Below we explain to you which personal data is collected and processed by us when using our services and offers. We are:
GIIKU GAMES GmbH
Rehleitenweg 32b
83026 Rosenheim
Germany
Tel: +49 8031 210 205 70
E-Mail: datenschutz (at) giikugames.com
We process personal data on the basis of the following legal provisions of the General Data Protection Regulation (GDPR)
Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR,this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.
You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires unless there is a need for further storage of the data for the conclusion of a contract or fulfilment of the contract.
a) Scope of data processing
When visiting our website, the following data is collected and stored by our web server:
The data is stored in the log files of our system. A storage of this data together with other personal data of the user does not take place. It is stored with our hosting provider OVH, which processes the data exclusively inside the EU.
b) Legal Basis
The legal basis for processing the data is Art. 6 para. 1 (f) GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.
Where our hosting provider processes personal data on our behalf, it acts as a processor pursuant to Art. 28 GDPR.
c) Purpose of data processing
Address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.
The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems.
An evaluation of the data for marketing purposes does not take place in this context.
d) Duration of storage
The log files will be deleted after 30 days at the latest unless there is a need to keep the data for the aforementioned purpose due to specific events.
Storage beyond that is possible. In this case, the IP addresses of the users are deleted or anonymised, so that an assignment to a specific user is no longer possible.
e) Objection and removal possibility
The processing is based on Art. 6(1)(f) GDPR. You have the right to object to the processing pursuant to Art. 21 GDPR on grounds relating to your particular situation. We may continue the processing where compelling legitimate grounds for the processing exist which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.Please note that certain technical log data is necessary to ensure the security and proper operation of our services.
a) Scope of data processing
If you register on our website and deposit your e-mail address, we may subsequently use this information to send you product information by e-mail regarding the booked product or similar products of the processor. In such a case, only direct advertising for our own similar goods or services will be sent by e-mail. We will also send you emails related to your transactions, such as order confirmations, etc.
It is possible to subscribe to a free newsletter on our website or in our app, which contains direct advertising for our products or products of our cooperation partners. When you sign up for the newsletter, the data from the input mask will be transmitted to us or the e-mail address already stored will be used. In this case, the date and time of registration for the newsletter and the IP address used are also stored. As part of the confirmation of the newsletter registration, the date and time at which you click on the confirmation link for the newsletter registration as well as the IP address used will also be saved.
b) Legal basis
The legal basis for the processing of the data when sending out the newsletter due to the prior acquisition of goods or services is Article 6 para. 1 sentence 1 (f) GDPR in conjunction with § 7 para. 3 UWG.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR is therefore in direct advertising and the increase in sales to existing customers.
The legal basis for processing the data when registering directly for the newsletter is Art. 6 para. 1 (a) GDPR.
The legal basis for contacting in connection with current bookings is Article 6 para. 1 (b) GDPR.
Where we use a service provider to distribute newsletters on our behalf, the provider acts as a processor pursuant to Art. 28 GDPR. Processing of your personal data for newsletter distribution is based on the legal bases described above.
c) Purpose of data processing
The purpose of storing the e-mail address is the possibility of electronic contact for advertising purposes. The date and IP address of the registration as well as the confirmation of the registration will be recorded in order to document the consent to the newsletter shipment and to prevent misuse. Furthermore, for information regarding ongoing bookings, the proper execution of the contract is the purpose of the contract.
The transfer to the service provider is done for the purpose of sending the newsletter as a mass mailing.
d) Duration of storage
If we have received your e-mail address as part of the purchase of goods or services, it will be used for the delivery of advertising until you object to further use.
As far as you have expressly consented to the receipt of the newsletter, we will only delete or block the e-mail address for the advertising mailing, if you revoke your consent. The data confirming the order of the newsletter will be stored for the same amount of time.
The e-mails sent, as far as business letters are concerned, are stored for the duration of retention periods of the Tax Code or the Commercial Code. The further e-mails are deleted as soon as no further response by the user has to be expected.
e) Objection and removal possibility
You may object or revoke your consent to the use of the e-mail address for advertising purposes at any time, without incurring any costs beyond the charges of your communications tariff. You can object to the use of any advertising mail by clicking on a link provided there with effect for the future. You may also opt out of advertising for future use by emailing datenschutz@giikugames.com. You may withdraw your consent to receive the newsletter at any time with effect for the future by using the unsubscribe link contained in each newsletter or by contacting us at datenschutz (at) giikugames.com. Transactional or service-related communications that are necessary for the performance of the contract may continue to be sent for as long as the respective contractual relationship exists. Otherwise, we would not be able to properly fulfil the contract.
a) Scope of data processing
Subject to your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyse the use of our website and related online services. Depending on the functionality used and your consent settings, the information processed may include in particular:
For users in the European Union, individual IP addresses are not logged or stored by Google Analytics. IP address information may be used to derive approximate geographic information before being discarded.
b) Legal basis
Google Analytics is used only on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
To the extent that information is stored on or accessed from your terminal device, the processing is additionally based on your consent pursuant to Section 25(1) TDDDG.
c) Purpose of data processing
We use Google Analytics to understand how our website and online services are used, to evaluate their performance and to improve their functionality, usability and content.
d) Recipients and international data transfers
Personal data may be processed by Google Ireland Limited and other companies of the Google group as necessary for the provision of Google Analytics.
Where personal data is transferred outside the European Economic Area, such transfers are carried out in accordance with the requirements of Chapter V GDPR. Depending on the recipient and circumstances of the transfer, this may include an adequacy decision of the European Commission, including the EU-U.S. Data Privacy Framework where applicable, or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
e) Duration of storage
Data processed through Google Analytics is retained in accordance with the retention settings configured for our Google Analytics property and only for as long as necessary for the purposes described above.
Where possible, data is subsequently deleted, anonymised or retained only in aggregated statistical form.
f) Withdrawal of consent
You may withdraw your consent at any time with effect for the future through the privacy or cookie settings available on our website.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
a) Scope of data processing
We use services provided by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia ("bunny.net"), including content delivery, storage and related technical infrastructure services.
When content is delivered through bunny.net, technical connection and request data may be processed. Depending on the respective service and technical configuration, this may include in particular IP address or anonymised IP information, date and time of access, requested URLs or resources, HTTP headers, referrer information, user agent information, country or region information and other technical information necessary for delivering, securing and optimising the service.
bunny.net generally processes such information on our behalf as a data processor.
b) Legal basis
The legal basis for the processing of personal data in connection with the delivery and operation of our technical services is Art. 6(1)(f) GDPR.
Our legitimate interest is the secure, reliable and efficient provision of our website, game files and related technical services. Where bunny.net processes personal data on our behalf, such processing is carried out in accordance with Art. 28 GDPR.
c) Purpose of data processing
The processing is carried out for the secure and efficient delivery of content, optimisation of network performance, prevention and analysis of technical errors and abuse, and ensuring the availability and security of our technical services.
d) Duration of storage
Traffic and technical log data processed through bunny.net is stored within the European Union in accordance with the applicable service configuration and is retained only for as long as necessary for the respective technical and security purposes.
Where data is no longer required for these purposes, it is deleted or anonymised in accordance with the applicable retention settings.
e) Objection and removal possibility
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing pursuant to Art. 21 GDPR on grounds relating to your particular situation.
a) Scope of data processing
In order to serve its purpose of preventing and detecting the use of cheat software with the goal of ensuring a fair game environment Easy-Anti-Cheat is processing information to allow the game publisher to pursue and protect its legitimate interests of keeping its game free from malicious misuse, abuse or cheating.
When you register or use Florensia Online, the following data about you may be collected and processed:
b) Legal basis
The legal basis for the processing of personal data in connection with Easy Anti-Cheat is Art. 6(1)(f) GDPR. Our legitimate interest is the prevention and detection of cheating, misuse and manipulation and the protection of the integrity and fairness of the game.
c) Purpose of data processing
Easy-Anti-Cheat is processing information in order to provide its services of preventing and detecting the use of cheat software with the goal of ensuring a fair game environment as intended by the game publisher.
d) Duration of storage
Easy-Anti-Cheat may store the information for the entire duration of the provision of its services for a game.
e) Objection and removal possibility
You have the right to object to processing based on Art. 6(1)(f) GDPR pursuant to Art. 21 GDPR on grounds relating to your particular situation. Where the processing is necessary to protect the integrity and security of the game, we may continue processing where the requirements of Art. 21 GDPR are met.
a) Scope of data processing
If the game encounters a technical error or crash, you may voluntarily submit a crash report to us. The crash report may contain technical diagnostic information, including:
A memory dump contains information that was present in the game's memory at the time of the crash. It may therefore unintentionally contain personal data or other information that was present in memory when the crash occurred.
Depending on the technical configuration and the nature of the crash, the report may also contain network and connection-related technical information, technical identifiers, and account, user, session, character or device-related identifiers where necessary for the transmission or analysis of the crash report.
Crash reports are only transmitted after you actively choose to submit the report.
b) Legal basis
The legal basis for processing personal data contained in a voluntarily submitted crash report is your consent pursuant to Art. 6(1)(a) GDPR. To the extent that information stored on your terminal device is accessed for the creation or transmission of the crash report, such access is based on your consent pursuant to Section 25(1) TDDDG.
c) Purpose of data processing
Crash reports are processed exclusively for the purpose of identifying, analysing and resolving technical errors and improving the stability and security of the game.
d) Duration of storage
Crash reports and memory dumps are reviewed manually by authorised personnel for the purpose of investigating and resolving the respective technical issue. Crash reports and memory dumps are retained only for as long as necessary for this analysis and are deleted as soon as they are no longer required. In any event, they will be deleted no later than seven days after submission.
Where information derived from a crash report is required for further technical investigation, only the information necessary for that purpose may be retained beyond this period, where possible without retaining the original memory dump or unnecessary personal data.
e) Withdrawal of consent
You may withdraw your consent at any time with effect for the future by contacting us at datenschutz (a) giikugames.com. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
f) Recipients and hosting
Crash reports are accessible only to authorised personnel involved in software development, quality assurance, technical support, IT administration and security. Where necessary, service providers involved in hosting, storage, technical infrastructure or crash analysis may process such data on our behalf pursuant to Art. 28 GDPR.
Last updated: September 2026
