1 CONTROLLER AND CONTACT

The controller pursuant to data protection laws is:

ALPHATIER Studios UG (Haftungsbeschränkt)
Karlstraße 45a
76133 Karlsruhe (Germany)

If you have any questions or suggestions about data protection, you can send us an e-mail at team@idlemafiaboss.com

Our data protection officer can be reached at the following address: Titus Roemer, Karlstraße 45a, 76133 Karlsruhe

2 SCOPE OF DATA PROTECTION

The scopeof data protection is personal data. In accordance with Article 4 section 1 GDPR, personal data encompasses all information relating to an identified or identifiable natural person, which includes, for example, names or identification numbers.

3 COLLECTION AND USE OF YOUR DATA

3.1 AUTOMATED DATA COLLECTION

When accessing our website, your device automatically transmits data for technical purposes. The following information is stored separately from any other information you may transmit to us:

• URL accessed
• Date and time of access
• Referrer
• IP address (minus one byte)

This data is stored for technical reasons only and is never associated with any specific person.

3.2 APPLICATIONS

When you submit an application to us through our website, we collect and store the data that you transmit so we can examine your application.

Your data is collected and stored in order to process your application (Article 6 section 1 (b) GDPR).

4 COOKIES

We store so-called cookies in order to offer you a comprehensive range of features and to make our websites more convenient to use. Cookies are small files that your web browser stores on your computer. If you do not want any cookies used, you can prevent cookies being stored on your computer by adjusting the settings of your web browser. Please note that by doing so, you might reduce the functionality of our site.

Specifically, we use the following cookies:

• Own cookies
  • remembers that you accepted the cookie agreement.
• Third party functions
  • YouTube
  • Google Maps
  • Breezy HR

• Social Website Cookies
  • Facebook
  • Twitter

These cookies are incapable of determining your identity. In each case our use of cookies is lawful because we have a legitimate interest in customized website design and in performing a statistical analysis of our website, and due to the fact that your legitimate interests do not prevail under Article 6 section 1 (f) GDPR.

5 CHANGE OF PURPOSE

Your personal data might be used for purposes other than those described, but only if the law allows it, or if you have consented to a change in the purpose of processing your data. If your data is subsequently processed for purposes other than those for which it was originally collected, we will tell you what these other purposes are before further processing occurs, and provide you with all other relevant information.

6 AUTOMATED INDIVIDUAL DECISIONS OR PROFILING MEASURES

We do not use automated processing to make decisions, and we do not profile.

7 DISCLOSURE OF DATA

As a matter of principle, your personal data will not be disclosed to others without your express prior consent, except in the following circumstances:

• If needed to investigate unlawful use of our services or to prosecute a criminal offense, personal data can be forwarded to law enforcement agencies and, if appropriate, to victims if any. However, this only happens if there are concrete clues pointing to unlawful or abusive behavior. Disclosure may likewise occur for the purpose of enforcing terms of use or other agreements. In addition, we are also required by law to disclose information to certain government agencies upon request, namely to law enforcement, to government agencies prosecuting misdemeanors punishable by fines, and to the tax authorities.Such data is disclosed by virtue of our legitimate interest in combating abuse, for prosecuting criminal offenses and for securing, asserting and enforcing claims, and because your rights and your interest in the protection of your personal data do not prevail pursuant to Article 6 section 1 (f) GDPR.Such data is disclosed by virtue of our legitimate interest in combating abuse, for prosecuting criminal offenses and for securing, asserting and enforcing claims, and because your rights and your interest in the protection of your personal data do not prevail pursuant to Article 6 section 1 (f) GDPR.

• To provide our services, we outsource work to outside companies under contract and to service providers (“processors”). In such cases, personal data will be transferred to such processors for processing. These processors are carefully selected and regularly reviewed by us to ensure your privacy. Processors may only use data for the purposes specified by us. Moreover processors are contractually bound to process your data only in accordance with this data protection policy and with German data protection laws.
  We outsource work to the following processors:
  • Microsoft Ireland Operations Limited
  • Breezy HR, Inc.

Transfer of data to processors is based on Article 28 section 1 GDPR. In subsidiary manner transfer can be warranted on grounds of our legitimate interest in the economic and technical benefits of using specialized processors, and due to the fact that your rights and interests in protecting your personal data do not prevail under Article 6 section 1 (f) GDPR.

• We also process data in countries outside the European Economic Area (“EEA”).For the US, the European Commission resolved by decision of July 12, 2016 that under the rules for the EU-U.S. Privacy Shield an adequate degree of data protection exists (adequacy decision, Article 45 GDPR). Additional information – including information about certification of our service providers – is available at https://www.privacyshield.gov. We use the following service providers, which are certified under the EU-U.S. Privacy Shield:
  • Microsoft Corp. (for maintenance services from the USA)
  • Breezy HR, Inc.

• As our business evolves, ALPHATIER Studios (Haftungsbeschränkt) may undergo organizational changes such as adopting a new legal form and establishing, buying or selling subsidiaries and divisions or components of companies. Whenever such changes take place, customer information for each business unit is transferred together with the business unit. Each time personal information is disclosed to third parties as described above, we will ensure that the disclosure complies with this Privacy Policy and with applicable data protection laws.We will disclose personal information only if the law allows it because we have a legitimate interest in altering our corporate form as required by economic and legal circumstances, and because your rights and interests in the protection of your personal data do not prevail pursuant to Article 6 section 1 (f) GDPR.

8 DELETION OF YOUR DATA

We will delete or anonymize your personal information as soon as it is no longer needed for the purposes for which we collected or used it in accordance with the preceding paragraphs, unless the data must be kept longer for legal reasons, for criminal prosecution or to secure, assert or enforce legal claims.

If data must be kept for legal reasons, they are blocked. In that case they are no longer available for further use.

9 YOUR RIGHTS AS A DATA SUBJECT

9.1 RIGHT TO INFORMATION

You are entitled at any time upon request, to obtain information from us about your personal data within the scope of Article 15 GDPR. To request such information, you may submit an application by mail or by e-mail to the address given above.

9.2 RIGHT TO CORRECT INACCURATE DATA

You are entitled to demand that we correct forthwith any inaccurate personal data concerning you. For this purpose, please get in touch with the contact addresses listed above.

9.3 RIGHT TO DELETION

Under the conditions contemplated in Article 17 GDPR, you are entitled to demand the deletion of your personal data. In particular, you are entitled to demand deletion if the personal data is no longer needed for the purposes for which they were collected or otherwise processed, if they are no longer needed, if they were unlawfully processed, if an objection has been submitted or if deletion is mandatory under EU law or under the law of a member State that applies to us. For additional information regarding the length of time for which the data is stored, see item 7 of this privacy policy. To assert aforesaid right, please get in touch with the contact addresses listed above.

9.4 RIGHT TO RESTRICTION OF PROCESSING

You are entitled to demand that we restrict processing in accordance with Article 18 GDPR. This right applies especially if we are not in agreement with the user concerning the accuracy of any personal data. The right persists for the time required to verify its accuracy. In addition such right applies in the following cases: if the user is entitled to demand deletion but instead demands restricted processing; if the data is no longer required for the purposes we are pursuing, but the user needs them in order to assert, exercise or defend legal claims; and if an objection has been raised but its successful exercise is still disputed between us and the user. To assert aforesaid right, please get in touch with the contact addresses listed above.

9.5 RIGHT TO DATA TRANSFERABILITY

You are entitled to demand from us whatever personal information you may have given us. Pursuant to Article 20 GDPR, at your request we must provide you with such information in a structured, commonly used and machine-readable format. To assert aforesaid right, please get in touch with the contact addresses listed above.

9.6 RIGHT TO OBJECT

Pursuant to Article 21 GDPR you are entitled at any time to object to the processing of your personal data on grounds related to your particular situation, including grounds under Article 6 section 1 (e) or (f) GDPR. We will cease processing your personal information unless we can demonstrate compelling and legitimate grounds for processing that outweigh your interests, rights and freedoms, or unless the processing is done for the purpose of enforcing, pursuing or defending legal claims.

10 CHANGES TO THIS DATA PROTECTION POLICY

The current version of this Privacy Policy is always available online.

Updated to: 1. Januar 2019