This privacy policy is intended to inform business customers of icigai1 GmbH's offerings about the type, scope and purpose of the collection and use of personal data by the website operator/ app operator “icigai1 GmbH”.

The website operator/ app operator takes your data protection very seriously and treats your personal data confidentially and in accordance with the legal regulations. Since new technologies and the constant development of this website may result in changes to this data protection declaration, we recommend that you read the data protection declaration again at regular intervals.

Definitions of the terms used (e.g. “personal data” or “processing”) can be found in Art. 4 GDPR.

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is icigai1 GmbH, Moriz von Rohr Strasse 1a, 07745 Jena, Germany, email: support(a)icigai1.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

ICIGAI1 GMBH uses the data,
- to analyze the course
- to improve the course
- to provide evaluations of fields for license holders (legal entities) (see Fields).
- No data is collected beyond the usual gameplay
- Evaluations refer only to the data that an individual player can see individually on the field
- This publicly visible data is evaluated anonymously according to certain aspects

We, the website operator/ app operator and license provider, collect data about access and entries on the website based on our legitimate interest (see Art. 6 Para. 1 lit. f. GDPR) and save this as "server log files" on the website server. The following data is automatically logged when you use our online service:
• Visited websites/subpages/ app content
• Time of access
• Amount of data sent in bytes
• Source/reference from which page you came to the page
• Browser / framework used
• Operating system used
• IP address used

The server log files are stored for a maximum of 60 days and then deleted. The data is stored for security reasons, for example to be able to clarify cases of misuse. If data must be retained for evidentiary purposes, it will not be deleted until the incident has been finally resolved.

This website uses cookies for pseudonymized reach measurement, which are transferred either from our server or the server of a third party to the user's browser. Cookies are small files that are stored on your device. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.

Common browsers offer the option to not accept cookies. Note: There is no guarantee that you will be able to access all functions of this website without restrictions if you make the appropriate settings.

The website operator/ app operator only collects, uses and passes on your personal data if this is permitted by law or if you consent to the data collection. Personal data includes all information that serves to identify you and that can be traced back to you - for example, your name, email address and telephone number.

You can also visit our online services/websites without providing any personal information. However, to improve our online services, we store your access data to this website/app (without any personal reference). This access data includes, for example, the file you requested or the name of your internet provider. Because the data is anonymized, it is not possible to draw any conclusions about you personally.

Registration in the app
You can register in our app either by email and password or by logging in via Google or Apple login. When registering by email, you will need your email address and a password of your choice. Alternatively, you can log in via Google or Apple. In this case, the email address of the respective provider, the name stored there and the profile picture are transmitted and used by the provider.

Using the app
While using the app, various data is processed in order to be able to fully use the app's functions. This includes the one-time recording of the user's GPS position without saving a history. In addition, the device's images and camera are accessed in order to be able to upload photos for the app. The device's notifications are also accessed in order to be able to receive push notifications.

Processing of data
Users' email addresses are saved to link the login to the player and thus create a player account . Uploaded images are saved to display them on the player account and in the game. The password, if one was provided during registration, is saved to enable login.

The user's GPS position is processed for various reasons: to display location-based data in the surrounding area, to verify the creation, activation or fulfillment of challenges and deals, and to display the location on the map.

Purpose of data processing
This personal data is processed based on our legitimate interest in fulfilling the agreed services and in optimizing and securing our entire offering. Through this processing, we can ensure that the app functions properly and offers users an optimal user experience.

Registration and data processing in the app
When using our app, registration is required, during which certain data of the legal entity (field data) is recorded. This field data includes the registered office of the legal entity, the location of the legal entity, the registration number, the tax number, the billing address and the email address of the contact person. In addition, the first name and last name of the contact person are recorded.

Processing of the collected data
The data collected is processed as follows: The first name and last name of the contact person are stored to enable personal contact. The email addresses are stored to enable the sending of invoices and contract-relevant information about your customer account and your license. The field data is used to validate the legal capacity of the legal entity and enables us to offer special services, such as donations for clubs, within the framework of the legal regulations.

Purpose of data processing
This personal data is processed based on our legitimate interest in fulfilling our agreed services and in optimizing and securing our entire offering. By storing and processing this data, we ensure that we can offer our users the best possible and legally compliant services.

In order to provide you with the greatest possible convenience, we require your business data to be permanently stored in a password-protected customer account.

Creating a customer account is mandatory. If you create a customer account, the data collected here will be processed on the basis of Article 6 Paragraph 1 Letter b) GDPR. Once a customer account has been set up, you will not need to enter any data again. You can also view and change the data stored about you in your customer account at any time.

In addition to the data requested when purchasing a license, you must provide a password of your choice to set up a customer account. This password, together with your email address, is used to access your customer account. Please treat your personal access data confidentially and in particular do not make it available to any unauthorized third parties. Please note that you will remain automatically logged in even after you leave our website, unless you actively log out.

You have the option of deleting your customer account at any time. Please note, however, that this does not mean that the data visible in the customer account is deleted once you have ordered from us. When the customer account is deleted, the license for the field is also terminated at the regular time of termination and the field is deleted by the app operator . Your data will be deleted automatically after the retention periods applicable to us under commercial and tax law have expired. The legal basis for this further data processing is Art. 6 Paragraph 1 Letter c) GDPR and Art. 6 Paragraph 1 Letter f) GDPR.

If you contact us as the website operator/ app operator using the contact options provided, your details will be saved so that they can be used to process and answer your request. This data will not be passed on to third parties without your consent.

We take appropriate precautions to ensure a level of security appropriate to the risk when processing your personal data. To do so, we use organizational, technical and administrative measures to protect the personal data covered by this statement from unauthorized access, destruction, loss, alteration or misuse. Learn more. Unfortunately, no data transmission or storage system is completely secure.

We encourage you to help us protect your personal information. If you have an account, you can do so by using a strong password, protecting your password from unauthorized use, and avoiding reusing your Stripe account login credentials on other services or accounts. If you suspect that your interactions with us are no longer secure (for example, if you believe the security of your account is no longer guaranteed), please contact us immediately.

We will retain your personal information for as long as we continue to provide the Services to you or our Business Customers, or for such period as we reasonably believe we will continue to provide the Services. Even after we stop providing Services to you or to a Business Customer with whom you have a business relationship, and even after you close your account or complete a transaction with a Business Customer, we may continue to retain your personal information to:
- to comply with our legal and regulatory obligations,
- To enable fraud monitoring, detection and loss prevention activities, and
- to comply with our tax, accounting and financial reporting obligations, including where such retention is required by our contractual arrangements with our financial partners (and where retention of data is required by the payment methods you use).

Where we retain your personal information, we will do so in accordance with any statute of limitations and record-keeping obligations imposed on us by applicable law. Learn more.

If you leave a post or comment on this website, your IP address will be saved. This is done based on our legitimate interests in accordance with Art. 6 (1) lit. f. GDPR and serves the security of us as website operators/ app operators : If your comment violates applicable law, we can be held liable, which is why we have an interest in the identity of the comment or post author.

Due to our legitimate interests in optimizing and analyzing our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR, this website uses the “Google Analytics” service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The service (Google Analytics) uses “cookies” - text files that are stored on your device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.

Google LLC complies with European data protection law and is certified under the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

IP anonymization is used on this website. The user's IP address is shortened within the member states of the EU and the European Economic Area and in the other contracting states of the agreement. Only in individual cases is the IP address initially transmitted in full to a Google server in the USA and shortened there. This shortening means that your IP address is no longer personally identifiable. The user's IP address transmitted by the browser is not combined with other data stored by Google.

As part of the data processing agreement that we as website operators/ app operators have concluded with Google Inc., Google uses the information collected to evaluate website usage and website activity and to provide services related to internet usage.

The data collected by Google on our behalf is used to evaluate the use of our online offering by individual users, for example to compile reports on website activity in order to improve our online offering.

You have the option of preventing cookies from being saved on your device by selecting the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not accept cookies.

Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to and used by Google Inc. The following link takes you to the corresponding plug-in: https://tools.google.com/dlpage/gaoptout?hl=de

Google Analytics from collecting data about you on this website by clicking on this link (IMPORTANT: insert opt -out link). By clicking on the link above, you will download an " opt -out cookie". Your browser must therefore generally allow cookies to be saved. If you delete your cookies regularly, you will need to click on the link again each time you visit this website.

Here you can find further information on data usage by Google Inc.:
• https://policies.google.com/privacy/partners?hl=de (data collected by Google partners)
• https://adssettings.google.de/authenticated (settings about advertising that is displayed to you)
• https://policies.google.com/technologies/ads?hl=de (use of cookies in ads)

The website operator/ app operator offers you a newsletter in which he informs you about current events and offers. If you would like to subscribe to the newsletter, you must provide a valid email address. If you subscribe to the newsletter, you agree to receive the newsletter and the procedures explained.

The newsletter is sent by icigai1 GmbH itself.

Revocation and cancellation: You can revoke your consent to receive the newsletter at any time and thus cancel your newsletter subscription. After your cancellation, your personal data will be deleted. Your consent to receive the newsletter expires at the same time. At the end of each newsletter you will find the link to cancel.

Depending on your location and applicable law, you have certain choices regarding our collection, use and disclosure of your personal information:
a. Unsubscribe from electronic communications with us.
If you no longer wish to receive marketing-related emails from us (see Newsletter), you can unsubscribe by clicking on the unsubscribe link included in those emails or as described here. We will try to process your request as quickly as possible. Please note that we reserve the right to communicate with you about the services you use (for example, support and important legal notices) even if you opt out of receiving marketing-related emails from us. However, business customers may still send you messages or instruct us to send you messages on their behalf.

b. Your data protection rights.
Depending on your location and local laws, you may have the following rights in relation to the personal information we hold about you:

- The right to know whether icigai1 GmbH processes personal data associated with you and, if so, to request access to that personal data;
- The right to request icigai1 GmbH to correct and update inaccurate, incomplete or out-of-date personal data;
- The right to request that icigai1 GmbH erase your personal data under certain legally specified circumstances ;
- The right to request icigai1 GmbH to restrict the use of your personal data in certain circumstances (for example while processing another request made by you, such as a request to rectify your personal data);
- The right to have us export your personal data that we hold about you to another company, where technically feasible for us to do so;
- The right to withdraw your consent where the processing of your personal data is based on your previous consent;
- The right to object to the processing of your personal data where we process your data based on our legitimate interests; unless there are compelling legitimate grounds or the processing is necessary for legal reasons, we will stop processing your personal data upon receipt of your objection;
- The right not to be discriminated against because of the exercise of these rights; and
- The right to object to any decision made by icigai1 GmbH concerning these rights by contacting icigai1 GmbH’s Data Protection Officer (“DPO”) at support(a)icigai1.com.

Depending on applicable law, you may have additional rights in relation to your personal data.

c. Procedure for exercising your data protection rights
Contact us to exercise your data protection rights.

Unless your request conflicts with a legal obligation to retain data (e.g. data retention), you have the right to have your personal data deleted. If deletion cannot be carried out because the data is required for permissible legal purposes, data processing will be restricted. In this case, the data will be blocked and not processed for other purposes.
The duration of storage of personal data is determined by the respective statutory retention period (e.g. retention periods under commercial and tax law). After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required to fulfill or initiate a contract and/or we have no legitimate interest in continuing to store it.
Deletion of data occurs:
• When deleting the player account in the app
• Via the link for deleting the player account on the website
Data deletion:
• e-mail address
• password (if specified)
• GPS data
• Name (assigned individually)
• Picture of the player

Users of this website can exercise their right to object and refuse the processing of their personal data at any time.
If you would like to have your personal data stored about you corrected, blocked, deleted or provided with information, or if you have any questions regarding the collection, processing or use of your personal data or would like to revoke consent you have given, please contact the following email address: Support@icigai1.com

To process your license order, we work with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data we collect will be passed on as part of the contract processing, insofar as this is necessary for the license processing. We will pass on your payment data to the commissioned credit institution as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR.

Service providers
- Stripe
The license is processed via the service provider " stripe " (Stripe Payments Europe, Limited (SPEL) 1 Grand Canal Street Lower Grand Canal Dock Dublin D02 H210 Ireland). Name, address and any other personal data will be passed on to plentymarkets or recorded there in accordance with Art. 6 Para. 1 lit. b GDPR solely for the purpose of processing the license. Your data will only be passed on to the extent that this is actually necessary for the processing of the license. Details on data protection at Stripe Payments Europe, Limited (SPEL) and the data protection declaration of Stripe Payments Europe, Limited (SPEL) can be found on the plentymarkets website at " https://stripe.com/de/privacy " can be viewed.
- Paypal
When paying via PayPal, your payment data will be transferred to PayPal (Europe) S.à rl . et Cie , SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, these are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. For further information on data protection, including on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

In cases where data transmission is necessary to protect the rights or freedom of uninvolved third parties, we provide access to publicly/court-appointed experts who can search for and trace individual actions. Except in such exceptional cases, all customer and personal data remains within icigai1 GmbH and is not transmitted to external third parties.
Updates and notifications

We may change this Policy from time to time to reflect new services, changes to our privacy practices, or relevant laws. The "Last Updated" legend at the top of this Policy will indicate when this Policy was last revised. Any changes will be effective when we post the revised Policy on the Services or otherwise provide notice of the update as required by law, whichever is later.

We may provide you with disclosures and alerts regarding the Policy or Personal Information collected by posting them on our website and, if you are an end user or agent, by contacting you via your Stripe dashboard, your email address and/or the physical address specified in your Stripe account.

As of: 23 July 2024