Privacy Datenschutzerklärung

Who is responsible Verantwortlicher

Responsible for processing personal data on this site under the General Data Protection Regulation (GDPR):

Lennart Jasper, Odd Jelly Games
c/o IP-Management #12403
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
Email: hello@oddjellygames.com

In short Kurz gesagt

This site sets no cookies, uses no analytics or tracking of any kind, and loads nothing from other companies’ servers: no fonts, no scripts, no embedded videos. It handles personal data in two cases only: the short log the server keeps of each request, and your email address if you join our mailing list.

Server logs Server-Logdateien

When you open a page, your browser sends your IP address and some technical details to our server. To keep the site running and safe, the server writes a short log line for each request: the time, the address requested, the response code and how long it took. It does not write your IP address or your email address into these logs.

To stop floods of sign-ups, the server keeps the IP address and a scrambled (hashed) form of the email address of each sign-up attempt in its working memory for up to one hour. They are never written to disk and are gone when the server restarts.

The site runs on a server provided by Oracle Cloud Infrastructure (Oracle Corporation) in its Frankfurt region, which processes this data on our behalf. The server keeps its logs until they are overwritten, after 30 MB of log lines.

This page also covers our asset packs site, assets.oddjellygames.com, which runs on the same server. It has no forms, sets no cookies and keeps no log of its own.

Legal basis: our legitimate interest in running a working and secure website, Art. 6(1)(f) GDPR.

The mailing list Newsletter

If you enter your email address in the sign-up box, we store it so we can write to you when there is a demo to play. We also store which game you signed up from and, if the link that brought you here contained them, the campaign tags utm_source, utm_medium and utm_campaign (they tell us which post or profile the link was in). We ask for nothing else.

Confirmation. You are only added once you confirm: we send you one email with a link, and nothing more is sent until you open it and press the button. We record when you signed up, when we sent that email, and when and from which IP address you confirmed, so that we can prove your consent.

Leaving. Every email we send has a link to unsubscribe, and most mail apps show their own unsubscribe button for it. You can also write to hello@oddjellygames.com. Withdrawing your consent does not make the processing before it unlawful.

Where the list is kept. On our own server (see “Server logs”), not with a newsletter company.

Delivery. To deliver our emails we use Amazon Simple Email Service, run by Amazon Web Services EMEA SARL (38 Avenue John F. Kennedy, L-1855 Luxembourg) in its Stockholm region (Sweden). It receives your address and the email for each delivery and processes them on our behalf under its data processing addendum (Art. 28 GDPR). If an email to your address bounces or is reported as spam, Amazon stops delivering to it. Amazon Web Services belongs to a company in the United States; transfers of data there, should any happen, rely on the EU–US Data Privacy Framework, under which Amazon is certified, and on the standard contractual clauses in that addendum (Art. 45 and 46 GDPR). Amazon’s privacy notice: aws.amazon.com/privacy.

How long. We keep your address until you unsubscribe or ask us to delete it. After you unsubscribe, we keep the address marked as unsubscribed, with the dates above, so that you get no more mail and we can show that you had agreed; ask us and we delete it completely. Addresses that are never confirmed are deleted after 30 days.

Legal basis: your consent, Art. 6(1)(a) GDPR.

Writing to us Kontakt per E-Mail

If you email us, we use your address and what you write only to answer you, and delete the conversation when it is finished, unless the law requires us to keep it. Legal basis: Art. 6(1)(b) GDPR where your message is about a contract with us, otherwise our legitimate interest in answering, Art. 6(1)(f) GDPR.

Your rights Ihre Rechte

You have the right to know what data we hold about you (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), to receive it in a common format (Art. 20), and to object to processing based on our legitimate interest (Art. 21). You can withdraw your consent at any time (Art. 7(3)). Write to hello@oddjellygames.com.

Complaints Beschwerderecht bei einer Aufsichtsbehörde

You have the right to complain to a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live or work. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), datenschutz-berlin.de.