- General Information
This privacy policy applies to the use of our games on all platforms. Additional privacy information may be available for individual games. In such cases we provide that individual information in the respective games or their respective websites.
- Responsible Entity
Below we explain to you which personal data is collected and processed by us when using our games and services.
Blankhans GmbH
Zeppelinstraße 41
81669 Munich
eMail: contact@blankhans.io
Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person, this means all information that relates to a person.
- Legal Basis
As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation.
We collect and process personal data based on the following statutory regulations:
- Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
- Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
- Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
- Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.
- Rights of the Data Subjects
You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:
- Information Right pursuant to Article 15 GDPR, i.e. the right to be informed about how your personal data is processed and which personal data is processed by us,
- Right of rectification pursuant to Article 16 GDPR – i.e. the right to request the rectification of inaccurate personal data relating to you without undue delay, including the completion of incomplete data,
- Right to erasure (“right to be forgotten”) pursuant to Article 17 GDPR – i.e. the right to request the erasure of your personal data, provided that certain conditions are met,
- Right to restriction of processing pursuant to Article 18 GDPR – i.e. the right to request the restriction of the processing of your personal data, provided that certain conditions are met,
- Right to data portability pursuant to Article 20 GDPR – i.e. the right to demand that you receive your personal data that you have provided in a structured, common and machine-readable format and the right to transfer it to a third party, provided that certain conditions are met,
- Right to object in accordance with Article 21 GDPR – i.e. the right to object to the processing of your personal data where the processing is based on our legitimate interests, provided that certain conditions are met.
- Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.
- Data Erasure and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
- Actual data processing
All data transfer is encrypted.
- Data collected when using our Game
- Scope of data collection
When using our game you will need to register for an account and we will collect general data. We offer registration via Steam authorisation or directly with us. The general data collected when playing the game are:
- actions taken in the game
- play time and length and numbers of playing sessions
- game settings
- user names / player character names
- digital content purchased
- country of residence
- hardware information
- operating system
- IP adress
- Save games
The IP address is only collected for the transfer of data and the analysis of the location and then anonymized.
For for the account registration:
- E-mail address
- Password (only if directly registered without 3rd party authorisation service)
- Date and IP address used when confirming email address via double opt in
and if registered using the Steam authorisation service:
- Steam User name
- Steam OAuth Token (Steam Secret)
- Steam Friends
We store the data as part of your game database linked to your account data with Accelbyte Inc. as hosting service provider based in the United states of America. Subject to your consent, such data is processed by our analytics software hosted and operated by Game Analytics ApS based in the Denmark.
- Legal Basis
Legal basis is Art. 6 para. 1 (a) GDPR for the analytics services used. Legal basis for storing the information in our game database as well as using analytics data for matchmaking purposes is Art. 6 para 1 (b) GDPR as such data is necessary to offer a consistent game world to the players and offer the multiplayer matchmaking mechanism.
The legal basis for the transfer of data to our service providers is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR GDPR in conjunction with the use of the standard clauses of the EU Commission. As far as the service provider is based within the EU the legal basis is Art. 28. Para. 3 GDPR.
- Purpose of data processing
The purpose is to use such aggregated data to analyze what parts of our game our players prefer, if parts of our games are not accessible or should be improved. Furthermore the action taken in the game are required to provide a consistent game experience as well as provide a matchmaking mechanism for players based on their respective skills. Processing the developer is required for additional development and maintenance. Address data and data regarding email verification is used for administration, legal compliance and billing purposes.
- Duration of storage
The IP address is anonymized upon after using the IP address to analyze the user’s country of origin. The game play data is stored permanently as long as you do not delete your game account.
- Objection and removal possibility
You may at any time deactivate the analytics functions in the option menu of our games. Analytics Data will then only be used for the matchmaking mechanism.
- Data collected using crash reports
- Scope of data collection
We are using a tool called Accelbyte for the collection of error reports in case the game should unintentionally quit to function. In such case a window will be displayed asking you if you want to issue a crash report. If you agree to such sending such report a screenshot of the game and technical data about your computer, including unique device identifiers of your hardware, your installed operation system, driver information and version numbers, language and other settings, screen resolution, mouse positioning as well as any information you wish to provide manually. The Tool is operated and hosted by Accelbyte Inc. (United States of America).
- Legal Basis
Legal basis for processing the data is Art. 6 para. 1 lit a) GDPR based on your express consent. The legal basis for the processing by Unity Software Inc. is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR GDPR in conjunction with the use of the standard clauses of the EU Commission.
- Purpose of data processing
The purpose is the maintenance of the game and the correction of software errors as well as assisting you in case of specific problems of your computer system with the game.
- Duration of storage
The data is stored as long as it is relevant for the purpose and is thereafter either anonymized or deleted. Usually this is the case after 3 months.
- Objection and removal possibility
You can at any time request the deletion of any personal identifiable data that is part of the crash report by sending an email to : privacy@blankhans.io.
- Purchase of Digital Content from Xsolla
- Scope of data collection
When purchasing digital content for our game from Valve Inc. (USA), Inc. the following data regarding your ownership is received from Xsolla:
User-ID and an ID representing the digital content purchased, Currency, amount paid.
Please find Xsolla’s privacy policy here: https://xsolla.com/privacypolicy
Such data is imported to our game database.
- Legal Basis
The legal basis for the transfer is Art. 6 para. 1 (b) GDPR since in order to provide you with the digital content purchased from Xsolla we are obliged to store and extract the ownership data from Xsolla. Xsolla is a separate data controller.
- Purpose of data processing
The purpose is to securely store your ownership status as the owner of the purchased digital content.
- Duration of storage
The data stored on our game database is stored in accordance with the storage duration detailed above.
- Objection and removal possibility
There is no objection or removal right.
- Contacting us via E-Mail & Newsletter
- Scope of data processing
If you contact us via email or provide us on other channels with your e-mail address for support for any of our games or other questions, we may subsequently use your e-mail address to send you e-mails regarding the reason for you contacting us. Such e-mail addresses as well as the content of your messages, is stored for with our e-mail service provider, Google Ireland Ltd., who may also process data outside of the European Union, especially in the United States of America.
It is also possible to subscribe to a free newsletter for our games, which provides information about our existing and upcoming games. When subscribing to the newsletter, the data from the input mask is transmitted to us. In this case, the date and time of registration for the newsletter as well as the IP address used will also be stored. In the context of the confirmation of the newsletter registration, the date and time at which you click on the confirmation link for the newsletter registration as well as the IP address used are also stored. In case you are already logged into a validated account, no additional double-opt-in process will be required.
In order to send the newsletter, your e-mail address will be passed on to an external service provider, who will send the newsletter on our behalf. We may use either The Rocket Science Group LLC. or Klaviyo, Inc. for sending such emails. No further use is made by the service providers. The service providers are based within the United States of America.
- Legal basis
The legal basis for the processing of data when registering directly for the newsletter is Art. 6 para. 1 lit a GDPR.
The legal basis for the transfer of data to our newsletter service provider as well as our e-mail service provider, is Art. 28 Para. 3 , 6 GDPR in conjunction with the use of the standard clauses of the EU Commission.
The legal basis for contacting you via e-mail and storing such communication if you provided us your e-mail address is Art. 6 para 1 lit. a, b, c or f GDPR, which depends on the content and the relation, as your consent is provided when contacting us, the communication may relate to an ongoing contract or may be considered a trade document in accordance with trade and tax law which we are obliged to store, but also it may be in our legitimate interest in case we wish to document our legal compliance.
- Purpose of the data processing
The purpose of storing the e-mail address is to enable electronic contact for information purposes. The date and IP address of the registration as well as the confirmation of the registration for the newsletter are recorded in order to document the consent to the newsletter dispatch in an evidence-proof manner and to exclude misuse. The information is passed on to the service provider for the purpose of sending the newsletter in bulk. In case the communication is considered a trade document the purpose is also to comply with mandatory storage obligations.
- Duration of storage
Insofar as you have expressly consented to receive the newsletter, we will only delete or block the e-mail address for dispatch if you revoke your consent. The data of the confirmation of the newsletter order will be stored for the same length of time. We will delete email communication after 2 years, unless such communication has to be stored for longer under applicable tax and trade laws.
- Possibility of objection and removal
You can object to the use with effect for the future of each newsletter by clicking on a link provided there. You can also object to future use by sending an e-mail to privacy@blankhans.io. In the case of an objection by e-mail, the implementation of the deletion or blocking may take up to 2 working days; during this period, mailings may still be made.
If you request us to delete email communication with you we will comply accordingly, unless we are legally obliged to store such data or it is required for legal defense.
- Website Logfiles
- Scope of Data Collection
When visiting our website, the following data is collected and stored by our web server:
- Information about the browser type and version used
- The operating system of the user
- The IP address of the user
- Date and time of access
The data is stored in the log files of our hosting provider. This data is not stored or processed together with other personal data of the user. Our hosting provider is Amazon Web Services Inc. based in the United States of America. .
- Legal basis
The legal basis for processing the data is Art. 6 para. 1 (f) GDPR.
The legal basis for the transfer of data to Amazon Web Services is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR. The standard contractual clauses of the EU Commission are used in contractual relation with the provider.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.
- Purpose of data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session.
The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
- Duration of storage
The logfiles will be deleted after sixty days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events.
- Objection and removal possibility
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user.
- Website Analytics
- Scope of data processing
Our websites uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (“Google”). This software collects information about how you use the website and compiles various statistics if you provide your consent. The increased usage data include in particular the concrete selection of links, the length of stay on individual pages and the order of use of the website, the frequency of the page request. This data is collected together with your IP address.
In particular, the following information is collected:
– Information about the type of browser and the version used
– The operating system of the user
– The user’s Internet service provider
– The IP address of the user
– Date and time of access
– Websites from which the user’s system accesses our website
– Websites that are accessed by the user’s system via our website
Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.
We have activated a so-called IP anonymization on the website, this means that the IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to retransmission to the USA.
Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google itself describes here https://www.google.com/policies/privacy/ its data processing activity.
The data processing is essentially carried out by Google itself. Despite IP anonymization, the data is not anonymous and can be merged with other data by Google. Google can use the data for any of its own purposes, such as profiling, as well as link it with other data such as any Google accounts and also pass it on to associated US companies, e.g. Google LLC. Legal basis.
The legal basis for the processing of data when using the website is Article 6 para. 1 (a) GDPR in the form of your express consent.
- Legal basis
The legal basis for the transfer of data to Google is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR and Art. 6 para. 1 (a) GDPR. For any subprocessing done by Google outside of the EU Google employs the standard contractual clauses of the EU commission.
- Purpose of data processing
The purpose of the processing is to analyze this website and the usage behavior of its visitors.
- Duration of storage
We ourselves no longer have access to personal data after anonymization by Google. With regard to a use by Google, the duration of the storage is not known.
- Objection and removal possibility
You can prevent the storage of cookies, including the generation and transmission of data to Google, by restricting or prohibiting the use of cookies in your browser software. This may result in the deactivation of non-Google-related cookies as well as the inability to use all functions of this website to the full extent.
You can prevent the collection of the data generated by the cookie regarding your use (including your IP address) and their transmission to Google as well as the processing of this data by Google by downloading the browser plugin available under the following link and to install [Http://tools.google.com/dlpage/gaoptout?hl=de].
In addition, you can also revoke your consent to data collection at any time in our Cookie Bar. For this purpose, a cookie is then stored so that we can recognize that you have not consented to the use of Google Analytics.
Updated: 01.02.2024