General Information:

This is the Privacy Policy for Resurrection Gaming Company LTD. (“Resurrection Games”, “we”, “us”, “our”, etc.) and covers both our website, and our other, related products or services we provide (all, collectively, “Services”). It describes the personal information that we collect as part of the normal operation of our Services, and how we use and disclose this information. (For purposes of this privacy policy, “personal information” means any information relating to an identified or reasonably identifiable person.) This Policy does not apply to those persons whose personal information we process in the employment context, but we provide those individuals with a separate privacy notice specific to that processing.

If you are a California resident, please also see our additional California Privacy Notice below.

What Information We Collect

We collect a variety of personal information to provide our Services and operate our business, including personal information. This personal information includes the following:

Personal Information we receive directly from you: This includes both information you provide to our Services or our Site. For example, we collect the following information:

• One or more email addresses by which we can communicate with you via email;
• Your responses to surveys and other prompts provided on our website;
• Your name and email in the process of account creation; you may also choose to provide your job role, biographical information, and profile picture although this information isn’t required to open an account;
• Your billing address, phone number, credit card information, and other information to create or maintain an account if necessary to pay for our Services; and
• Other information you choose to provide.

Personal Information we automatically collect from you: When you visit our Site or use our Services, we automatically collect aggregate information on what pages you visit, how your mouse moves, how you use our Site and/or Services, whether you read emails we send you, and your general geographic location, as indicated by your IP address and other technical connection information.

Personal Information we collect from our customers: We collect various information from our customers, which include email addresses of the users they wish to subscribe to updates about our services or to make and manage an account on our website. This information may be matched with additional information we collect about you as a way to improve and personalize your experience.

Information we collect from third-party sources: Advertisers, application providers, and other third parties provide us information in connection with tools we offer and through tools they use to collect information about you when you use our Services. The information they collect may be associated with your personal information and they may collect information about your online activities over time. They may use this collected information to provide you with interest-based advertising or other targeted content.

Please note that other parties may collect personal information about your online activities over time and across third-party websites when you use our website or services. We do not respond to “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer’s online activities over time and across third-party websites or online services.

How We Use Your Information

We may use the personal information we collect for a variety of purposes, including the following:

• To operate our business;
• To provide, maintain, analyze, customize, measure, secure, administer and improve our Services;
• To provide customer support and customer account administration;
• To process payments;
• To verify your identity and facilitate your sign-in to our Services;
• To communicate with you and to inform you about products and/or services that may interest you;
• To conduct contests, sweepstakes, rewards, and other promotions;
• To monitor and enforce our Terms of Use or similar terms;
• To comply with law and satisfy our regulatory compliance obligations;
• To respond to your requests, correspondence and complaints;
• To detect and prevent fraud and other prohibited, illicit or illegal activity, or to protect the rights and interests of yourself, ourselves, or third parties; and
• For other purposes permitted by law or to which you consent.

Please note that we may combine information we gather about you from different sources in order to accomplish any of the above tasks.

How We Disclose Your Information

Resurrection Games may share the personal information we collect to support our Services or as permitted or required by applicable law, or as directly authorized by you. For example, we may disclose your personal information to:

• Third party vendors, service providers, and hosting partners who assist us in running our Site, providing Our Services, or otherwise run our business.
• Our professional advisors who provide legal, compliance, accounting, banking, or consulting services.
• Professional service firms and other service providers who assist us in complying with our legal obligations and protecting our or your interests, property, or legal rights as well as those of our customers and third parties.
• Law enforcement, officials, or other third parties when we are compelled to do so by a subpoena, court order, or similar law enforcement request, or when we believe in good faith that the disclosure of personal information is necessary to prevent physical harm or financial loss, to report suspected illegal activity, or to investigate violations of this Privacy Notice or other applicable terms.
• Our parent companies, subsidiaries, joint ventures, or other companies under common control with us.
• Companies or other entities in connection with, or during the negotiation of, any merger, sale of company stock or assets, financing, acquisition, divestiture or dissolution of all or a portion of our business.
• Other parties for other legal purposes, such as to enforce our terms and conditions, or to exercise or defend legal claims.

Privacy Policy Details (GDPR)

1. Contact and controller

Resurrection Gaming Company is responsible for the websites Saturday Wars CCG Website. You can find all details on the controllers responsible under data protection law on the relevant website and/or in the following information.

1.1 General Data Protection Officer
If you would like to contact us about data protection, please contact our General Data Protection Officer to ensure your question is answered as efficiently as possible.
Resurrection Games via email.
E-mail: privacy@resurrectiongames.company

2. Your rights

You have the following rights which you can exercise in relation to us:
The right to information, rectification, erasure, restriction of processing, data portability, and objection.
Please contact us if you want to exercise one of your rights. You can find our contact data in the chapter Contact. We can deal with your inquiry most efficiently if you e-mail it to our General Data Protection Officer. We expressly point out here that, in accordance with legal requirements, we must ask you to provide identification and we may possibly also take further measures to clearly establish your identity.

2.1 Right to information
If you want information about the personal data we process, please send your request in writing. For reasons of security and according to regulations, we may make certain data partly unreadable when we send you information, e.g. credit card details.

2.2 Right to rectification
If you find or believe that we have processed incorrect information about you, please inform us of this in writing. We will investigate and, if necessary, rectify the data.

2.3 Right to erasure
If you want us to erase your data, please inform us in writing. We will check your request in terms of the legal requirements and erase your data accordingly.
Please note that in some cases we are legally obliged to store data for a certain period and cannot erase it before the end of this period. For example, we are obliged to store tax-related data and data relevant for possible warranty claims.
Please also note that, while we immediately block access to your data, for technical reasons it can take a few days before we have fully erased your data.
Please also note that it is no longer possible to recover your data after we have confirmed your request for erasure.

2.4 Right to restriction of processing
You have the right to restrict our processing of your data. To do this, please inform us in writing which data categories you want the restriction to apply to and the reasons for your request. We will immediately examine the circumstances and inform you of the result.

2.5 Right to data portability
Please inform us in writing which data you want to be transferred to which recipient. We will immediately examine your request and inform you of the result.

2.6 Right to object and right to revocation

2.6.1 Revocation of consent
If you have given your consent to the processing of your data, you can revoke this consent with effect for the future at any time. This does not affect the processing of your data up to the time of your revocation of consent, which remains permitted.
You can find out how to revoke your consent on the relevant website. Alternatively, you can contact our General Data Protection Officer using the contact data in the chapter Contact. If you want to revoke your consent to cookies, you can do this below under No. 8.4 For information on your consent to receiving our newsletter, see the chapter Newsletter, No. 7.2.4.

2.6.2 Objection to data processing based on a balancing of interests
If we base the processing of your personal data on the balancing of interests, you can object to this processing.
If you express such an objection, we request that you give us the reasons why you do not wish us to process your personal data as we normally do. After you have submitted your objection, we examine the circumstances and either cease or modify the data processing, or explain to you our compelling legitimate grounds for continuing to process the data.

2.6.3 Objection to direct advertising based on a balance of interests
Of course you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. Ideally, please inform us about your objection to processing for advertising purposes using the contact data given in the chapter Contact.

2.7 Right to object
If you believe that our actions do not comply with the applicable data protection regulations, you can lodge a complaint with the supervisory authority responsible for data protection in your federal state.

3. Possible consequences of non-submitted data

We may collect your personal data on the basis of legal requirements or to fulfill a contract. If you do not provide this data to the extent required, the consequence may be that we cannot fully meet our obligations and/or we are unable to provide you with the service.

4. Possible external recipients of data

4.1 Data processing by external processors
In some cases, we use external service providers to process your data. We select these service providers carefully and commit them to observe our instructions. We regularly check their compliance.

4.2 Transfer to third parties
Furthermore, we can pass your personal data on to third parties if we offer participation in campaigns, prize draws, conclusions of contracts, or similar services together with these partners. You will receive further information about this when you enter your personal data or, if the offer is described in more detail in this data protection declaration, below.

5. Processing the data of minors

Stricter legal requirements apply to the processing of the data of children or minors. We carefully examine and comply with these requirements.
All our offers are intended for adults of full legal age.
If we discover that we have unintentionally collected the data of children, we immediately erase this data, unless there are legal reasons not to do so. In all cases we block access to the data so that it can not be used for marketing purposes. Please inform us if you find that your child has used one of our online offers without your agreement.
If you provide us with your child/children’s data, we exclusively process the data for the purpose of the relevant offer and in accordance with your consent and/or the legal requirements.
If, in an individual case, one of our offers is addressed to children under the age of 16, we restrict data processing to the data reasonably required for use of the offer. We only store this data as long as necessary for the use of the offer. Furthermore, we display these offers with a note on data protection specially formulated for easy understanding by the target group.
In compliance with legal requirements, we only accept data transfers or consents to data processing from people under the age of 16 with the agreement of their legal custodian.
If, as an exception, we allow minors under the age of 16 to directly take part in prize draws, we only request the data that is absolutely necessary for the prize draw.
When processing the data of children and minors, we apply appropriate technical and organizational measures. We do not use this data for marketing purposes.
Children are not always able to understand the dangers of digital communication and providing data to third parties. Please explain this to your children and make them aware of the dangers. Keep an eye on your children’s online activities and take an active part in them!

6. Data processing when you visit our website

6.1 Controller responsible under data protection law
The controller responsible under data protection law for the provision of the website is the company named in the legal notice as the provider of the website. You can find the contact data in the legal notice as well as above under No. 1.2

6.2 Data processing when you visit our website
If you visit our website simply to find out information, i.e. if you do not register or otherwise provide us with information, we only process the personal data your browser sends to our server. The data described below is technically necessary so that we can display our website to you and ensure its stability and security. This is why we must process this data. The legal basis is Art. 6 Section 1 p. 1 lit. b, f of the GDPR.

• Your IP address
• The browser you use as well as the browser version and language settings
• The operating system you use
• The date and time of access, including the difference to Greenwich Mean Time (GMT),
• The website pages you visit
• The actions you take while using our website
• Access status/http status code
• The website or link source data via which you access the website

6.3 Tools
We use various tools which can differ depending on the website. If the use of tools requires you consent, you can grant or revoke your consent as described under No. 8.4.

6.3.1 Web tracking with Google Analytics
a) Our websites use Google Analytics, a web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (Google). We use this tool to analyze your user interactions on websites and in apps. We use the statistics and reports gained here to improve our service and tailor it to your interests as the user

b) We primarily track the interaction between you the user and our website using cookies, data about your device/browser, IP addresses, and website or app activities. Google Analytics also stores your internet protocol addresses to ensure the security of our service and to give us, as the website operator, information about the country, region, or location of each user (IP location tracking). For your protection, we naturally use the IP masking function, which means that within the EU and EEA, Google truncates IP addresses by removing the last octet.

c) Google acts as a data processor for us and we have a contract with Google for this purpose. Usually, the information on your use of this website generated by the cookie and the (usually truncated) IP addresses are saved to a Google server in the USA and processed there. According to Google’s own information, for these cases it applies a standard comparable to the previous EU-US Privacy Shield. Google also assures that it observes the data protection laws applicable to international data transfer. Additionally, we have agreed standard contract clauses with Google. Their purpose is to ensure adherence to an appropriate data protection level in a third country.

d) The legal basis for the collection and processing of the information (for a maximum period of 14 months) is your consent (Art. 6 Section 1 p. 1 lit. a of the GDPR). You can revoke your consent at any time without any effect on the permissibility of processing prior to your revocation. In apps, you can reset the ad ID under the Android or iOS settings. The easiest way to revoke consent is by changing your cookie settings (see No. 8.4) or installing the browser add-on from Google, which is available at: tools.google.com/dlpage/gaoptout?hl=en.

e) You can find more information about the services provided by Google Analytics at https://marketingplatform.google.com/about/analytics/terms/us/ provides information about data processing in the context of the use of Google Analytics here: https://support.google.com/analytics/answer/6004245?hl=en. You can find general information about data processing, which according to Google also applies to Google Analytics, in Google’s privacy policy at https://policies.google.com/privacy?hl=en

6.3.2 Use of Google Ads
a) We use Google Ads in order to draw attention to our offers by means of advertising (so-called Google Ads). If you have reached our website via a Google ad, Google Ads will save a cookie on your terminal device. The legal basis for processing your data is Art. 6 Section 1 p. 1 lit. a GDPR, in other words, only with your consent.

b) The advertising material is supplied by Google via so-called ad servers. For this purpose, we and other websites use ad-server cookies which use certain parameters to measure success, such as the display of the advertisements, or clicks by the user. The Google Ads cookies saved on our website give us information on the success of our advertising campaigns. These cookies are not intended to identify you personally. As a rule, the following are saved to this cookie as analysis values: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (note that a user does not want to be contacted again).

c) The cookies placed by Google enable Google to recognize your browser. If a user visits certain pag-es in the website of an Ads customer and the cookie stored on his or her computer has not yet ex-pired, Google and the customer can see the user has clicked on the ad and been directed to this website. Every Ads customer is allocated a different cookie. This means cookies cannot be traced via the websites of other Ads customers. The embedding of Ads means that Google receives a notification that you have called up the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can allocate the visit to your account. Even if you have not registered with Google or are not logged in, there is a possibility that the advertising provider may find your internet protocol address and save it.

d) Based on the marketing tools used, your browser automatically makes a direct connection with the Google server. We do not collect personal data ourselves in these advertising activities, but merely provide Google with the option of collecting the data. Google merely makes statistical evaluations available to us which tell us what ads were clicked how often and at what prices. We do not receive any further data collected from the use of the advertising material. In particular, we are unable to identify the users from this information.

e) You can revoke your consent at any time without any effect on the permissibility of the processing prior to your revocation. The easiest way to revoke consent is by changing your cookie settings (see No.8.4) or using the following functions:

• i) Appropriate setting of your browser software. The suppression of third-party cookies in particular means that you will not receive any ads from third party advertisers;
• ii) Setting your browser to block cookies from the domain “www.googleadservices.com“ www.google.com/settings/ads although this setting will be deleted if you delete your cookies;
• iii) Using the link www.aboutads.info/choices , to deactivate the targeted ads of the advertising providers that form part of the self-regulating “About Ads” campaign, although this setting will be deleted if you delete your cookies;
• iv) Permanent deactivation in your Firefox, Internet Explorer or Google Chrome browser via the link www.google.com/settings/ads/plugin. We must point out that in this case you may not be able to use all the functions of this offer to their full extent.
• v) You can find further information on privacy policy at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, here: https://policies.google.com/privacy?hl=en

6.3.3 Google Conversion Tracking
a) We use Google Ads with the additional application Google Conversion Tracking. This enables us to check the success of our advertising campaigns. The ads are marked with a technical marker, e.g. an ID that allows us to determine how a user interacts with the ads after the initial click and whether they actually follow through on one of our offers. This gives us statistics about the total volume of readers of our ads, which ads are most popular, and if applicable also further information about results from the ad.

b) The legal basis for processing your data is again Art. 6 Section 1 p. 1 lit. f GDPR, in other words only with your consent. You can disable or discontinue the conversion tracking function in the same way as described above for Google Ads.

6.3.4 Google Remarketing
a) We use Google Ads with the additional application Google Remarketing. This allows us to create ads based on information available about you and to address you again during your further use of the internet. This is done via the cookies saved when you access our offers (usually via cookies), which are used by Google to record your user behavior in visiting various websites, and in order to evaluate it in pseudonymized form. According to Google’s own statements, there is no merging of your personal data with data collected as part of the remarketing process which may have been saved by Google.

b) The legal basis for processing your data is again Art. 6 Section 1 p. 1 lit. f GDPR, in other words only with your consent. You can disable or discontinue the remarketing function in the same way as described above for Google Ads.

6.3.5 Advertising with Facebook (Pixel and Conversion Tracking)
a) On some websites, we continue to use advertising options from Facebook Inc. (Facebook). By embedding Facebook Pixel on our website, we can show users of our website and the Facebook social network our advertisements (Facebook ads) and measure and evaluate their success (conversion tracking). This link between Facebook and our website is enabled technically by Facebook Pixel. The legal basis for processing your data is Art. 6 Section 1 p. 1 lit. a GDPR, in other words, only with your consent.

b) Based on the marketing tools used, your browser automatically makes a direct connection with the Facebook server when you visit our website. We have no influence over the scope and further use of data collected by Facebook by means of this tool and therefore inform you according to the state of our knowledge: The embedding of Facebook Pixel means that Facebook receives a notification that you have called up the relevant page of our website or clicked on one of our ads. If you are registered with a Facebook service, Facebook can allocate the visit to your account. Even if you have not registered with Facebook or are not logged in, there is a possibility that the provider may find your internet protocol address and other identifying data and use these to profile you.

c) The information collected is stored on Facebook servers, also in the USA. In such cases, according to its own information, the provider has adopted a standard that corresponds with the former EU-US Privacy Shield and has pledged to observe applicable data protection laws in international data transfer. We have agreed the so-called standard data protection clauses with Facebook which are designed to ensure an appropriate data protection level in the third country.

d) You can revoke your consent at any time without any effect on the permissibility of the processing prior to your revocation. The easiest way to revoke consent is by changing your cookie settings (see No. 8.4) Furthermore, you can revoke your consent via the provider’s function using this link (only if you are logged in): www.facebook.com/settings/?tab=ads.

e) You can find more information about data processing by Facebook from Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA in its privacy policy here: www.facebook.com/about/privacy.
6.3.6 Embedded YouTube Videos

a) We have embedded YouTube videos into our websites. These are saved on http://www.YouTube.com and can be played directly from our website. The legal basis for the display of the videos is Art. 6 Section 1 p. 1 lit. a GDPR, in other words, only with your consent.

b) When you visit the website, YouTube obtains the information that you have accessed the relevant subpage of our website. Furthermore, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether you have a YouTube user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data is allocated directly to your account. If you do not wish the data to be allocated to your YouTube profile, you will need to log out before activating the button. YouTube saves your data as a user profile and uses it for purposes of advertising, market research and/or to design its website to better reflect demand. Such an evaluation is made particularly to provide appropriate advertising (even for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to the creation of this user profile, although you must contact YouTube to exercise this right.

c) The information saved is stored on Google servers, also in the USA. In such cases, according to its own information, the provider has adopted a standard that corresponds with the former EU-US Privacy Shield and has pledged to observe applicable data protection laws in international data transfer. Furthermore, we have agreed standard data protection clauses with Google which are designed to ensure an appropriate data protection level in the third country.

d) You can revoke your consent at any time without any effect on the permissibility of the processing prior to your revocation. The easiest way to revoke consent is by changing your cookie settings (see No. 8.4).

e) You can find further information on the purpose and scope of the data collected and its processing by YouTube in the privacy policy. Here you can also obtain further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=en

6.3.7 Embedded Google Maps
a) On some websites, we use Google Maps. This service means we can display interactive maps for you directly on the website and enable convenient use of the map function for you. The legal basis for the use of the maps is Art. 6 Section 1 p. 1 lit. a GDPR, in other words, only with your consent.

b) When you visit the website, Google obtains a notification that you have accessed the relevant subpage of our website. Furthermore, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google has provided a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data is allocated directly to your account. If you do not wish the data to be allocated to your Google profile, you will need to log out before activating the button. Google saves your data as a user profile and uses it for purposes of advertising, market research and/or to design its website to better reflect demand. Such an evaluation is made particularly to provide appropriate advertising (even for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to the creation of this user profile, although you must contact Google to exercise this right.

c) The information saved is stored on Google servers, also in the USA. In such cases, according to its own information, the provider has adopted a standard that corresponds with the former EU-US Privacy Shield and has pledged to observe applicable data protection laws in international data transfer. Furthermore, we have agreed standard data protection clauses with Google which are designed to ensure an appropriate data protection level in the third country.

d) You can revoke your consent at any time without any effect on the permissibility of the processing prior to your revocation. The easiest way to revoke consent is by changing your cookie settings (see No. 8.4).

e) You can find further information on the purpose and scope of the data collection and its processing by the plug-in provider in the provider’s privacy policy. Here you can also obtain further information on the rights and setting options to protect your privacy in this matter: https://policies.google.com/privacy?hl=en

6.3.1 User behavior and marketing automation using Hubspot
a) Our websites use Hubspot, a marketing automation service at 2 Canal Park, Cambridge, Massachusetts, 02141. We use this tool to analyze your user interactions on websites and in apps. We use the statistics and reports gained here to improve our service and tailor it to your interests as the user. When you fill out a form on our website, the data is stored in Hubspot.

b) We primarily track the interaction between you the user and our website using cookies, data about your device/browser, IP addresses, and website or app activities. Hubspot also stores your internet protocol addresses to ensure the security of our service and to give us, as the website operator, information about the country, region, or location of each user (IP location tracking). For your protection, we naturally use the IP masking function, which means that within the EU and EEA, Google truncates IP addresses by removing the last octet.

c) The legal basis for the collection and processing of the information (for a maximum period of 14 months) is your consent (Art. 6 Section 1 p. 1 lit. a of the GDPR). You can revoke your consent at any time without any effect on the permissibility of processing prior to your revocation. In apps, you can reset the ad ID under the Android or iOS settings. The easiest way to revoke consent is by changing your cookie settings, you may also opt out using the notification that appears when you first visit our site or installing the browser add-on from Google, which is available at: https://tools.google.com/dlpage/gaoptout?hl=en

7. Data processing when you use our offers

7.1 Resurrection Games account
For certain offers on our website, you can or must create a customer account. You can delete your customer account at any time. To do this, log in to your customer account on our website and click “Delete customer account”. Enter your password to confirm that you want to delete the account and your account will be irrevocably deleted. However, due to mandatory retention obligations under trade and tax law, we are obliged to keep address, payment, and order data for a period of ten years.
We reserve the right to periodically delete inactive accounts.
Resurrection Games is the controller responsible under data protection law (contact details above under No.1.2).

7.2 Personalized Newsletter
7.2.1. Controller responsible under data protection law
Resurrection Games is the controller responsible under data protection law (contact details above under No.1.2).

7.2.2 Subscribing to the newsletter
You can subscribe to the personalized e-mail newsletter of Saturday Wars CCG.
Naturally, we need to process your e-mail address to send you our newsletter. Additionally, we also process your IP address and the time at which you subscribed to the newsletter so that we can provide evidence of the subscription and clarify any possible misuse (e.g. in the form of an unauthorized subscription). If you submit further data such as your name, we use this data to address you personally in the newsletter.
We only process this data and send you the newsletter after you have expressly given your consent (Art. 6 Section 1 p. 1 lit. a GDPR).

7.2.3 Personalization of the newsletter
Furthermore, we personalize the newsletter based on your interests. As a result, you only see content you are especially interested in. To do this, we first evaluate information on the website from which you registered for the newsletter and whether your registration occurred in connection with a particular campaign, for instance a competition. In addition, we evaluate your user behavior when we send the newsletter. To carry out this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, representing one-pixel image files that are activated when you open the newsletter and click on individual contents. For the evaluations, we allocate a unique ID to your e-mail address and possibly your name and other data as well as your interaction with the newsletter. This enables us to see whether and when you read the newsletter, what links in it you click, and to derive from this what your personal interests are in certain contents. If we can assign this information to you, e.g. through your customer account, we link the information to your customer account and your interactions with the website, for example what contents you have accessed or what orders you have placed. With the data gained in this way, we create a user profile in order to tailor the newsletter to your personal interests.
This information is stored for as long as you subscribe to the newsletter. After you unsubscribe, we erase your personal data or save it anonymously and in a purely statistical form.
As with other personal data processing, we only personalize the newsletter based on your express consent (Art. 6 Section 1 p. 1 lit. a GDPR).

7.2.4 Unsubscribing from the newsletter
You can revoke your consent at any time by contacting our Data Protection Officer at the stated address (see No 1.1), or unsubscribe by clicking on the link provided in every newsletter.

7.3 Price draws
7.3.1. Controller responsible under data protection law
The controller responsible under data protection law is the company that organizes the prize draw. This information is provided for each prize draw.

7.3.2 Data processing for prize draws
Generally, every prize draw has its own notes on data protection, which you can find under the prize draw conditions. Otherwise, the following notes apply:
If you enter one of our prize draws, we process your personal data for the purposes of performance of the draw. If sponsors and partners provide prizes and send them directly to the winners, we transfer the winners’ data to these third parties for this purpose. We and such third parties do not use the data for any other purposes, unless this is described below or you have given your consent. The legal basis for this data processing is Art. 6 Section 1 p. 1 lit. b GDPR.
In some cases, we announce winners with truncated names and stating the town where they live in online and offline media. This is in the interests of publicizing the prize draw and for PR purposes for us, our sponsors, and our cooperation partners. The legal basis for this data processing is Art. 6 Section 1 p. 1 lit. f GDPR.
If, in connection with a prize draw, you subscribe to a newsletter from a third company, we pass your e-mail address on to this company. The legal basis for this data transfer is Art. 6 Section 1 p. 1 lit. b GDPR.
We erase your data, unless statutory data storage regulations apply, as soon as it is no longer necessary for the above purposes, i.e. the performance of the prize draw; as soon as the prize draw has been fully completed including announcement of the winners; as soon as our legitimate interest in publication no longer applies; or in the case of subscription to a third-party newsletter after the data transfer to the publisher of the newsletter.

7.4 Customer service
7.4.1 Controller responsible under data protection law
If you require customer service with regard to Resurrection Games products and brands or if you contact the Resurrection Games Group in general, your contact partner is our customer service team: service@saturdaywars.com

7.6.2 Data processing in connection with your service request
We process the personal data you provide when you submit a service request in order to process your service request.
We also save your data in a customer profile so that we can provide the best possible support if you have any requests or inquiries in the future. When we send replacement parts, we also store the transaction data in order to prevent misuse of our service.
After we have handled your service request, we send you an anonymous customer satisfaction survey. We also carry out anonymized analyses of service requests so that we can continually improve our product and service quality.
7.5 Orders in our online shops
The controller responsible under data protection law for the Resurrection Games online shops on the websites is Resurrection Games (contact details above under No.1.2).

7.5.1 Use of your data for order processing
When you order products from our online shops, we use your personal data in order to process your order. This includes in particular the receipt and allocation of your payment as well as delivery to you of the products ordered. For this it may be necessary to exchange data with external service providers, e.g. with the payment service you choose or with a delivery service.

7.5.2 Orders with or without a customer account
You can order as a guest user or via Amazon Pay Account, or you can create a customer account (see No.7.1). If you create a customer account, the data you enter and your order history are stored in your customer account. You can erase your customer account at any time (see No.2.3.1).

7.5.3 Use of your data for advertising purposes
We use your data for marketing purposes within the legally permitted scope, e.g. to send you advertising by post informing you of special campaigns and discounts.
The legal basis for this is our legitimate interest in direct marketing, Art. 6 Section 1 p. 1 lit. f of the GDPR or your consent, Art. 6 Section 1 p. 1 lit. a of the GDPR. You can object to the use of your data for direct marketing at any time (see No.2.6.3) or revoke your consent at any time (see No. 2.6.1).

7.5.4 Period of storage
Due to mandatory retention obligations under trade and tax law, we are obliged to keep address, payment, and order data for a period of ten years.

7.6 Data processing for job applications
7.6.1. Controller responsible under data protection law
Resurrection Games is the controller responsible under data protection law (contact details above under No. 1.2).

7.6.2 Processing in connection with your application
a) If you apply for a job with us, we store and use your data exclusively for the filling of the position for which you have applied. We treat your data confidentially and do not disclose it to third parties. Only authorized employees in the Human Resources department and the functional department in which you wish to work can view your application data.

b) If you apply online via the application form on our Careers page, your data is transferred to us in encrypted form according to the latest technology and stored in our applicant management system. If you apply in writing, we transfer your applicant data manually into our applicant management system and scan the documents you have sent to us, e.g. CV, references, and certificates. Then we send your original documents back to you. As soon as you have successfully submitted your application to us and we have your data in our system, we process your application.

c) If you want to withdraw your application during the ongoing application process, you can contact us at anytime: jobs@resurrectiongames.company

The legal basis for data processing in our application procedure is Art. 6 Section 1 p. 1 lit. b of the GDPR.

d) If your application is successful and you start a job at Resurrection Games, we store your application data in your personnel file. If you withdraw your application or if we reject it, we erase your data from our system, unless statutory data storage regulations apply.

7.6.3 Inclusion in our pool of applicants
a) Often, great personalities apply who would fit in perfectly with the Resurrection Gaming Company, both in terms of specialist skills and personality, but at the time we have no suitable vacancy for them. If you are one of these people, we ask you in a separate e-mail whether we can keep your personal data in our system for a longer period. If you consent to this, we keep you in our pool of applicants for a maximum of 18 months. This means we can contact you actively at a later date.

b) The legal basis for the data processing in our pool of applicants is your consent. You can revoke this at any time. Simply send a brief, informal mail to our Human Resources department: jobs@resurrectiongames.company

c) If no employment relationship ensues in the following 18 months, we erase your data from our system. This happens automatically and without any particular notification or further archiving.

7.7 Further offers and functions of our websites
If our websites contain further offers, especially time-limited campaigns, you will receive information on data protection as well as the controller responsible via the relevant offer, unless everything is already covered in our data protection declaration.

8. Cookies and settings options

8.1 Controller responsible under data protection law
The controller responsible under data protection law for the use of cookies on the website is the company named in the legal notice as the website provider. You can find the contact data in the legal notice as well as above under No. 1.2.

8.2 Use of cookies on this website
When you use our website, cookies and similar tools are saved on your computer. Cookies are small text files that are stored on your computer and linked to the browser you use. They provide certain information to the organization which places the cookie (in this case our company). Cookies cannot execute programs or transfer viruses to your computer. Their purpose is to make websites generally more user-friendly and effective.
We distinguish between cookies that are necessary for the technical functions of the website and optional cookies. Optional cookies enable us to make our websites easy to use as well as functional and to compile anonymous statistics on the use of our website so that we can improve it and tailor advertising to your interests – both on Resurrection Games Group and third-party websites. You decide which cookies you want to accept. However, if you block cookies, you may not be able to use all the functions of the websites.

8.3 We use the following categories of cookie:

8.3.1 Technically necessary cookies
These cookies are always necessary for the website to be displayed, for it to be technically secure, and for the provision of other basic functions of the website. The legal basis for the use is Art. 6 Section 1 p. 1 lit. b of the GDPR.

8.3.2 Comfort
These cookies make it easier and more convenient for you to use the website. For example, we can show you articles you placed in the shopping cart during a previous visit or save other settings you have made. This means you can always continue where you left off. The legal basis for use is your consent (Art. 6 Section 1, p. 1 lit. a of the GDPR), which you can revoke at any time by changing your settings, see Sec. 8.4.

8.3.3 Statistics
These cookies enable Resurrection Games Group to statistically evaluate visits to and use of our websites. We use them for example to determine user numbers and what content is popular. Armed with this knowledge, we can improve our offer and our websites. All these statistics and the data they contain are anonymous. The legal basis for use is your consent (Art. 6 Section 1, p. 1 lit. a of the GDPR), which you can revoke at any time by changing your settings, see Sec. 8.4.

8.3.4 Marketing
These cookies enable us to show you content, including advertising, which is especially relevant and tailored to your personal interests. In order to personalize content for you, we can analyze your use of the Resurrection Games websites of the companies listed above, then determine relevant content and show it to you. In this context, we also use external partners who give us the opportunity to post personalized advertising on other websites as well. For this purpose, we transfer to our partners your data which is necessary for the use of our offers. You can find them under No. 6.3 of this data protection declaration. The legal basis for use is your consent (Art. 6 Section 1, p. 1 lit. a of the GDPR), which you can revoke at any time by changing your settings, see Sec. 8.4.

9. Policy Changes

9.1 Updates to this Privacy Policy

We may update this Privacy Policy from time to time in order to clarify or inform you of changes to our practices. The Effective Date at the top of this Privacy Notice reflects the last time it was revised. Changes to this Privacy Policy will be effective once they are posted unless otherwise indicated.

Please periodically review this Privacy Policy to keep yourself informed regarding how we currently collect, use, and disclose your personal information.

10. California Privacy Notice

The following privacy notice applies to residents of the US state of California.

Collection of Personal Information

The following table lists the categories of personal information that we have collected in the last 12 months.

Category under the California Consumer Privacy Act	Specific Description
Identifiers	Your name and email address, survey responses, and any personal information contained within trainings submitted by our customers to our Services.
Customer records	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information or health insurance information.
Protected classifications	Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Commercial Information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Usage data	Browsing history, search history, information on a consumer’s interaction with a website, application or advertisement. Page views, mouse movements, site visits before and after our Services, email open rate, and other usage information (in aggregate); IP address and other, related connection information.
Sensory data, such as audio, video and electronic data	Includes audio, electronic, visual, thermal, olfactory, or similar information, such as thermal screenings and CCTV footage (e.g., collected from visitors to our offices for health and safety purposes), photographs and images (e.g., that you provide us) and records of calls, webinars and video conferences. We may collect the above information as contained within training submitted by our customers to our Services.
Biometric Information	Includes iris and retina scans, fingerprints, voice recordings, facial recognition, keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.
Geolocation Information	Includes data derived from a device and that is intended to locate a customer within a geographic area.
Professional-or-employment-related information	Your job role, employment-related biographical information; personal information contained within trainings submitted by our customers to our Services.
Education Information	Information that is not publicly available personally identifiable information‚ as defined in the California Family Educational Rights and Privacy Act, including education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
Inferences	Inferences regarding the use of the Site and popularity of the content on it or sent via email.

Disclosure of Personal Information for a Business Purpose

The following table lists the categories of personal information that we have collected in the last 12 months.

Category under the California Consumer Privacy Act	Specific Description	Disclosed for a Business Purpose in the Last 12 Months
		Yes/No	Categories of Third Parties
Identifiers	Your name and email address, survey responses, and any personal information contained within trainings submitted by our customers to our Services.	Yes	Sales and Marketing Tool,  Service Providers
Customer records	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information or health insurance information.	Yes	Service Providers
Protected classifications	Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	Yes	Service Providers
Commercial Information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Yes	Service Providers
Usage data	Browsing history, search history, information on a consumer’s interaction with a website, application or advertisement. Page views, mouse movements, site visits before and after our Services, email open rate, and other usage information (in aggregate); IP address and other, related connection information.	Yes	Sales and Marketing Tool, Ad Network, Data Analytics Provider, Service Providers
Sensory data, such as audio, video and electronic data	Includes audio, electronic, visual, thermal, olfactory, or similar information, such as thermal screenings and CCTV footage (e.g., collected from visitors to our offices for health and safety purposes), photographs and images (e.g., that you provide us) and records of calls, webinars and video conferences. We may collect the above information as contained within training submitted by our customers to our Services.	Yes	Data Analytics Provider, Service Providers
Biometric Information	Includes iris and retina scans, fingerprints, voice recordings, facial recognition, keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.	Yes	Service Providers
Geolocation Information	Includes data derived from a device and that is intended to locate a customer within a geographic area.	Yes	Service Providers
Professional-or-employment-related information	Your job role, employment-related biographical information; personal information contained within trainings submitted by our customers to our Services.	Yes	Social Network, Data Broker, Sales and Marketing Tool, Service Providers
Education Information	Information that is not publicly available personally identifiable information‚ as defined in the California Family Educational Rights and Privacy Act, including education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	Yes	Service Providers
Inferences	Inferences regarding the use of the Site and popularity of the content on it or sent via email.	Yes	Sales and Marketing Tool, Ad Network, Data Analytics Provider

Sale of Personal Information

As is common practice among businesses that operate Internet websites, we may also have disclosed certain identifiers, information about the use of our websites and apps, and inferences drawn about you to our social media, advertising, and analytics partners for monetary or other valuable consideration in the last 12 months. These disclosures may qualify as “sales” of personal information under California law. This enables us to identify broad demographic trends, target advertising to your interests, and perform analytics to understand our audience and improve our services. We do not sell the personal information of individuals who we know to be under 16 years of age.

The following table lists the categories of personal information that we have sold or shared with third parties for cross-contextual behavioral advertising purposes in the past twelve months

Category under the California Consumer Privacy Act	Specific Description
Usage data	Browsing history, search history, information on a consumer’s interaction with a website, application or advertisement. Page views, mouse movements, site visits before and after our Services, email open rate, and other usage information (in aggregate); IP address and other, related connection information.
Sensory data, such as audio, video and electronic data	Includes audio, electronic, visual, thermal, olfactory, or similar information, such as thermal screenings and CCTV footage (e.g., collected from visitors to our offices for health and safety purposes), photographs and images (e.g., that you provide us) and records of calls, webinars and video conferences. We may collect the above information as contained within training submitted by our customers to our Services.
Professional-or-employment-related information	Your job role, employment-related biographical information; personal information contained within trainings submitted by our customers to our Services.
Inferences	Inferences regarding the use of the Site and popularity of the content on it or sent via email.

To understand more about the purposes for which we collect personal information, see “How We Use Your Information.” To learn more about the source from which we collect information about you, please see “What Information We Collect“.

Your Rights

If you are a California resident, California law permits you to request that we disclose certain information about our collection and use of your personal information including:

• the “right to know,” meaning the right to request any or all of the following:
  • the specific pieces of personal information we collected about you;
  • the categories of personal information we collected;
  • the categories of sources used to collect the personal information;
  • the business or commercial purposes for collecting your personal information; and
  • the categories of third parties with whom we have shared your personal information
• the right to request deletion of your personal information that we collected
• the right to have someone you authorize make a request on your behalft
• the right to opt-out of “sale” (as that term is defined in the CCPA) or the sharing of personal information for cross-contextual behavioral advertising purposes
• the right to make a request for the correction of errors or inaccuracies in your personal information
• the right to restrict the processing of sensitive personal information (please note, however that we do not collect or process sensitive personal information in connection with the Services)
• the right not to be discriminated against for exercising any of these rights

Appeal process

You may appeal our decision with respect to your request to exercise your legal rights with regard to your personal information. To submit such an appeal, you may contact us using the contact information below. You must include sufficient information to allow us to reasonably verify your identify, reference the date and time of your previous request to exercise your legal rights, and explain why you believe our decision was insufficient or improper. We will ordinarily respond to your appeal in accord with the timelines set forth in applicable law.

Opting out of the Sale or Sharing of Personal Information

You may also opt out of the sale of your personal information by activating the Global Privacy Control in your web browser.

Exercising Your Other Rights

You may exercise these rights by:

• by emailing us at privacy@resurrectiongames.company

Please note that, although you have the right to request that we restrict our processing of sensitive personal information to only that which is necessary to deliver our products and services to you, we already limit our processing of sensitive personal information in this way. If you have any questions or requests relating to this topic, please contact us using the information provided below.

Please note that we may take steps to verify your identity before granting you access to information or acting on your request to exercise your right to the deletion of your information. In connection with such verification, we may ask you to provide your name, email address, your year of birth. We may also ask you to confirm your identity via an associate email account. We may limit our response to your exercise of the above rights as permitted by law.

You may designate an authorized agent to make a request to know or request to delete on your behalf.  An agent may be an individual, or a business entity registered with the California Secretary of State.  To designate an authorized agent, you must provide the agent with written permission to submit the request.  We may still require you to verify your identity directly as permitted by law. We may refuse a request if the agent does not provide adequate proof of their authorization.

We may not discriminate against you for exercising any of the above rights as available to you under California law. This means that we may not deny you services, or charge you different prices or rates for services or provide you with a different level or quality of services (or suggest that we will do so), in response to such a request made under California law.  However, as permitted by law, we may charge different prices or rates, or provide a different level or quality of services, where that difference is reasonably related to the value provided to us by your personal information.

Please note that we do not have any control over any personal information about you uploaded by one of our customers into our Services. To have that information removed, please contact the uploading customer.