Privacy Policy of Icebird Studios GmbH

I. General Information

1. Responsible Body

Below we explain to you which personal data is collected and processed by us when using our services and offers.

We are:
Icebird Studios GmbH
Seidlstrasse 21
80335 München
Germany

Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person, this means all information that relates to a person.


2. Legal Basis

As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation. This comes into effect from May 25, 2018. Prior to this, the corresponding provisions of the Federal Data Protection Act apply without us naming them.

We collect and process personal data based on the following statutory regulations:

• Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
• Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
• Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
• Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.


3. Rights of affected

You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:

• Right of access by the data subject to Art. 15 GDPR
• Right to rectification according to Art. 16 GDPR
• Right to erasure ("right to be forgotten") in accordance with Art. 17 GDPR
• Right to restriction of processing according to Art. 18 GDPR
• Right to data portability according to Art. 20 GDPR
• Right to object according to Art. 21 GDPR

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.


4. Data Erasure and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.


II. Concrete Data Processing

1. Data collection when visiting the website

a. Scope of data processing

When visiting our website, the following data is collected and stored by our web server:

• Information about the browser type and version used
• The operating system of the user
• The Internet service provider of the user
• The IP address of the user
• Date and time of access
• Websites from which the user‘s system accesses our website
• Websites accessed by the user‘s system through our website

The data is stored in the log files of our system. A storage of this data together with other personal data of the user does not take place. The is stored with our hosting provider alfahosting who processes the data exclusively inside the EU.


b. Legal basis

The legal basis for processing the data is Art. 6 para. 1 (f) GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.

Legal basis for the transfer of data to the hosting provider is Art. 28 GDPR.


c. Purpose of data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user‘s IP address must be kept for the duration of the session.

The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.


d. Duration of storage

The log files will be deleted after 30 days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events.

Storage beyond that is possible. In this case, the IP addresses of the users are deleted or anonymised, so that an assignment to a specific user is no longer possible.


e. Objection and removal possibility

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user.


Munich, 25.05.2018