Privacy Policy

Privacy Policy

We are committed to protecting your privacy and your right to informational self-determination. We kindly ask you to take a moment and read this Privacy Notice. The information provided here will help you understand how we process your personal data. Depending on the specific case it is possible that other privacy notices of ours may apply additionally, in which case we will inform you about this additional application (e.g. by providing you with a short version of the privacy notice and a reference to this Privacy Notice, or here by referring to such privacy notice). If you have any questions regarding our use of your personal data, please feel free to contact us over the channels provided below. 

When we refer to “you” in this Privacy Notice, we refer to you as data subject. If you are interacting with us on behalf of others (e.g. you are a team manager or other personnel associated with a team and you are signing up others), please make sure all affected people receive the information stated in this Privacy Notice. 

If we speak of “we” or “us” in this Privacy Notice, we refer to ourselves as controller, as defined below. Our contact details are: 

Freaks 4U Gaming GmbH („F4UG“)
An der Spreeschanze 10
13599 Berlin
Germany 

Commercial Register Number: HRB 132556 B 

Email: info@freaks4u.de
Website: https://www.freaks4u.de 

Our email address for all privacy matters is: datenschutz@freaks4u.de  

Our data protection officer (“DPO”) is: 

Tercenum AG (external)
Georgenstraße 22
10117 Berlin
Germany

1. Data Processing

Who processes data and why?

We process personal data in the following cases:

  • We HR matters and process personal data related to this (e.g. regarding job applications);
  • Depending on the specific case, we plan, administer and execute, and operate esports festivals, tournaments and events as well as esports tournaments, festivals and events which we conduct jointly with third party partners of ours (indistinctively “Tournaments” or “Events”).

For this we can process personal data such as:

  • personal data of freelancers involved in the Tournament (e.g. names and travel information);
  • personal data of participants of a Tournament or Event (e.g. names, nicknames, platform IDs, birth dates, email addresses, addresses, photos, videos and financial data, travel data, game data);
  • personal data of visitors of the venue where a live Tournament or Event takes place (e.g. image and spoken word captured on photos and videos);
  • personal data (e.g. email addresses and names) of employees of partners involved in the Tournament or Event (e.g. brand partners);
  • marketing data (e.g. analytical data from a website of a Tournament or Event, personal data of users from a social media page).
  • We share IT services that are provided by third parties and through this, process personal data such as personal data of consumers/users that interact with our products and services as well as personal data of employees of partners who are involved in cooperation with us.
  • We market our products and services. For this purpose, we may process personal data, such as user data (e.g. e-mail addresses for sending newsletters). We decide whether and how personal data is used for marketing purposes.
  • We provide the services of our legal department for any legal questions and for administering and cooperating in intercompany matters. Through this we process personal data such as names and other personal data provided in connection with a legal assessment or proceeding.
  • We use systems that allows us to respond to your requests when you exercise one of your rights under the GDPR (as further described below) or when you have any questions or comments regarding the protection of your personal data. Through this, we process certain personal data, depending on the request, such as your email and name.

2. Who is responsible for what?

If not expressly stated otherwise in this Privacy Notice, we (Freaks 4U Gaming) are responsible for safeguarding the rights of yours set out in this Privacy Notice, when processing your personal data. Therefore, we are your primary contact point for all requests you may have relating to data protection. You can at any time, of course, also contact listed third party services or the respective Subsidiary to exercise your data subject rights. We, and the Subsidiaries can assist each other to comply with the obligations set out in the General Data Protection Regulation (EU) 2016/679 (the “GDPR”) we may have towards you and will inform each other about matters of significance to a data processing addendum. Irrespective of this, the GDPR grants you the possibility to exercise your rights in respect of, and against the controller. 

Contact: 

If you want to exercise your rights against us or if you have any questions for us regarding the data processing, you can contact us via email at datenschutz@freaks4u.de

Depending on your request, it is possible that your request will be forwarded to our partners or to a Subsidiary, to help each other out to answer your request or to get directly in touch with you for this purpose. In case of a forward of your request, we and the Subsidiary inform each other about the matter to the extent necessary for answering your request. 

The meaning of certain terms we use in this Privacy Notice is defined by the General Data Protection Regulation (the “GDPR”), a data protection law of the European Union. All definitions set out in Art. 4 GDPR apply to this Privacy Notice. We would like to explicitly mention the meanings of the following commonly-used terms: 

  • personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; 
  • processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; 
  • controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law; 
  • processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. 

As a controller we need a legal basis to process your personal data lawfully, according to Art. 6 para. 1 GDPR. 

If: 

  • you have given your consent to the processing of your personal data for one or more specific purposes, this forms a legal basis according to Art. 6 para. 1 let. a) GDPR
  • you have given explicit consent to the processing of special categories of personal data (e.g. data concerning health) for one or more specified purposes, and such consent is possible according to applicable law, this forms a legal basis according to Art. 9 para. 2 let. a) GDPR
  • the processing is necessary for the performance of a contract between you and us or in order to take steps at your request prior to entering into a contract, the legal basis for this is Art. 6 para. 1 let. b) GDPR
  • the processing is necessary for compliance with a legal obligation to which we are subject, the legal basis for this is Art. 6 para. 1 let. c) GDPR
  • the processing is necessary to protect our legitimate interests or legitimate interests of a third party and such legitimate interests are not outweighed by your interests or fundamental rights and freedoms, the legal basis for this is Art. 6 para. 1 let. f) GDPR
  • the data is processed for employment-related purposes, e.g. for hiring, the legal basis for this is Art. 88 para. 1 GDPR in connection with applicable labour and social security laws. 

We have implemented physical, technical and organizational measures to ensure a level of security appropriate to the risk presented by the data processing, in accordance with Art. 24 and 32 of the GDPR. 

In case of a personal data breach and if this breach is likely to result in a risk to your rights and freedoms, we will, without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the competent supervisory authority. Should such breach likely result in a high risk for your rights and freedoms, we or – where required by article 34 of the GDPR – F4UG or the corresponding Subsidiary will inform you about the personal data breach without undue delay. 

You have certain rights concerning the processing of your personal data by us, which are the following: 

  • Right of information: You have the right to be provided information regarding the processing of your personal data by us. 
  • Right of access: You have the right to obtain confirmation as to whether or not we are processing your personal data and, if this should be the case, access to the personal data. 
  • Right to rectification: You have the right to obtain rectification of inaccurate or incomplete personal data concerning you. 
  • Right to erasure (“right to be forgotten”): Under certain circumstances you have the right to obtain the erasure of personal data concerning you. 
  • Right to restriction: Under certain circumstances you have the right to obtain the restriction of processing. 
  • Right to data portability: Under certain circumstances you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit this data to another controller. 
  • Right to object: Under certain circumstances you have the right to object to the processing of personal data concerning you. 
  • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of the EU of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. 
  • Right to withdraw consent: If a processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Such withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. 
  • Right to not be subject to a decision based solely on automated processing: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. 

We provide certain options for you to control your personal data, for example, when we send you a marketing communication, you can click on the ´unsubscribe´ button or link to request not to receive more marketing emails from us, or if you have created an account, you can at any time delete it via your profile. 

In addition to the above, If you want to exercise your rights or if you have any questions for us regarding the processing, you can contact us via email at: datenschutz@freaks4u.de.  

The personal data we process can also be either processed by other parties on our behalf (data processors) or transferred to and processed by other controllers or third parties. When data is processed according to this Privacy Notice, in principle, it is done so by the respective internal employees and freelancers of ours that are responsible for pursuing our purposes for the processing. 

Especially the following main providers of ours may be recipients of your personal data: 

HR services: 

Personio GmbH
Rundfunkplatz 4
80335 München
Germany 
Office tools, advertising and analytics tools: 

Microsoft Corporation
One Microsoft Way Redmond, WA 98052
USA 

and 

Google LLC – Google Analytics
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA (“Google”) 

and

Google LLC – Google Forms
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA

Ticketing and Project Management tools: 

Atlassian Pty Ltd
Level 6, 341 George Street Sydney
NSW 2000
Australia (“Atlassian”)  

Social media platforms and analytics tools:  

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”, “Facebook Pixel“) 

and 

Twitter International Company
One Cumberland Place, Fenian Street
Dublin 2, D02 AX07 Ireland (“Twitter”, “Twitter Conversion Tracking“) 

and 

Google Ireland (Advertisements and Analytics) 

Newsletter software: 

Sendinblue GmbH
Köpenicker Straße 126,
10179 Berlin,
Germany 

Host providers: 

Manitu GmbH
Welvertstraße 2,
66606 St. Wendel,
Germany  

CRM tools: 

Salesforce.com, Inc.
The Landmark @ One Market Street,
San Francisco, CA 94105
USA (“Salesforce”) 
Messaging software: 

Microsoft Teams
Microsoft Corporation One
Microsoft Way, Redmond, WA 98052 USA

Video and photo platforms: 

Google Ireland (YouTube) 

and 

Twitch Interactive, Inc.
350 Bush Street, 2nd Floor
San Francisco, CA 94104 (“Twitch”) 

Contract signing: 

Hellosign, a Dropbox Company
PO Box 77767
San Francisco, CA 94107 
Cookie Consent Usercentrics GmbH
Sendlinger Straße 7,
80331 München,
Germany 

Some of these recipients are established outside of the European Union. These recipients are either located in a third country for which the European Commission has recognized that it provides an adequate level of data protection, or we have concluded the EU Standard Contractual Clauses for transfers of personal data to processors established in so called third countries, meaning countries that are not part of the European Union or the European Economic Area, which provide adequate guarantees to ensure data protection at European level.

Apart from this, the following categories of recipients process data either on our behalf or with us as individual controllers: financial and IT services; media; partners that statistically and analytically process sports data; website analytics providers; messaging systems; Subsidiaries of F4UG; other players of the played game; companies involved in travel bookings; providers of ticketing platforms; partners of ours that are dedicated to broadcasting, coverage or other commercial engagements connected to an esports tournament; providers of raffle solutions; forum software providers; sponsors of prizes, airlines and transportation companies, and authorities.

You can find further information on which recipients and categories of recipients are involved in the processing of personal data in the table under Section 2.

In the following lines we would like to inform you about how we process your personal data. These are the general processing activities that can apply when you interact with us. Every processing activity is broken down into 5 parts:
(a.) What: What personal data is processed?
(b.) Who: Who receives the personal data?
(c.) Why: For what purpose is the personal data processed?
(d.) Legal Basis: What law allows us to process the personal data?
(e.) How Long: How long do we keep the personal data?

3. Communication via Email, Phone and Messaging Systems

a.   What
If we communicate with you via email, mail or telephone (or similar), we process all personal data you disclose to us during our conversation (e.g. your name, email address, the reason why you are contacting us etc.). 

Apart from this, it is also possible that we use other online messaging systems to communicate with you, if you wish to contact us over these channels. Please note that if you wish to contact us via such messaging systems, it is possible that the respective companies that offer these communication services may also process your personal data and that their privacy notices apply. We have no influence over such data processing by third parties. For further information on how these services process your personal data, please view their privacy notices. 

b.   Who
Recipients of the processed personal data are the respective internal employees and freelancers of ours that are responsible for pursuing our purposes for the processing (e.g. someone from a department that you are contacting with a request). Possible further recipients: the providers of the respective messaging systems;Microsoft Office 365; Atlassian; Discord.

c.   Why
Depending on the specific conversation with you, the personal data can either be processed in order to take steps, at your request, to enter into a contract with us or to perform a contract you have concluded with us. Also, the processing can be necessary for us to comply with legal documentation obligations, or for the purposes of our legitimate interest to respond to your questions, requests, or complaints, or to respond to your mails and calls when you contact us and are not our contractual partner. We may also process your personal data to have proof regarding substantial content of our conversation, including but not limited to cases of potential legal claims on our or your side. 

d.    Legal Basis
The legal basis for processing the personal data in order to take steps at your request prior to entering into a contract with us or to perform a contract you have concluded with us is Art. 6 para. 1 let. b) GDPR. The legal basis for processing the data for compliance with our legal obligations is Art. 6 para. 1 let. c) GDPR. The legal basis for processing the data due to our legitimate interest is Art. 6 para. 1 let. f) GDPR. 

e.   How long
The personal data is stored at least for the time until our contract with you is fully performed. If the personal data has been stored in order to take steps at your request prior to entering into a contract with us, we will store the data for as long as reasons objectively exist to believe that the respective conversation will be continued within the foreseeable future. If your communication is considered a commercial or business letter or is required for compliance with tax regulations, then the storage period will be that necessary to comply with applicable laws or equal to the statute of limitations of the actions that could arise in connection with the processing. 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well.  

4. Visiting our Website

a.   What
When you visit our websites, we process personal data of yours, such as your IP-address, the time of your visit, what browser type you use, which pages on our websites you visit, if applicable, and also the website from where you were referred to our website. 

We also use third party tools to analyse the use of our websites and services, however, specific information on this is provided under section “Third Party Analytics Tools & Consent Management” of this Privacy Notice. 

b.   Who
Recipients of the processed personal data are the respective internal employees and freelancers of ours that are responsible for pursuing our purposes for the processing. Possible further recipients: IT service providers and host providers.

c.   Why
We process this data to display the website correctly in your browser, so you are able to make use of the full functionality of the services and the website content. We also process the data for troubleshooting, should the website not work correctly as well as for security purposes (e.g. to prevent malicious attacks on our website). These are legitimate interests of ours. 

d.    Legal Basis
The legal basis for processing the data is Art. 6 para. 1 let. f) GDPR. 

e.   How long
The data is stored for as long as our legitimate interest is given. For this, the data is stored for the time that we reasonably need to ensure our systems have not been subject to malicious use and to be able to effectively respond to any potential bugs or other malfunctions of the website. 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well.  

5. Prize Money & Other Payments

a.   What
We process your bank details (e.g. IBAN, BIC etc.) together with your first and last name to be able to pay you a remuneration you might be entitled to due to a contract with us or to pay out prize money when you are the winner of a Tournament of ours and have a claim to such prize money according to the respective rules and to comply with legal obligations (e.g. tax laws). Without this personal data we are not able to make the respective payment.

If you have not given us the data yourself, we would like to inform you according to Art. 14 para. 2 let. f) of the GDPR that the sources of the mentioned data can be another person that acts on your behalf (e.g. you are a player or other personnel of a participating team and a team manager with power of attorney hands in your data to us).

b.   Who
Recipients of the processed personal data are the respective internal employees and freelancers of ours that are responsible for pursuing our purposes for the processing. Possible further recipients: financial and IT services; Atlassian; Microsoft; DATEV.

c.   Why
The personal data is processed to perform our obligations of our contract with you, namely the payment of a remuneration or prize money. If a payment is made, the data is processed to comply with legal obligations, such as bookkeeping and taxes.

d.    Legal Basis
The legal basis for processing the personal data for the performance of our contract with you is Art. 6 para. 1 let. b) of the GDPR. The legal basis for processing the data for compliance with our legal obligations is Art. 6 para. 1 let. c) of the GDPR.

e.   How long
The data is stored at least for the time until our contract with you is fully performed. If a payment is made, the data will be stored for as long as the legal obligations we need to comply with require us to store the data or for as long as required to respond to legal claims.

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well.

6. Raffles

a.   What
When you participate in a raffle that we conduct, we process the personal information required for such participation and for sending you your prize if you won. What data specifically is processed depends on the individual raffle you are participating in but commonly includes contact information of yours, such as your name, email address or social media account name. Should you win a prize we will process your contact details (name, address, email address). In some cases, we may require your age to make sure you meet our minimum age requirements. 

Please note that your name and/or nickname can be made public over our media channels (e.g. our social media channels) and channels of a potential partner with whom we cooperate for the raffle (e.g. a sponsor) if you are a winner of a raffle (e.g. if you participate in a raffle that has an official announcement at the end). 

b.   Who
Recipients of the processed personal data are the respective internal employees and freelancers of ours that are responsible for pursuing our purposes of processing your data. Possible further recipients: Microsoft; Atlassian; the partner with whom we may cooperate to conduct the specific raffle in which you participate; providers of raffle solutions.

c.   Why
The purpose of processing your personal data for conducting the raffle and, if necessary, sharing your personal data related to the raffle with the sponsor, is making sure that you can participate properly in the raffle and we perform potential contractual obligations we may have towards you. We also have a legitimate interest in cooperating with our partners and sharing the information with them to enable your participation in the raffle (e.g. sharing your contact details with them so the partner can organize the shipping of your prize, should you not receive it from us directly or so we and our partner can publicly announce you as a winner). 

If you do not conclude a contract with us when participating, but instead with our partner, we have a legitimate interest in receiving specific personal data of yours related to the raffle from our partner and using it to properly conduct the raffle (e.g. to be able to send you your prize we will need your contact details). 

d.    Legal Basis
If you conclude a contract with us regarding the raffle, the legal basis for processing and, if necessary, sharing your personal data with our partner is Art. 6 para. 1 let. b) GDPR. Insofar as the processing is based on our legitimate interest, the legal basis is Art. 6 para. 1 let. f) GDPR. 

e.   How long
If you receive a payment from us as a prize, your data is stored for as long as the legal obligations we need to comply will require us to store the information for, as well as for as long as necessary to respond to or to defend from legal claims. 

If you receive a non-monetary prize from us, we store your information for 3 years beginning with the end date of the raffle. 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well. 

7. Surveys

a.   What
You can participate in surveys we may offer. Such surveys can either be accessible directly on our website or we may contact you via email or direct message to participate in a survey. In this case we process your IP address and the data you enter when answering the survey (e.g. a comment you make in a comment section, or a choice of a multiple choice question) and if we contact you via email or direct message to participate in a survey we process your email address and your name to address you personally. 

b.   Who
Recipients of the processed personal data are the respective internal employees and freelancers of ours that are responsible for pursuing our purposes of processing your data. Possible further recipients: Sendinblue; Microsoft.

c.   Why
The purpose of processing your personal data for conducting the survey is improving the customer and user experience by respectively improving our products and services according to the answers of the survey. Such surveys can be considered as conducted for advertising purposes of ours. 

d.    Legal Basis
For advertising purposes, we will only use your e-mail address without your consent if we have received it from you in connection with a purchase of products or services of ours, and in accordance with applicable laws and on the basis of Art. 6 para.1 lit. f) GDPR. We have a legitimate interest in offering small surveys for the services and products of ours that are similar to products and services of ours you have purchased or made use of so we have information about your purchasing or user experience and can offer you even more attractive products and services in the future. You can at any time object to receiving such information that is not related to a newsletter subscription of yours free of charge. 

For other surveys than these, we will ask you for your consent to process the data when conducting the service. In such case the legal basis is your consent according to Art. 6 para. 1 let. a) GDPR. 

e.   How long
Data that we have obtained from surveys based on our legitimate interest is stored for as long as our legitimate interest applies. This depends on the number of participants and importance of the survey. 

Data that we have obtained from surveys based on consent are stored until you withdraw your consent. You can at any time withdraw your consent. If you want to declare your withdrawal, please let us know under the following email-address: datenschutz@freaks4u.de. Please note that the withdrawal does not affect the lawfulness of processing of the data based on the consent before its withdrawal. If you are under the age of 16, the holder of parental responsibility for you (e.g. your parents) must give his/her/their consent or authorize your consent. Please contact us regarding this in such a case. 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well. 

8. Newsletters

a.   What
You can request the receipt of our email newsletter which includes information about products, services, special offers or invitations to participate in various programs. To send you the newsletter we process your email address and name and statistical information on the reception of the newsletter by you. Additionally, we may add information on your interests to our newsletter database to personalize the newsletter you receive (e.g. if you have signed up for a newsletter in connection with a specific event we will add the information to our database that you are interested in such events). 

We may also offer you the possibility to sign up for the newsletter of a partner of ours on a website that we manage for our partner (e.g. tournaments which we jointly conduct with a partner). In such case we collect and share the relevant personal data of yours that our partner requires to send you its newsletter. 

Apart from a newsletter subscription we may send you information regarding Dreamhack and F4UG products and services if we have received your email address or direct messaging in connection with products or services of ours and we advertise products or goods of ours that are similar to such you have already purchased or used. 

Included in a newsletter is a so-called “web-beacon”, a pixel-sized file which is retrieved from our server when the newsletter is opened or from its server in the case of the use of a mailing service provider. As part of this, technical information, such as information about the browser and your system, as well as your IP address and time will be collected. This information is intended to improve the technical performance of the service based on the technical data or the target groups and your reading behaviour based on locations (which can be determined with the help of the IP address) or the access times. Likewise, it is determined if and when the newsletters are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. This is based on recognizing the reading habits of our users and adapting our content to them or sending different content according to the interests of our users. 

b.   Who
Recipients of the processed personal data are the respective internal employees and freelancers of ours that are responsible for pursuing our purposes for the processing. Our newsletter is maintained by us. Possible further recipients: Sendinblue; Atlassian; Microsoft. 

If you sign up for the newsletter of a partner over a website we manage for such partner, the partner is a recipient of your data. Possible further recipients: Sendinblue. 

c.   Why
The purpose of processing the personal data is to keep you updated on our products, services, special offers or invitations to participate in various programs or tournaments via email, according to your wish to receive the newsletter and improve your user experience with our services and products. This purpose also applies to information we may send you that is not part of a newsletter subscription when we advertise products or goods of ours that are similar to such you have already purchased or used. 

We also have a legitimate interest in providing you the opportunity to receive a newsletter with information about events, services and products offered by F4UG. 

The purpose for collecting and sharing your information with our partner, should you sign up for partner’s newsletter over a website we manage for the partner, is to comply with your wish that the partner can send you its newsletter. 

d.    Legal Basis
The legal basis for processing your personal data for the newsletter you subscribed to is your declaration of consent, in accordance with Art. 6 para. 1 let. a) GDPR. 

For information we may send you that is not part of a newsletter subscription, we will only use your e-mail address and name without your consent if we have received it from you in connection with a purchase of products or services of ours, and in accordance with applicable laws on the basis of Art. 6 para.1 lit. f) GDPR. We have a legitimate interest in informing you about attractive offers for you and to win you over as a customer or user or to receive information about your purchasing and user experiences regarding services and products of ours that are similar to products and services of ours you have purchased or made use of so we can offer you even more attractive products and services in the future. You can at any time object to receiving such information that is not related to a newsletter subscription of yours free of charge. 

As far as consent is not a legal basis for processing of the data is based on our legitimate interest and therefore on Art. 6 para. 1 let. f) GDPR. 

The legal basis for sharing data with a partner, should you sign up for its newsletter over a website we manage for a partner of ours is Art. 6 para. 1 let. a) GDPR. 

e.   How long
Data that we use to send information based on our legitimate interest will be stored as long as our legitimate interest exists, and you have not objected. In case of an objection, your data will be blocked for such use and kept only as long as necessary to comply with our legal obligations. 

The personal data will be stored for as long as you do not withdraw your consent. You can at any time withdraw your consent. If you want to declare your withdrawal, please click on the  “unsubscribe” button included in all our communications or let us know under the following email-address: datenschutz@freaks4u.de. Please note that the withdrawal does not affect the lawfulness of processing of the data based on the consent before its withdrawal. If you are under the age of 16, the holder of parental responsibility for you (e.g. your parents) must give his/her/their consent or authorize your consent. Please contact us regarding this in such a case. 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well. 

9. Videos & Photos at Live Events

a.   What
At our live events (e.g. e-sports tournaments or in person events) videos may be made and photographs may be taken. If you visit one of these events (e.g. as part of the audience, as a player or personnel of a team), it is possible that you will appear in such videos and photographs. Videos and photographs are published by us over our websites (e.g. the website of the specific event), or over other public media channels (e.g. Twitch).

In such case, we process your personal data (visual image, spoken word) by storing and using the videos and photos (e.g. publicly broadcasting the event live on TV or online-platforms or making videos and/or photos publicly accessible on demand online after the event) that include this data.

b.   Who
Recipient of the processed personal data can be anyone that watches the event or views the videos and/or photos, either live or over media channels (e.g. online video streams) and platforms that provide these channels (Twitch, Google, YouTube).

c.   Why
The data is processed to conduct the event as a broadcasted live event (linear and digital), for marketing/advertising purposes, for protecting the photographer’s artistic expression, to ensure a reasonable quality standard of the event and a good viewer experience (e.g. capturing the reaction of the audience) and through this fulfilling the interest of fans and the general public in esports, and for the internal and external documentation and communication of the event. These are our legitimate interests. 

d.    Legal Basis
The legal basis for processing the data is Art. 6 para. 1 let. f) GDPR.

e.   How long
Your personal data will be stored by us as long as it is covered by our legitimate interests. The storage period is determined by the necessity of the establishment, exercise or defense of legal claims (Art. 17 para. 3 let. e) GDPR), especially regarding our intellectual property rights in the video and photo material (e.g. copyrights). Please note that we have no influence on the storage of public available data by other third-party controllers (e.g. other websites unrelated to us).

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well.

10. Social Media Presences

a.   What
We have presences on social media platforms such as Facebook, Instagram and Twitter that help us connect to our fans and the esports community. We may also cooperate with some of our partners and maintain social media presences for games they publish or tournaments they host. 

When you interact with a social media presence of ours (e.g. you comment a post of ours or write on our timeline), we process your name/nickname, profile picture and other personal data that your account may publicly display as well as personal data that you provide e.g. in a comment or post of yours. 

b.   Who
Recipient of the processed personal data can be anyone that watches the event or views the videos and/or photos, either live or over media channels (e.g. online video streams) and platforms that provide these channels (Twitch, Google, YouTube).

c.   Why
The data is processed to conduct the event as a broadcasted live event (linear and digital), for marketing/advertising purposes, for protecting the photographer’s artistic expression, to ensure a reasonable quality standard of the event and a good viewer experience (e.g. capturing the reaction of the audience) and through this fulfilling the interest of fans and the general public in esports, and for the internal and external documentation and communication of the event. These are our legitimate interests. 

d.    Legal Basis
The legal basis for processing data based on our legitimate interest is Art. 6 para. 1 let. f) GDPR.

e.   How long
The data is stored for as long as we maintain the respective social media presence and you do not decide to delete your account or the respective post, comment or other interaction with us on the social media presence. 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well. 

11. Data of Minors

a.   What
If you are the legal guardian of a minor who is under the age of 16 we may require that you consent to the processing of the minor’s personal data or authorize that the minor consents him/herself to the data processing. In such a case we process your name and email address together with the personal data of the minor to have proof that we obtained your consent as legal guardian.

b.   Who
Recipients of the processed personal data are the respective employees and freelancers of ours that are responsible for obtaining the consent. Possible further recipients: Atlassian; Microsoft; Hellosign.

c.   Why
We process the data to be able to prove that we have complied with applicable data protection rules that require the legal guardian to consent to/authorize the processing of personal data of a minor. 

d.    Legal Basis
The legal basis for processing the data is Art. 6 para. 1 let. c in connection with Art. 8 para. 1 GDPR. 

e.   How long
The data is stored until you withdraw your consent/authorization. In the case of a withdrawal, we store the data for 3 years and one month starting with the end of the year in which you withdrew your consent. 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well.

12. Job Applications

a.   What
We process the personal data you provide when applying for a job or to work together with us or as a freelancer (e.g. your name, date of birth, address, your CV, etc.). 

b.   Who
Recipients of the processed personal data are the respective employees of ours that are responsible for pursuing our purposes for the processing (e.g. HR employees, your potential line manager and management). Possible further recipients: Personio; Microsoft; Atlassian. 

c.   Why
The data is processed to decide if a contract with you will be concluded or, if you already have a contract with us, to perform our obligations or terminate the contract. 

d.    Legal Basis
The legal basis for processing the personal data is Art. 88 para. 1 GDPR or Art. 6 para. 1 let. b) GDPR (for applicants applying as freelancer). 

e.   How long
If we work together with you, your data is stored for the applicable statutory storage periods. 

Should we not decide to work together with you, we will delete your application after the statute of limitations of claims that could arise, so we are able to defend ourselves against potential claims. 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well.  

13. Press Releases

a.   What
We may process personal data of yours when issuing press releases in connection with a Tournament that contain information about you and your performance in the Tournament. This can include especially your first and last name, nickname, nationality, picture, quotes and information about your performance in the Tournament (e.g. scores etc.). 

b.   Who
Recipient of the processed personal data can be anyone that reads or watches the media channels on which the press releases are issued (e.g. our website, updates for journalists), either live or over media channels (e.g. online video streams) and platforms that provide these channels. 

c.   Why
Since our Tournaments are events of public interest, the data is processed for the purpose of issuing press releases about your participation in our Tournaments over media channels and for editorial purposes connected to this. 

d.    Legal Basis
The legal basis for processing the data is Art. 6 para. 1 let. f) GDPR. It is a legitimate interest of ours to ensure a good experience of the esports audience and the general public to report on Tournaments as well as participants of and events in connection with such Tournaments. If reporting about you is part of an obligation in your contract with us, the legal basis for the data processing can additionally be Art. 6 para. 1 let. b) GDPR. Without the processing of the data we could not fulfill such an obligation. 

e.   How long
If data is processed to perform the contract between you and us, the storage period can be determined by the term of your contract. Personal data that is processed based on our legitimate interest, will be stored as long as it is covered by such legitimate interest. The criteria to determine this are especially the importance of the Tournament and events connected to it in the esports community, the public interest in the Tournament and events connected to it. The storage period can also be determined by the necessity of the establishment, exercise or defense of legal claims (Art. 17 para. 3 let. e) GDPR), especially if the press releases are protected by intellectual property rights of ours (e.g. copyrights). 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well. 

14. Data Subject Requests

a.   What
When you contact us to make use of your data subject rights (see section “Your Rights”), we process your name, email address and any additional information you provide us in your request or that we may need to make your request effective. 

 To make sure we can correctly identify you we may ask you to provide a copy of your passport or other identification document (“ID”). When you upload this information, we will process the personal data of yours stated on the ID, namely: your name, birth date, address and validity of the document. Please make any other data on the copy of your ID-document unreadable (e.g. serial number of the document) before the upload and mark the document as copy (e.g. add the imprint “copy” on it). 

We kindly ask you to only use the portal in which your ticket was created for you after addressing us over datenschutz@freaks4u.de to upload the ID. Documents provided through any other channel are not accepted and will be deleted by us. 

b.   Who
Recipients of the processed personal data are the respective employees and freelancers of ours that are responsible for answering your request. Possible further recipients: Atlassian; Microsoft. 

Only the designated employees of ours entrusted with privacy and data protection matters, and possibly employees that maintain our IT infrastructure, will view your ID. Processor processing your data on our behalf is Atlassian and Microsoft. 

c.   Why
The personal data of your request is processed for the purpose of answering your request – if necessary also with the help our Subsidiaries or to answer such request for the Subsidiaries should it be directed at it – as well as the purpose of proving our compliance with the GDPR by helping you as data subject exercise your rights set out in the GDPR. This is also a legitimate interest of ours. 

We process the ID data to verify your identity. This is required to prevent cases of fraud committed by using false identities. We have a legitimate interest in this purpose that outweighs a potential contrary interest of yours to not disclose this information, since we have a responsibility in protecting our users’ and partners’ personal data and since we will delete your ID promptly after we have verified your identity. The ID will not be used for any other purposes. 

d.    Legal Basis
The legal basis for processing the data of your request and – if necessary – sharing this information with the Subsidiaries is Art. 6 para. 1 let. c) in connection with Art. 12 GDPR as well as Art. 6 para let. f) GDPR. 

The legal basis for ID verifications is Art. 6 para. 1 let. f) GDPR. 

e.   How long
The data of your request is stored for 3 years and one month starting with the end of the year in which you made your request. 

 The uploaded ID will be deleted promptly after we have verified your identity. 

 If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well. 

15. Third Party Analytics Tools, Tracking Technologies (Cookies) & Consent Management

We use third party tools to analyse the use of our websites and services, to provide a better user experience for you when you use these or to display ads that may interest you. To make it easy for you to inform yourself about these tools and to withdraw a potentially necessary consent of yours or object to a processing based on a legitimate interest of ours, we have implemented consent management tools (Usercentrics). You will find all information on what data is processed, who the recipient is, the purpose, legal basis and storage period in the banners or pop-ups where we ask for your consent. You can also withdraw your consent using the tool. 

You can at any time of course also contact us at datenschutz@freaks4u.de for further details or if you want to declare your withdrawal or objection to us processing your personal data. 

16. B2B Partnerships

a.   What
When we communicate and conclude contracts with you as a business partner (B2B only), we store certain personal data of yours in our B2B database, such as your business card, business email address, name, position and signature of the legal representative of the business or of the contact person for a contract, and other business information related to our (potential) partnership or contract with you. 

b.   Who
Recipients of the processed personal data are the respective employees and freelancers of ours that are responsible for pursuing our purposes for the processing. Possible further recipients: Microsoft; Salesforce. 

c.   Why
The personal data is processed to decide if a contract with you will be concluded, to negotiate a contract with you or, if you already have a contract with us, to perform our obligations or terminate the contract. 

We also have a legitimate interest in processing this data of yours to be able to remain in contact with you for business purposes. We have a legitimate interest in processing the information of B2B contacts with whom we have a contractual relationship or objectively likely will have a contractual relationship with in the future, since this is not only necessary to properly perform the contract between us and them, but also to facilitate communication with them concerning their cooperation with us. We also have a legitimate interest in processing the personal data of the B2B contacts who are currently not commissioned by us and not have been commissioned in the past, since it facilitates getting in touch with them for future projects. 

d.    Legal Basis
The legal basis for processing the personal data to enter into or perform a contract with you is Art. 6 para. 1 let. b) GDPR. The legal basis for processing the personal data based on our legitimate interest is Art. 6 para. 1 let. f) GDPR. 

e.   How long
Documentation regarding B2B contacts that we have concluded a contract with which is considered a commercial or business letter may be stored to comply with legal obligations and for a period equal to the statute of limitations of the claims that could arise in connection with the data processing. 

 Personal data of B2B contacts with whom we have no contract and have no objective reasons to believe we will be concluding a contract with, in the near future, will be deleted from our database after 3 years of inactivity. 

If the data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well. 

17. Legal Work

a.   What
F4UG legal department, including the data protection department, works with Dreamhack to assess and manage legal matters. If a matter or dispute between you and us requires relevant legal review, we process the data relevant to the matter or dispute. In particular, this may include your name, e-mail address and contact details, as well as information on the dispute or claim. 

b.   Who
The recipients of the personal data processed are F4UG´s legal department and our respective employees and freelancers responsible for processing the matter. Possible further recipients: Microsoft; Atlassian.  

c.   Why
The purpose of the processing of the personal data by us is the effective and uniform handling of legal matters. This is a legitimate interest of ours. In addition, the data processing may serve to conclude and perform contracts with you. 

d.    Legal Basis
As far as the data processing concerns the conclusion or performance of a contract with you, the legal basis of the data processing is Art. 6 para. 1 let. b) GDPR. 

If the data processing is based on a legitimate interest, the legal basis is Art. 6 para. 1 let. f) GDPR.

e.   How long
The storage period for data processed for the purpose of handling legal matters or disputes is governed by the relevant limitation period, so that we can sufficiently defend ourselves against claims, or by the relevant legal obligations to retain documents, in particular regarding tax, commercial, civil and employment related disputes. 

If the personal data is also processed for another purpose set out in this Privacy Notice, the storage period regarding that purpose applies as well. 

18. Processing of Verification Data

a.   What
In specific cases we may ask you to provide us a copy of your ID (e.g. passport or other document of identification) so we can properly verify your identity. These cases are: 

  • When you participate in certain esports tournaments as a user, pro player or personnel of a team we may need to verify your identity and that you comply with the rules of participation regarding age and country of residence; 
  • Change requests for F4UG Trusted accounts; 
  • You lost your account login credentials and can’t reset your account via email. 

In these cases we process the respective data stated on your ID-document (e.g. passport or other document of identification) that you provide us. The data required from the ID-document for the age check includes: first and last name, birth date, country of residence (your address can be required if you request the change of your address of a F4UG Trusted account or account recovery). Please make any other data on the copy of your ID-document unreadable (e.g. serial number of the document) before the upload and mark the document as copy (e.g. add the imprint “copy” on it). Apart from this data, we process any additional information you enter into the upload form which we require to understand the context of your request. 

In the mentioned cases we cannot comply with your request without receiving the required information from you. 

If you have not given us the data yourself, we would like to inform you according to Art. 14 para. 2 let. f) GDPR that the sources of the mentioned data can be another person that acts on your behalf (e.g. you are a player or other personnel of a participating team and a team manager with power of attorney hands in your data to us). 

b.   Who
Recipients of the personal data are the respective internal employees of ours that are responsible for pursuing our purposes for the processing. Possible further recipients: host providers; Atlassian; Microsoft. 

c.   Why
Depending on your specific case, we process the data to: 

  • verify your identity, age and country of residence. This is required to comply with youth protection law, as well as to ensure our own rules regarding the age and country of residence of participants are followed and to prevent cases of fraud committed by using false identities; 
  • verify that you are the legitimate person requesting to apply changes to your Trusted F4UG account; or 
  • verify that you are the legitimate person requesting access to an account to which regular access is not possible. 

We have a legitimate interest in these purposes. 

d.    Legal Basis
The legal basis for processing the data is Art. 6 para. 1 let. f) GDPR as the purposes for the processing are in our legitimate interest. 

e.   How long
The uploaded ID-document will be deleted after we have verified your identity. 

19. Video and Audio Material

Video and Audio Material of Professional Players for Preventing and Sanctioning Cheating 

a.   What
We generally process your image and spoken word as set out under Sect. 9 for presenting a Tournament you participate in live on stage or broadcasting it over media channels (e.g. live streams). 

In addition to this we may process your image and spoken word for additional video and audio material, if you are a pro player or personnel of a pro team participating in a Tournament. This includes 

  • recordings of the team conversation (e.g. over your dedicated team channel); 
  • footage of player cams (e.g. a webcam that shows you playing at your computer); 
  • room footage and conversations (e.g. while you play in your team HQ). 

b.   Who
Recipients of the processed personal data are the respective internal employees and freelancers of ours and of any joint controllers that are responsible for pursuing our purposes for the processing. Possible further recipients: IT-services; Microsoft. 

Depending on the respective Tournament you participate in, it is possible that Subsidiaries of ours process personal data. 

c.   Why
Processing data from team conversations, player cams as well as room cams and mics during your performance in the Tournament is based on our contract with you as a participant. 

We need to prevent cheating and fraudulent actions. If competitions lack fairness and security, competitive games will lose players as well as audiences. Processing the data to prevent cheating and fraudulent actions helps to ensure a fair and rule-compliant Tournament for you, the other participants and the audience and through this ensuring the integrity and credibility of our Tournaments as well as esports itself as a fair competitive sport. Maintaining the fairness of the Tournament is a core issue of our contract with the players and teams. 

d.    Legal Basis
The legal basis for processing the data for fraud prevention is based on Art. 6 para. 1 let. b) GDPR.

e.   How long
Data that is processed based on Art. 6 para. 1 let. b) GDPR is stored at least for as long as it is necessary to perform the contract between you and us. The data will be deleted after potential claims against you are time barred. 

20. Video and Audio Material of Professional Players for Promotion

a.   What
We generally process your image and spoken word as set out under Sect. 9 for presenting a Tournament you participate in live on stage or broadcasting it over media channels (e.g. live streams). 

In addition to this we may process your image and spoken word for additional video and audio material, if you are a pro player or personnel of a pro team participating in a Tournament. This includes 

  • recordings of the team conversation (e.g. over your dedicated team channel); 
  • footage of player cams (e.g. a webcam that shows you playing at your computer); 
  • room footage and conversations (e.g. while you play in your team HQ). 

b.   Who
Recipients of the processed personal data are the respective internal employees and freelancers of ours that are responsible for pursuing our purposes for the processing. Possible further recipients: IT-services; Microsoft; anyone that watches the Tournament, either live or over media channels (e.g. online video streams, our official photo platform) and platforms that provide these channels (Twitch, Google, YouTube). 

Depending on the respective Tournament you participate in, it is possible that Subsidiaries of ours process personal. 

c.   Why
Processing data from team conversations, player cams as well as room cams and mics during your performance in the Tournament is based on our contract with you as a participant. The data is processed to conduct the Tournament as a broadcasted live event and to ensure a reasonable quality standard of the Tournament. 

If you ask us to record your team conversation for training purposes, we have a legitimate interest in recording and providing the material to you. 

Should you have agreed to it, we may use your voice recording for commercial purposes (e.g. for advertising products that are not related to Dreamhack or Dreamhack tournaments or events). 

d.    Legal Basis
The legal basis for processing the data to conduct the Tournament as a broadcasted live event is Art. 6 para. 1 let. b) GDPR. 

The legal basis for processing the data for recording of your team conversation for training purposes, is based on your consent according to Art. 6 para. 1 let. a) GDPR. 

The legal basis for processing your voice and other recordings for commercial purposes (e.g. for advertising products that are not related to Dreamhack or Dreamhack tournaments or events) is based on your consent according to Art. 6 para. 1 let. a) GDPR. 

e.   How long
Data that is processed based on Art. 6 para. 1 let. b) GDPR is stored at least for as long as it is necessary to perform the contract between you and us. The data will be deleted after potential claims against you are time barred. Any material where we own intellectual property rights in (e.g. photos) will be kept until expiry of the rights (e.g. copyrights). 

Should we have recorded the material solely for your training purposes (based on your consent), we will delete it after we have submitted it to you. 

Personal data that is processed based on your consent (e.g. for advertising products that are not related to Dreamhack or Dreamhack tournaments or events) will be stored for as long as you do not withdraw your consent. You can at any time withdraw your consent. If you want to declare your withdrawal, please let us know under the following e-mail address: datenschutz@freaks4u.de. Please note that the withdrawal does not affect the lawfulness of processing of the data based on the consent before its withdrawal.