Privacy at a Glance
General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to personally identify you. For detailed information on data protection, please refer to our Privacy Policy listed below this text.

Data Collection on This Website
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.

Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

Who is responsible for data collection on this website?

Data collection on this website is carried out by the PROVIDER OF THE PREDICTION GAME (see the section “Information about the provider of the prediction game”). Further data processing is carried out by the ORGANIZER OF THE PREDICTION GAME. You can find their contact information in the legal notice of this website (or in the section “Information about the responsible party”).

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may include, for example, data you enter during registration. If you participate in the online prediction game, the data you entered during registration for participation will be processed without your further consent, but of course exclusively for the purpose of conducting and administering this prediction game.

Other data is collected automatically or with your consent when you visit the website via our IT systems. This primarily consists of technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the website functions properly. Other data may be used to analyze your user behavior.

The legal basis for the transfer of this data is then Article 6(1)(b) of the GDPR.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge regarding the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with future effect. Furthermore, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

For this and any other questions regarding data protection, you may contact the organizer of the prediction game (see the legal notice on this website) at any time.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done using so-called analytics programs.

Detailed information on these analytics programs can be found in the following privacy policy.

General Information on Data Processing
Scope of Personal Data Processing

This website generally collects and uses its users’ personal data only to the extent necessary to provide a functional website and its content and services. The collection and use of users’ personal data generally takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.

Legal basis for the processing of personal data

To the extent that we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

To the extent that the processing of personal data is necessary to comply with a legal obligation to which this website is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of the operators of this website or of a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the aforementioned interest, then Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

Registration on this website

You can register on this website to use additional features (prediction game). The data entered for this purpose will be used solely for the purpose of utilizing the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, registration will be rejected.

For important changes, such as to the scope of the service or technically necessary changes, the email address provided during registration will be used to inform you.

The data entered during registration is processed for the purpose of fulfilling the user relationship established by the registration and, if applicable, to initiate further contracts (Art. 6(1)(b) GDPR).

The data collected during registration will be stored for as long as you are registered on this website and will subsequently be deleted. Unless already done manually, the data will be irrevocably deleted automatically on the last day of the month following the end of the prediction tournament. Statutory retention periods remain unaffected.

Information about us, as the provider of the online prediction game
Provider of this online prediction game (this website):

newclicks UG (limited liability) & Co. KG

Außenwall 6 · D-47495 Rheinberg

Tel +49 (0) 28 43 - 1 76 10 00

The provider’s data protection officer is:

Richard Zelzer

Tel +49 (0) 28 43 - 1 76 10 00

info@newclicks.de

Hosting
External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website visits, and other data generated via a website.

The use of the host is for the purpose of fulfilling our contractual obligations to our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR).

Our hosting provider will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

We use the following hosting provider:

gridscale GmbH

Oskar-Jäger-Str. 173

50825 Cologne

Email: compliance@gridscale.io

Website: gridscale.io

Conclusion of a Data Processing Agreement

To ensure data processing complies with data protection regulations, we have entered into a data processing agreement with our hosting provider.

Note on the Data Controller
The provider of the prediction game is responsible for data collection and storage on this website:

newclicks UG (limited liability) & Co. KG

Außenwall 6

D-47495 Rheinberg

Tel +49 (0) 28 43 - 1 76 10 00

info@newclicks.de

 

The organizer of the prediction game is responsible for further data processing on this website:
See the legal notice on this website for contact details

Provision of the website and creation of log files
Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected in this process:

Information about the browser type and version used
The user’s operating system
The user’s Internet service provider
The user’s IP address
Date and time of access
Websites from which the user’s system accesses our website
Websites accessed by the user’s system via our website
Name and URL of the accessed file
The data is also stored in our system’s log files. This data is not stored together with other personal data of the user.

Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR.

Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the website functions properly. Additionally, the data helps us optimize the website and ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.

Duration of Storage

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session has ended.

In the case of data stored in log files, this occurs after no later than 7 days. Storage beyond this period is possible. In this case, the users’ IP addresses are deleted or anonymized so that the calling client can no longer be identified.

Right to Object and Right to Erasure

The collection of data for the purpose of providing the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, the user has no right to object.

Cookies
This website uses cookies. Cookies are text files that are stored in the web browser or by the web browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that enables the browser to be uniquely identified when the website is visited again.

We use cookies to make this website more user-friendly. Some elements of our website require that the visiting browser can be identified even after a page change.

The following data is stored and transmitted in these so-called technically necessary cookies:

- cookie_*

Data regarding the selection made in the Cookie Consent Tool

- lang

User’s language selection so that the correct language is displayed (Integer)

- PHPSESSID

PHP session ID, so that data can be transferred from one page to another (26 characters; automatically deleted or reassigned after a session or logout).

There are some cookies that appear when you visit our website, so-called third-party cookies, which originate from other websites and which we therefore have no way of blocking or preventing communication with their sources. Depending on whether and which websites you use, these cookies may or may not be stored on your device. We would nevertheless like to inform you about these cookies.

With your consent, we also incorporate third-party cookies. In this case, the corresponding data packets are stored in your browser by third parties or transmitted to them. You can generally prevent the use of third-party cookies by adjusting your browser settings accordingly. The legal basis for the processing of your personal data using third-party cookies is Art. 6(1)(a) GDPR. In this case as well, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.

To the extent that cookies from third-party companies or for analytical purposes are used, the organizer of the prediction game will inform you separately about this within the scope of this privacy policy and, if necessary, request your consent.

Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6(1)(f) GDPR.

Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The purposes of the individual technically necessary cookies that may appear on our website are listed in the tables above.

The user data collected by technically necessary cookies is not used to create user profiles.

These purposes also constitute our legitimate interest in the processing of personal data pursuant to Article 6(1)(f) of the GDPR.

Duration of storage, right to object, and option to delete

Cookies are stored on the user’s computer and transmitted from there to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent.

Contact Requests / Contact Options
If you contact the organizer of the prediction game via email, the data you provide will be used to process your request. Providing this data is necessary to process and respond to your request—without it, your request cannot be answered or may only be answered in a limited manner.

In this context, the data will not be disclosed to third parties. The data is used exclusively for the purpose of handling the correspondence.

The legal basis for processing the data transmitted when sending an email is Art. 6(1)(f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

Your data will be deleted once your inquiry has been conclusively answered and provided that no legal retention obligations prevent its deletion, such as in the case of any subsequent contract processing.

Right to Object and Right to Erasure

The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

To exercise the right to withdraw consent or object to storage, simply call the organizer of the prediction game or send them an email. (You can find information on this in the section “Information on the Responsible Party”).

All personal data stored in the course of establishing contact will be deleted in this case.

Integration of Services via Third-Party Providers
Google Web Fonts (local hosting)
This site uses so-called web fonts provided by Google to ensure consistent font display. The Google Fonts are installed locally. No connection to Google’s servers is established in the process.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

AddToAny
We use the bookmark and share buttons from the AddToAny service (https://www.addtoany.com) on this website. This service allows you to conveniently share content from this website on social media platforms or networks without your data being directly transmitted to other social networks first.

Clicking the AddToAny button opens a selection window with various providers that allow you to share the page you are visiting. Selecting one of these providers enables you to interact with that provider. At the same time, you thereby consent to the transfer of data to the respective provider and acknowledge that information from your browser may now be transmitted directly to the provider and stored there. Data is only collected if you use the AddToAny button to access social services yourself and, if applicable, are simultaneously logged into your personal user account on the respective networks using your login credentials. When you first set up your user account with the respective service, you have already given your consent to the respective privacy policies.

If you are logged into a social service and subsequently access a social network via the AddToAny button, you do so at your own risk regarding your data and in accordance with the privacy policies of the respective social services/networks of which you are a member, which you have accepted. Please review AddToAny’s privacy policy at https://www.addtoany.com/privacy. By using the AddToAny button, you consent to the processing of data by AddToAny and the transfer of data to AddToAny. Our website itself does not collect any data when using the AddToAny service and does not receive any data from AddToAny resulting from the use of the share button.

Rights of the Data Subject
The following list includes all rights of data subjects under the GDPR. Rights that are not relevant to our own website do not need to be listed. In this respect, the list may be shortened. If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Right of access
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.

If such processing is taking place, you may request the following information from the controller:

the purposes for which the personal data is processed;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
the planned duration of storage of the personal data concerning you or, if specific details are not possible, criteria for determining the storage period;
the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
the existence of a right to lodge a complaint with a supervisory authority;
all available information regarding the origin of the data, if the personal data is not collected from the data subject;
the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) of the GDPR and—at least in such cases—meaningful information regarding the logic involved, as well as the scope and intended consequences of such processing for the data subject.
You have the right to request information regarding whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

Right to Rectification
You have the right to request rectification and/or completion from the controller if the personal data concerning you that is being processed is inaccurate or incomplete. The controller must carry out the rectification without undue delay.

Right to Restriction of Processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:

if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of the use of the personal data;
the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise, or defense of legal claims; or if you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.
the controller no longer needs the personal data for the purposes of the processing, but you need it to assert, exercise, or defend legal claims, or if you have objected to the processing pursuant to Article 21(1) of the GDPR and it has not yet been determined whether the controller’s legitimate grounds override your grounds.
If processing has been restricted in accordance with the above conditions, you will be notified by the controller before the restriction is lifted.

Right to Erasure / Obligation to Erase
You may request that the controller erase the personal data concerning you without delay, and the controller is obligated to erase such data without delay if any of the following grounds apply:

The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
The personal data concerning you has been processed unlawfully.
The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
The personal data concerning you was collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
Information to Third Parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, the controller shall, taking into account available technology and the cost of implementation, take reasonable measures, including technical measures, to inform controllers who process the personal data that you, as the data subject, have requested the erasure of all links to such personal data or of copies or replicas of such personal data.

Exceptions
The right to erasure does not apply where the processing is necessary

for the exercise of the right to freedom of expression and information;
to comply with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR;
for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of such processing, or
for the establishment, exercise, or defense of legal claims.
Right to Information
If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed by the controller about these recipients.

Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) of the GDPR or on a contract pursuant to Art. 6(1)(b) of the GDPR, and
the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, to the extent that this is technically feasible. The freedoms and rights of other individuals must not be adversely affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the option, in connection with the use of information society services—notwithstanding Directive 2002/58/EC—to exercise your right to object by means of automated procedures using technical specifications.

Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.

Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for the conclusion or performance of a contract between you and the controller,
is permitted under Union or Member State law to which the controller is subject, and such law provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
is based on your explicit consent.
However, these decisions may not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

With regard to the cases mentioned in (item 1) and (item 3), the controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which shall include at least the right to obtain human intervention on the part of the controller, to present your point of view, and to contest the decision.

Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.