PRIVACY POLICY

We, Einfach Genial gGmbH, follow the principle of data minimization. This means that when collecting your personal data, we ensure that we only collect the personal data that is necessary for the use of our app, website and our services or that you have provided to us with your consent.

You entrust us with personal data. We see it as part of our responsibility to use this data sparingly and transparently and to protect it in the best possible protection.

In this privacy policy, we describe when we collect personal data through interactions with you and how we manage this data. It applies to all interactions between you and us and for the Einfach Genial gGmbH website and for the apps embedded on the website that were developed by Einfach Genial gGmbH.

I. Name and address of the controller

The controller is

Einfach Genial gGmbH

Bayernstr. 3

30855 Langenhagen

Phone: 0511 / 5430 5988

Email: info@einfachgenial.org

Data Protection Officer:

Christina Schulz

Bayernstraße 3

30855 Langenhagen

Phone: +49-511-543 059 88

E-Mail: cschulz@einfachgenial.org

II General information on data processing

1. scope of the processing of personal data

We collect and use personal data from visitors to our website only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our visitors only takes place regularly with the consent of the visitor. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

2 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures are required.

Insofar as the processing of personal data is necessary for compliance with a legal

obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary for the purposes of the legitimate interests pursued by our company or

of a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3 Data erasure and storage duration

Your personal data will be deleted or blocked as soon as the purpose for which it was ceases to apply. In addition, data may be stored if this is required by the

European or national legislator in EU regulations, laws or other provisions to which we are subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

III Provision of the website and apps and creation of log files

1. description and scope of data processing

Each time our website and the browser version of our apps are accessed, our system automatically collects data and information:

The following data is collected:

(1) Information about the browser type and version used

(2) The visitor's operating system

(3) The visitor's internet service provider in anonymized form

(4) The IP address of the visitor

(5) Date, time and place of access

(6) Duration of the access, source of the access

(7) Information about the device used

The data is also stored in the log files of our system. Not affected by this are the IP addresses of the visitor or other data that enable the data to a visitor. This data is not stored together with other personal data of the visitor does not take place.

Our apps are developed in Unity. Unity Technologies may also collect data from users of

of our apps. Unity Technologies' privacy policy can be found here:

https://unity.com/de/legal/game-player-and-app-user-privacy-policy

2. Legal basis for data processing

The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the delivery of the app or website. For this purpose, your IP address must remain of the session.

These purposes also constitute our legitimate interest in data processing in accordance with

Art. 6 para. 1 lit. f GDPR.

4. Duration of storage

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the app or website, this is the case when the respective session has ended.

5. Possibility of objection and removal

The collection of data for the provision of the website or app and the storage of data in log files is

absolutely necessary for the operation of the website or app. There is no possibility of objection on your part.

IV. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right to information

You can request confirmation from us as to whether personal data concerning you is being processed by us.

If such processing has taken place, you can request the following information from us:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4) the envisaged period for which the personal data concerning you will be stored

or, if specific information on this is not possible, criteria for determining the storage period;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right to lodge a complaint with a supervisory authority;

(7) all available information about the origin of the data if the personal data was not collected from the data subject.

You have the right to request information as to whether the personal data concerning you

transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards in.

2. Right to rectification

You have a right to rectification and/or completion vis-à-vis us if the personal data processed concerning you is incorrect or incomplete.

We will make the correction without delay.

3. Right to restriction of processing

Under the following conditions, you may request the restriction of the processing of

personal data concerning you:

(1) if you contest the accuracy of the personal data concerning you for a period of time that enables us to verify the accuracy of the personal data;

(2) the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of the use of the personal data;

(3) we no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or

(4) if you have objected to the processing and it is not yet certain whether the it has not yet been established whether our legitimate grounds override your grounds.

If the processing of personal data concerning you has been restricted, apart from being stored, this data may only be used with your consent or for the establishment assertion, exercise or defense of legal claims or for the protection of the rights of another rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

4. Right to erasure

a) Obligation to erase

You may request that we erase the personal data concerning you deleted immediately and we are obliged to delete this data immediately, if one of the following reasons applies:

(1) the personal data concerning you are no longer necessary in relation to the purposes for which they were.

(2) you withdraw your consent on which the processing was based and there is any other legal basis for the processing.

(3) you object to the processing and there are no overriding legitimate grounds for the processing.

(4) the personal data concerning you has been processed unlawfully.

(5) the erasure of personal data concerning you is necessary for compliance with a legal obligation.

b) Information to third parties

If we have made the personal data concerning you public and we are obliged to the cost of implementation, we will take reasonable steps, including technical measures to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of all links to this personal data or of copies or replications of this personal data.

c) Exceptions

The right to erasure does not exist if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) for compliance with a legal obligation to which we are subject or for the performance of a task carried out in the public interest;

(3) for reasons of public interest in the area of public health;

(4) for the establishment, exercise or defense of legal claims.

5. Right to information

If you have asserted your right to rectification, erasure, or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you has been disclosed about this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients in relation to us.

6. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that

(1) the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and

(2) the processing is carried out by automated means.

In exercising this right, you also have the right for the personal data concerning you to be transmitted directly from us to another controller, to the extent that this is technically feasible. The freedoms and rights of other individuals must not be adversely affected by this.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

7. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR.

We will no longer process personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

8. Right to withdraw the data protection consent declaration.

You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you violates the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

V. Disclosure to Third Parties

Your personal data will be disclosed to service providers commissioned by us for the implementation of the app and website. We obligate our commissioned service providers within the framework of a data processing agreement in accordance with the GDPR. The selection of our service providers is made with consideration for the protection of your personal data.

To the extent that we are legally obligated or required by a court decision to do so, we will transmit your data to authorities with the right to access information.

For external marketing purposes, your personal data will not be disclosed to third parties without your prior express consent.

The transfer of personal data to third countries is not taking place and is not planned.

To display our location on Facebook, we use the Google Maps product from Google Inc. By using this website, you agree to the collection, processing, and use of automatically collected data by Google Inc., its representatives, and third parties.

The terms of use for Google Maps can be found at the following 'Terms of Use for Google Maps': http://www.google.com/intl/de_de/help/terms_maps.html

You can access Google's privacy policy as follows: https://policies.google.com/privacy?hl=de

You can find more information about the data processing by Google in Google's privacy notices. There, you can also adjust your settings in the privacy center to manage and protect your data.

VI. Contact

If you have questions or would like to exercise your data protection rights in any of the mentioned cases, please feel free to contact us at: info@einfachgenial.org, preferably with the subject line "Data Protection," in addition:

Einfach Genial gGmbH

Bayernstr. 3

30855 Langenhagen

Phone: 0511 / 5430 5988

Email: info@einfachgenial.org