Privacy Policy

Your Data Subject Rights

You can exercise the following rights at any time under the contact details provided, in accordance with the EU General Data Protection Regulation (GDPR):

• Access to your data stored by us and its processing (Art. 15 GDPR),
• Rectification of incorrect personal data (Art. 16 GDPR),
• Erasure of your data stored with us (Art. 17 GDPR),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data with us (Art. 21 GDPR), and
• Data portability if you have consented to data processing or have entered into a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can lodge a complaint at any time with a supervisory authority, e.g., the competent supervisory authority of your place of residence or the authority responsible for us as the data controller.

A list of supervisory authorities (for the non-public sector) and their addresses can be found here:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Processing Activities

Collection of General Information When Visiting Our Website

Type and Purpose of Processing
When you access our website, i.e., if you do not register or otherwise transmit information, general information is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and similar data.

This data is processed for the following purposes:

• To ensure a smooth connection to the website,
• To ensure user-friendly functionality of the website,
• To evaluate system security and stability, and
• For other administrative purposes.

We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if specific indications point to unlawful use.

Legal Basis and Legitimate Interest
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website, as well as ensuring system security and detecting misuse.

Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.

Retention Period
Data in server log files are stored for a maximum period of [please add information] in a form that allows identification of the data subjects unless a security-relevant event occurs (e.g., a DDoS attack).
In the case of such an event, server log files will be stored until the incident is resolved and fully investigated.

Mandatory or Required Provision
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website are not guaranteed. Additionally, some services and functionalities may not be available or may be limited.

Objection
Please refer to the information on your right to object under Art. 21 GDPR below.

Contact

Type and Purpose of Processing
You can contact us through the provided email addresses. In this case, the personal data transmitted by email will be stored, including the date and time the email is sent, the email address, IP addresses, and details of the servers involved in the email communication.

Regardless of the communication method, we collect the content of your inquiry. Your data is stored for the purpose of individual communication with you.

Legal Basis
Data processing is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR).
Our legitimate interest in processing your data is to enable seamless communication.

If you contact us to request a quote, data processing is performed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.

Retention Period
Data will be deleted no later than [please add information] after your inquiry has been processed.
If a contractual relationship arises, we are subject to legal retention periods, which are typically 6 or 10 years for proper accounting and tax compliance.

Mandatory or Required Provision
Providing your personal data is voluntary. However, we can only process your inquiry if you provide us with the necessary data and the reason for your inquiry.

Objection
Please refer to the information on your right to object under Art. 21 GDPR below.

Comment Function

Type and Purpose of Processing
When users leave comments on our website, we store, in addition to the data entered in the input form, the time of entry and the IP address of the device used to submit the comment.

This serves our security, as we can be held accountable for unlawful content on our website, even if it was created by users.

Legal Basis and Legitimate Interest
The processing of the data entered in the comment field is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR). By providing the comment function, we aim to enable straightforward interaction. Your input is stored for the purpose of processing the inquiry and for any follow-up questions.

Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.

Retention Period
Data will be deleted as soon as it is no longer necessary for the purposes for which it was collected. This is typically the case when communication with the user has concluded and the company can assume that the relevant issue has been definitively resolved.
We reserve the right to delete data without giving reasons or prior or subsequent notice.

Additionally, you can request the deletion of your comment at any time. Please send an email to the contact details listed in this privacy notice and provide the link to your comment, along with the email address used when creating the comment, for identification purposes.

Mandatory or Required Provision
Providing your personal data is voluntary. However, we can only publish your comment if you provide the required information marked as mandatory.

Objection
Please refer to the information on your right to object under Art. 21 GDPR below.

Newsletter

Type and Purpose of Processing
To deliver our newsletter or comparable information, we collect personal data provided through an input form.

For a valid subscription, we need a verified email address. To ensure that a subscription is genuinely made by the email owner, we use the double opt-in process. This involves recording the subscription to the newsletter, sending a confirmation email, and recording the receipt of the requested response. No additional data is collected.

At the time the subscription form is submitted, the following data is also stored:

Legal Basis
Based on your explicit consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information to your provided email address.

Recipients
We use a service provider to send the newsletter, who acts as our processor.

Retention Period
Data is processed as long as the corresponding consent is present.

Mandatory or Required Provision
Providing your personal data is voluntary and based solely on your consent. Without your consent, we cannot send you our newsletter.

Revocation of Consent
You can revoke your consent to the storage of your personal data and its use for the newsletter at any time with future effect. Cancellation can be requested via the link provided in each email or through the contact details in this privacy notice.

Reach Measurement

Type and Purpose of Processing
Reach measurement evaluates visitor flows to our online offering. It can include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach measurement, we can determine the times our online offering, its functions, or content are most frequently used or which areas need improvement.

The tools used for reach measurement are listed below.

Legal Basis
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest. The measurement of reach and the resulting insights enable us to optimize our web services.

Recipients
We use technical service providers who act as processors for the operation and maintenance of our website.

Retention Period
Information about the retention period can be found in the details of the tools used, as listed below.

Mandatory or Required Provision
The provision of data is neither legally nor contractually required.

Objection
Please refer to the information on your right to object under Art. 21 GDPR below.

Tools for Reach Measurement

Use of Google Analytics Tracking Tool

Type and Purpose of Processing
If you have given your consent, we use Google Analytics 4 on this website, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

Google Analytics uses cookies to allow an analysis of your use of the website. The collected information is usually transferred to a Google server in the USA and stored there.

IP anonymization is activated by default in Google Analytics on this website. As a result, Google truncates your IP address within EU/EEA member states. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser will not be merged with other data by Google.

During your visit to our website, user interactions are recorded as events, including:

• Page views,
• Session starts,
• Time spent on the website,
• User engagement,
• First-time visits,
• Scroll depth (e.g., when reaching 90% of the page),
• Clicks on external links,
• Ads viewed or clicked,
• Internal searches,
• Interactions with videos,
• Downloads,
• Language settings.

Additionally, the following information is collected:

• Approximate location (region),
• IP address (truncated form),
• Technical data (browser, ISP, device type, screen resolution),
• Referring website or advertising medium used to access our website.

Further information on terms of use and data protection can be found at:
https://www.google.com/analytics/terms/de.html
https://policies.google.com/?hl=de.

Google processes this data on our behalf to analyze your website use, compile reports on website activity, and provide additional services related to website and internet use.

Legal Basis
The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Recipients
We use technical service providers who act as processors for website operation and cookie evaluation.

Further recipients include Google Ireland Limited and its parent company, Google LLC, in the USA.

Retention Period
Data linked to cookies is automatically deleted after [please add information]. The maximum lifespan of Google Analytics cookies is two years. Data is automatically deleted monthly upon reaching the retention period.

Third-Country Transfer
As Google’s headquarters are in the USA, data processing on servers in the USA cannot be ruled out. This creates a risk that your data could be processed by US authorities for monitoring purposes, with limited legal recourse. To ensure an appropriate data protection level, we have entered into EU Standard Contractual Clauses with Google, which can be viewed here:
https://business.safety.google/adscontrollerterms/sccs/eu-c2c/

Revocation of Consent
You can revoke your consent at any time via the cookie settings.
Additionally, you can disable Google Analytics tracking by clicking this link, which will install an opt-out cookie. Alternatively, you can use a browser plugin to block tracking:
https://tools.google.com/dlpage/gaoptout.

Cookies

What are Cookies?
A cookie is a small data file that is created when visiting a website and temporarily stored on the system of the website visitor. When the server of this website is accessed again by the user’s browser, the previously stored cookie is sent back to the server. The server can analyze the information obtained through this process. Cookies can particularly facilitate navigation on a website.

Detailed information about cookies and which cookies are used on this website for what purposes can be accessed at any time in the cookie settings.

Deleting Cookies

You can delete individual cookies or the entire cookie storage. Additionally, you can find information and instructions on how to delete cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information at the following links:

• Mozilla Firefox: Delete Cookies
• Microsoft Edge: Manage Cookies
• Google Chrome: Clear Cache & Cookies
• Opera: Delete Cookies
• Safari: Manage Cookies

Additionally, you can prevent scripts from loading by default. For example, NoScript allows JavaScript, Java, and other plugins to be executed only on trusted domains of your choice.

For more information and instructions on how to configure this feature, refer to your browser provider:
(e.g., for Mozilla Firefox: NoScript Add-on).

Technically Necessary Cookies

Type and Purpose of Processing
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The purpose of technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary that the browser is recognized even after a page change.

For example, we use cookies for the following applications:
(A summary of cookie usage should be included here, e.g., session management, shopping cart functionality, etc.)

Legal Basis and Legitimate Interest
The data processing is carried out solely based on our legitimate interest in a user-friendly design of our website and the documentation of consent pursuant to Art. 6 para. 1 lit. f GDPR in conjunction with §25 para. 2 TTDSG.

Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.

Retention Period
The respective retention period of cookies can be found in the cookie consent tool.

Mandatory or Required Provision
The provision of the aforementioned personal data is neither legally nor contractually required. However, without these data, the service and functionality of our website cannot be guaranteed. Additionally, certain services and functionalities may not be available or may be restricted.

Objection

Please refer to the information on your right to object under Art. 21 GDPR below.

Provision and Withdrawal

The provision of your data is voluntary and based solely on your consent. However, we would like to point out that, without consent, certain functionalities of this website may not be fully usable.

You can revoke your consent at any time via the cookie consent tool for future use.

Profiling

With the help of technically unnecessary cookies, website visitors’ behavior can be evaluated and their interests analyzed. A pseudonymous user profile is created for this purpose.

Information About Your Right to Object Under Art. 21 GDPR

Right to Object in Individual Cases
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out based on Art. 6 para. 1 lit. f GDPR (data processing based on a legitimate interest); this also applies to profiling based on this provision in the sense of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

Recipient of the Objection
Oliver Drexler, contact@smartmonkeystudios.com

Changes to Our Privacy Policy

We reserve the right to adjust this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy applies to your next visit.

Questions About Data Protection

If you have any questions about data protection, please send us an email to the above-mentioned contact.

Copyright notice
This privacy policy was created with the help of activeMind AG – the experts for external data protection officers (version #2024-10-25) (https://www.activemind.de/datenschutz/datenschutzbeauftragter/).