store your email address for the duration of your newsletter subscription. You can revoke your consent at any time with effect for the future. Each newsletter contains an unsubscribe link. If you use this unsubscribe link, your email address will be deleted.

2.4. Customer account

Before or at the latest during the conclusion of the contract, it is necessary to create a customer account. This password-protected, personal access offers you a range of useful functions, such as viewing your orders, displaying and downloading your invoices, managing personal customer data, adding and editing different delivery addresses, as well as creating a personal wish list.

The legal basis for this data processing is Art. 6 para. 1 a) GDPR. Data processing is only carried out after express consent. The data stored in the customer account will be stored as long as your consent exists. You can revoke this consent at any time with effect for the future. A simple notification to the contact data mentioned under item 1 is sufficient for this purpose. In case of revocation of the consent, your customer account, including the data stored therein, will be deleted.

3. Cookies

3.1. What are cookies?

"Cookies" are small text files that are stored on your hard drive and contain certain settings and data. A distinction is made between session cookies and temporary/permanent cookies. Session cookies are deleted as soon as you close your browser. Temporary/permanent cookies are stored permanently or for a defined period of time.

3.2. What cookies does rxgames use?

The majority of the cookies used are technically necessary to provide certain functions in the shop for you or to enable a comfortable user experience. For example, you do not have to reset certain settings of the shop that you have made every time you visit the rxgames shop. These session cookies or permanent cookies (with a lifespan of up to 2 years) are stored on your hard drive and are automatically deleted after the specified period of time.

3.2.1. Web analysis cookies

In addition, we use cookies (names including _ga, gatUA-*, _gid) that enable web analysis using Google Analytics. The validity period varies from a few hours to 2 years.

You do not necessarily have to accept these technically unnecessary cookies to use the rxgames shop. The rxgames shop is fully usable without web analysis cookies.

The web analysis cookies are only set if there is no browser add-on to disable Google Analytics. You can find more information about Google Analytics under No. 4.

3.3. Technically necessary cookies from third-party providers

If you select certain payment methods such as Klarna or Paypal, cookies are set to enable payment with the respective payment method.

If you want to play embedded YouTube videos on rxgames, cookies are also set.

3.4. Legal basis for the use of cookies

The legal basis for the use of technically necessary cookies is Art. 6 para. 1 f) GDPR. The use of these cookies is in the legitimate interest of ensuring the smooth operation of the rxgames shop.

The legal basis for the use of web analysis cookies is Art. 6 para. 1 a) GDPR. You have given your consent by giving explicit consent:
rxgames uses cookies to provide you with optimal service. If you continue to browse the site, you agree to the use of cookies.

3.5. Revocation of consent and deletion of cookies

You can revoke your consent to the use of cookies at any time with effect for the future by deleting the stored cookies in the browser settings.

In your browser settings, you can also disable the acceptance of cookies. If you only want to accept rxgames cookies but not the cookies of our service providers, you can select the "Block third-party cookies" setting in your browser.

4. Google Analytics

This website uses Google Analytics web analysis services provided by Google Inc. ("Google"). Google Analytics uses "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website and internet use to the website operator.

The IP address transmitted by your browser in the context of Google Analytics is not merged with other data from Google. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link: Browser add-on for deactivating Google Analytics.

rxgames uses Google Analytics with the "anonymizeIP" setting. This means that IP addresses are only processed in abbreviated form by Google Analytics in order to exclude direct individualization of persons.

rxgames expressly uses Google Analytics without the re-targeting function. Re-targeting refers to the targeted display of usually personalized advertising on other websites (so-called partner sites) after a user has visited an online shop, for example.

5. Log Files

When you visit the rxgames website, usage data is transmitted to our servers through your internet browser. Our servers log usage data in so-called log files. The following data is stored: date and time, type of request, protocol type and access status, size and name of the file, IP address from which the request originates, referrer URL (information about the website from which you came to our website), information about the internet browser used (such as which browser is used, the version number of this browser, and the type of encryption).

We use log files to monitor the function and performance of our shop and to further develop and improve the rxgames shop. For example, errors in the function of the shop are recorded and subsequently fixed by us. The storage of data in log files also takes place for security reasons, in order to ensure a secure operation of our system.

The legal basis for this data processing is Art. 6 para. 1 f) DS-GVO. The necessary legitimate interest lies in securing the function of the shop as well as ensuring a secure operation of our shop servers. IP addresses of users are deleted or anonymized after a maximum of 10 days.

6. Zendesk

We use the ticket system "Zendesk" from the provider Zendesk, Inc., 989 Market Street #300, San Francisco, CA 94102, USA, to process customer inquiries more quickly and efficiently.

Zendesk is a certified participant in the so-called "Privacy Shield Framework" and thus meets the minimum requirements for legally correct order data processing.

For more information about data processing by Zendesk, please refer to the Zendesk privacy policy at http://www.zendesk.com/company/privacy. 

If users do not agree to the collection and storage of data in Zendesk, we offer them alternative contact options for submitting inquiries by phone or post.

7. Your rights as a user

Below, we would like to summarize your rights under the General Data Protection Regulation.

7.1. Right to revoke consent (Art. 7 para. 3 GDPR)

You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You will be informed of this before giving your consent.

7.2. Right of access (Art. 15 GDPR)

Pursuant to Art. 15 GDPR, you have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• where the personal data are not collected from you, any available information as to their source;
• the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
• Where personal data are transferred to a third country or to an international organization, you shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.

7.3. Right to rectification (Art. 16 GDPR)

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

7.4. Right to erasure or “Right to be forgotten” (Art. 17 DS-GVO)

You have the right to have your data erased immediately if one of the following grounds applies:

• The data is no longer necessary for the purposes for which it was collected or otherwise processed.
• You withdraw your consent on which the processing was based, and there is no other legal ground for the processing.
• You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing.
• You object to the processing for direct marketing purposes pursuant to Article 21(2) of the GDPR.
• The data has been unlawfully processed.
• The erasure of the data is necessary to comply with a legal obligation under European or German law.
• The data was collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

If we have made your data public and are obligated to erase it, we will take reasonable steps, including technical measures, to inform controllers which are processing the data that you have requested the erasure of any links to, or copy or replication of, the data.

7.5. Right to restriction of processing (Art. 18 DS-GVO)

Pursuant to Article 18 of the GDPR, we may only process data in a restricted manner in the following cases:

• You contest the accuracy of your data and we need to verify its accuracy.
• The processing is unlawful, and you oppose the erasure of the data and request the restriction of its use instead;
• We no longer need the data for the purposes of processing, but you need it for the establishment, exercise or defense of legal claims, or
• You have objected to the processing pursuant to Article 21(1) of the GDPR, pending the verification whether our legitimate grounds override yours.

If processing has been restricted, we may only store the data. Any further processing is only permissible with your consent, or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

You may revoke your consent granted in this regard at any time.

You will be notified by us before the restriction of processing is lifted.

7.6. Notification Obligation (Art. 19 GDPR)

We are obliged to inform all recipients to whom your data has been disclosed about any correction or deletion of your data or any restriction on processing. This does not apply if this proves to be impossible or involves a disproportionate effort. We will inform you about these recipients if you request it.

7.7. Right to Data Portability (Art. 20 GDPR)

You have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to have us transmit this data to a third party, provided that

• the processing of the data is based on your consent or a contract and
• the processing is carried out using automated procedures.

In this case, you can request that we transmit your data directly to the third party, as far as this is technically feasible. This right must not adversely affect the rights and freedoms of other persons.

7.8. Automated Decision-Making in Individual Cases, Including Profiling (Art. 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on you or similarly significantly affects you. This does not apply if:

• you have previously given your explicit consent or
• the decision is necessary for the conclusion or performance of a contract between us or
• applicable legal provisions permit this and these provisions contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests.

In the first two cases, we will take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests. This includes that you can present your own point of view, contest the automated decision, and request the intervention of one of our staff members.

7.9. Right to Object (Art. 21 GDPR)

If we process your data based on a legitimate interest (Art. 6 para. 1 lit. f GDPR), you have the right to object to this processing if the reasons for this arise from your particular situation. This also applies to profiling based on these provisions. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

If we process your data for direct marketing purposes, you can object to the processing of the data. This also applies to profiling, insofar as it is related to such direct marketing.

After your objection, your data will no longer be processed for these purposes.

7.10. Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged infringement, if you believe that the processing of the data concerning you violates the General Data Protection Regulation. This does not affect any other administrative or judicial remedies that may be available to you.