I. Information on the processing of your data pursuant to Art. 13 of the General Data Protection Regulation (GDPR)

1. Controller and Data Protection Officer

The party responsible for this website is

Florian Mulks, Maastrichter Str. 20, 52074 Aachen, Germany. hello@molecularsadismgames.com

You can reach the Data Protection Officer by email at

privacy@molecularsadismgames.com

2. Data processed for providing the website and creating log files

a. Which data are processed and for what purpose?

Each time content on the website is accessed, data that may permit identification are temporarily stored. The following data are collected in this process:

• Date and time of access
• IP address
• Hostname of the accessing computer
• Website from which the website was accessed
• Websites accessed via the website
• Page visited on our website
• Notification of whether the request was successful
• Volume of data transferred
• Information about the browser type and version used
• Operating system

The temporary storage of the data is necessary for the course of a website visit in order to enable the website to be delivered. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. These purposes also constitute our legitimate interest in the data processing.

b. On what legal basis are these data processed?

The data are processed on the basis of Art. 6(1)(f) GDPR.

The website is hosted by Cloudflare Germany GmbH, Rosenheimer Straße 143C, 8th Floor, 81671 Munich, Germany, support@cloudflare.com. The host receives the data listed above as a processor.

c. How long are the data stored?

The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of providing the website, this is when the respective session has ended. The log files are retained for a maximum of 24 hours, directly and exclusively accessible to administrators. After that, they are only available indirectly through the reconstruction of backup tapes and are permanently deleted after a maximum of four weeks.

3. Rights of the data subject

a. Right of access

You may request information pursuant to Art. 15 GDPR about your personal data that we process.

b. Right to object

You have a right to object on specific grounds (see Section II).

c. Right to rectification

Should the information concerning you not (or no longer) be accurate, you may request rectification pursuant to Art. 16 GDPR. Should your data be incomplete, you may request completion.

d. Right to erasure

You may request the erasure of your personal data pursuant to Art. 17 GDPR.

e. Right to restriction of processing

You have the right pursuant to Art. 18 GDPR to request a restriction of the processing of your personal data.

f. Right to lodge a complaint

If you believe that the processing of your personal data violates data protection law, you have the right pursuant to Art. 77(1) GDPR to lodge a complaint with a data protection supervisory authority of your choice. This includes the data protection supervisory authority responsible for the controller: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, https://www.ldi.nrw.de/kontakt/ihre-beschwerde.

g. Right to data portability

In the event that the conditions of Art. 20(1) GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to third parties. The collection of data for providing the website and the storage of the log files are mandatory for the operation of the website. They are therefore not based on consent pursuant to Art. 6(1)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, but are justified under Art. 6(1)(f) GDPR. The conditions of Art. 20(1) GDPR are therefore not met in this respect.

II. Right to object pursuant to Art. 21(1) GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data which is carried out on the basis of Art. 6(1)(f) GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims. The collection of data for providing the website and the storage of the log files are mandatory for the operation of the website.