PRIVACY POLICY
I. General Information
1. Responsible Body, Introduction
We are Chimera Entertainment GmbH, based at Karlstraße 68, 80335 München and you can reach us by post or e-mail at info@chimera-entertainment.de
The protection of your privacy is very important to us. We therefore explain below which personal data we collect and process when you use our services
or make use of our offers. Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person.
This includes, for example, the name, e-mail address or telephone number.
The collection, processing (including storage, modification, transmission, blocking and deletion) and use of your data is carried out in compliance
with the provisions of data protection law. Personal data is only collected, used and passed on if this is permitted by law or if users give their
consent to the collection of data and if this is technically or legally necessary for the provision of the service. Under no circumstances will the
data collected be sold or unlawfully passed on to third parties for any other reason.
2. Legal Basis
We collect and process personal data based on the following legal bases:
- Consent according to Article 6 paragraph 1 lit. a General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
- Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 lit. b GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
- Processing to fulfill legal obligations under Article 6 para. 1 lit. c GDPR, this means that a processing of the data is required by law or other regulations.
- Processing for the protection of legitimate interests in accordance with Article 6 para. 1 lit. f GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.
We store and access information in your terminal equipment based on the following legal bases:
- Consent pursuant to Section 25 para.1 of the Telecommunications and Digital Services Data Protection Act (TDDDG).
- Absolute necessity according to Section 25 para. 2 no. 2 TDDDG, so that we can provide a telemedia service expressly requested by you.
3. Rights of Affected
You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:- Information Right pursuant to Article 15 GDPR, i.e. the right to be informed about how your personal data is processed and which personal data is processed by us,
- Right of rectification pursuant to Article 16 GDPR - i.e. the right to request the rectification of inaccurate personal data relating to you without undue delay, including the completion of incomplete data,
- Right to erasure ("right to be forgotten") pursuant to Article 17 GDPR - i.e. the right to request the erasure of your personal data, provided that certain conditions are met,
- Right to restriction of processing pursuant to Article 18 GDPR - i.e. the right to request the restriction of the processing of your personal data, provided that certain conditions are met,
- Right to data portability pursuant to Article 20 GDPR - i.e. the right to demand that you receive your personal data that you have provided in a structured, common and machine-readable format and the right to transfer it to a third party, provided that certain conditions are met,
- Right to object in accordance with Article 21 GDPR - i.e. the right to object to the processing of your personal data where the processing is based on our legitimate interests, provided that certain conditions are met.
4. Data Erasure and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the
controller is subject.
Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
II. Specific Data Processing
1. E-mail and Newsletter Dispatch
Scope of the Data Processing
If you register to use our games and enter your e-mail address, we may subsequently use it to send you e-mails. In such a case, your e-mail address will only be used to send information about important new features in our games and services. It is also possible to subscribe to a free newsletter on our website or in our games, which contains direct advertising for our products or the products of our co-operation partners. When registering for the newsletter, the data from the input mask is transmitted to us or the email address already stored is used. In this case, the date and time of registration for the newsletter and the IP address used will also be stored. As part of the confirmation of the newsletter registration, the date and time at which you click on the confirmation link for the newsletter registration and the IP address used are also stored.
To send the newsletter, your e-mail address is passed on to the external service provider, Rocket Science Group, which sends the newsletter on our behalf. No further use is made by the service provider. The service provider is based outside the European Union in the United States of America.
Legal Basis
The legal basis for the processing of data when sending newsletters based on the prior purchase of goods or services is Art. 6 para. 1 lit. f GDPR in conjunction with Section 7 para. 3 UWG. The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR therefore lies in direct advertising and increasing sales to existing customers. The legal basis for the processing of data when registering directly for the newsletter is Art. 6 para. 1 lit a GDPR.
The legal basis for the transfer of data to our external service provider Rocket Science Group is Art. 26 para. 3, 6 in conjunction with Art. 46 para. 2 lit. c) GDPR by means of the standard clauses of the EU Commission.
Purpose of the Data Processing
The purpose of storing the e-mail address is to enable electronic contact for advertising purposes. The date and IP address of the registration and the confirmation of the registration are recorded in order to document the consent to the newsletter dispatch in a verifiable manner and to exclude misuse. The information is passed on to the service provider for the purpose of sending the newsletter in bulk.
Duration of Storage
If we have received your e-mail address as part of the purchase of goods or services, it will be deleted or blocked for the sending of advertising after 18 months after the last purchase of goods or services or in the event of an objection.
If you have expressly consented to receiving the newsletter, we will only delete or block the e-mail address for sending advertising if you revoke your consent. The data used to confirm the newsletter subscription will be stored for the same period of time.
Right to Object and Removal
You can object to the use of your e-mail address for advertising purposes at any time without incurring any costs exceeding the usual charges for your communication fees. You can object to the use of your e-mail address for advertising purposes with effect for the future by clicking on a link provided in each advertising mailing. You can also object to the use of advertising with effect for the future by sending an e-mail to support@chimera-entertainment.com. If you object by e-mail, it may take up to 5 working days to implement the deletion or blocking; advertising may still be sent during this period.
2. Contacting our Customer Support / Using the Contact Form
Scope of Data Processing
By using our contact form (e.g. by clicking on the "Support" button) or sending an email to our customer support (e.g. support@chimera-entertainment.com), you agree to provide us with certain personal information, including your email. By using the contact form, your IP address and information entered in the various fields may also be processed.
We use the services of Microsoft Corp. to process this data. The service provider is prohibited from any other use. The provider is based in the United States of America.
Legal Basis
The legal basis for the processing of data when registering directly for the game is Art. 6 para. 1 lit. a) GDPR.
The legal basis for the transfer of data to Microsoft Corp. is Art. 26 para. 3, 6 in conjunction with Art. 46 para. 2 lit. c) GDPR by means of the standard clauses of the EU Commission.
Purpose of the Data Processing
The purpose of processing the e-mail address and other personal data is to facilitate customer service, e.g. to help the player. The service provider serves as a tool for managing the messages and processes the data on our behalf.
Duration of Storage
Your data will be deleted 18 months after the last contact with our customer support / via our contact form.
Right to Object and Removal
You can request the deletion of your user data at any time by post or by e-mail to support@chimera-entertainment.com without incurring any further costs.
3. Using the Multiplayer Mode
Scope of Data Processing
If you play the game in multiplayer mode, your data required for multiplayer mode (game actions, IP address, chat content, etc.) will be processed by Exit Games GmbH, Germany, Hongkongstraße 7, 20457 Hamburg (dashboard.photonengine.com/account/privacyandcookiepolicy).
Legal Basis
The legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR and Section 25 para. 2 no. 2 TDDDG. The legal basis for the storage of data at Exit Games GmbH is Art. 28 para. 3 GDPR.
Purpose of the Data Processing
The purpose of the processing is to provide a multiplayer mode and to connect several players in a joint game. In addition, data is used to analyse errors in the event of a malfunction. If a chat is provided, the data is also used for any filter functions.
Duration of Storage
The data is stored for the duration of a multiplayer round. Any further storage is only for the purpose of analysing errors.
Right to Object and Removal
There is no option to object when using the multiplayer mode.
4. Use of Our Discord Server
-
Scope of Data Processing
We operate a server with the Discord service of Discord Netherlands BV. This allows users to communicate with each other in writing or via voice chat and exchange content. Data processing by Discord takes place on the basis of the necessary contract with Discord itself. The scope and legal basis for processing by Discord can be found in their data protection information:
discord.com/privacy
We ourselves do not have access to the Discord database and can only moderate the respective channels editorially and exclude users from using them.
-
Legal Basis
The legal basis for the processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. There is joint controllership with Discord in accordance with Art. 26 GDPR.
-
Purpose of the Data Processing
The purpose is to exchange information about our game with you and other players.
-
Duration of Storage
The storage period of posts is determined by Discord in its privacy policy.
Right to Object and Removal
You can delete your messages or your customer account on Discord yourself at any time or contact the contact point specified in Discord's privacy policy. If you wish to delete posts, you can also contact us at support@chimera-entertainment.com
5. Use of Steam
The use of our game requires the use of the "Steam" service provided by Valve Corporation, P.O. Box 1688, , Bellevue, WA 98004, USA and Valve S.a.r.l., Regus City Center Suite 227, 26 Boulevard Royal, L-2449 Luxembourg, Luxembourg ("Valve") and the conclusion of a
user agreement with Valve. Valve itself collects personal data in the context of the use of the "Steam" service in its own name and on the basis of this user agreement. We have no access to this data. With regard to the collection and use of data by "Steam", we
therefore
refer you to Valve's user agreement and privacy policy. These can be found here:
store.steampowered.com/privacy_agreement
store.steampowered.com/privacy_agreement
6. Social Media Presence
Scope of Data Processing
We maintain publicly accessible profiles on various social networks. Your visit to these profiles triggers a variety of data processing operations. These data processing operations may be necessary for individual functionalities of our profiles in social networks. These functionalities will not be available to you, or only to a limited extent, if you do not provide us with your personal data. When you visit our profiles, your personal data is not only collected, used and stored by us, but also by the operators of the respective social network. This happens even if you yourself do not have a profile on the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us. For details on the collection and storage of your personal data as well as the type, scope and purpose of its use by the operator of the respective social network, please refer to the data protection declarations of the respective operator:
- The privacy policy for the social network Facebook, which is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, can be viewed at
www.facebook.com/privacy/policy - The privacy policy for the social network Instagram, which is operated by Meta Platforms Ireland Limited, can be viewed at
help.instagram.com - The privacy policy for the social network YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, can be viewed at
policies.google.com/privacy - The privacy policy for the social network X, which is operated by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland, can be viewed at
twitter.com/en/privacy - The privacy policy for the social network TikTok, which is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, Ireland, can be viewed at
www.tiktok.com/legal/page/eea/privacy-policy
As the operator of a Facebook fan page, we can only view the information stored in your public Facebook profile, and only if you have such a profile and are logged into it when you visit our fan page. In addition, Facebook provides us with anonymous usage statistics that we use to improve the user experience when visiting our fan page. We do not have access to the usage data that Meta Platforms collects to compile these statistics. Meta Platforms has undertaken to us to assume primary responsibility under the GDPR for the processing of this data, to fulfil all obligations under the GDPR with regard to this data and to make the essentials of this obligation available to those affected.
We do not have access to the databases of social media providers.
- The privacy policy for the social network Facebook, which is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, can be viewed at
Legal Basis
The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR. This data processing serves our (and your) legitimate interest in enabling dialogue with you and other players about our game and improving the user experience when visiting our fan page in line with our target group.
There is joint controllership with the social media providers in accordance with Art. 26 GDPR.
Purpose of the Data Processing
The purpose is to exchange information with you and other players about our game and to improve the user experience when visiting our social media presences for specific target groups.
Duration of Storage
The storage duration of data processing operations on our social media presences is determined by the respective data protection regulations of the social media providers.
Right to Object and Removal
You can delete your messages or your customer account on the social media sites yourself at any time or contact the contact points specified in the data protection declarations of the social media providers.
7. Unity Analytics
Scope of Data Processing
When using our game, we use Unity Analytics to provide you with smooth access to the game and to continuously improve your gaming experience. This software collects information about how you use the game and uses it to compile various statistics. The usage data collected includes in particular the device ID (MAC/IMEI/MEID), which is pseudonymised, the device type, the country, the device language, the installed operating system, the browser type, the language settings, the CPU type and the number of CPUs, information on the graphics card, system and video RAM, the current screen resolution, the Unity version used, the app ID of the game used, in-game behaviour and purchases, IP address. In the event of technical errors, the error report (crash logs) and the error message are also recorded. The information is not only transmitted to us, but also to Unity Technologies, which also uses it for its own purposes. Unity Technologies transmits and stores the collected data within and outside the European Union. Unity Technologies itself describes its data processing activities here
unity3d.com/legal/privacy-policy
In addition, we store log files on the consent to data collection by Unity Analytics.
Legal Basis
The legal basis for the processing of the data for use for analysis purposes is Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. For the defence against attempted fraud, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR and Section 25 para. 2 no. 2 TDDDG. The legal basis for the storage of data at Unity Technologies is Art. 28 para. 3, 6 GDPR in conjunction with Art. 46 para. 2 lit. c GDPR by means of the standard clauses of the EU Commission both as processor with regard to the analysis of gaming behaviour and transfer to Unity as the controller. The legitimate interest is the defence against attempted fraud. For this purpose, access to information already stored on your end device is absolutely necessary so that we can provide the game smoothly as part of the multiplayer without the possibility of cheating/fraud.
Purpose of the Data Processing
The purpose of analysing user behaviour is to optimise and eliminate errors in the game offering with regard to the expectations and use by customers and to ensure that the game runs smoothly without the possibility of cheating.
For the purpose of data processing for data processed by Unity Technologies for its own purposes, please refer to Unity's privacy policy at
unity3d.com/de/legal/privacy-policy
Duration of Storage
The data processed via Unity will be stored by us until you withdraw your consent. In addition, you must revoke your consent to data processing by Unity Technologies for its own purposes separately from Unity Technologies.
The duration of data storage by Unity Technologies can be found in their privacy policy at
unity3d.com/legal/privacy-policy
Right to Object and Removal
You can request the deletion of your user data at any time by post or by e-mail to support@chimera-entertainment.com without incurring any further costs. In the event of an objection by e-mail, the implementation of the deletion or blocking may take up to 5 working days, unless we are legally obliged (e.g. to clarify payment disputes) to keep the data for longer. You can prevent the storage of data, including the generation and transmission of data to Unity Technologies, by refusing its collection. You can do this when we ask for your consent or later in the options menu of the game.
Last updated: 28.05.2024
