Sunrise Roots – Privacy Policy

Your personal data (e.g. title, name, house address, e-mail address, phone number, bank details, credit card number) are processed by us only in accordance with the provisions of German and European data privacy laws. The following provisions describe the type, scope and purpose of collecting, processing and utilizing personal data.

This data privacy policy applies to our web pages and – where mentioned accordingly – for our games.

Responsible controller/contact information

The controller responsible in accordance with data protection laws is:

Flying Sheep Studios GmbH
Cologne Game Haus
Deutz-Mülheimer Str. 30
50679 Cologne

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us by email at privacy@flying-sheep.com.

Collection of data

Collection of data by automated means on our website

When accessing our website, your device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us:

- Date and time of accessing our website
- Browser type and version
- Operating system
- URL of the previously visited website (Referrer)
- Amount of data sent 

These data are stored exclusively for technical reasons and are not matched to a specific person at any time.

Contact form / Enquiries

If you send us enquiries via our contact form or by email, your entries from the contact form including the contact data you provide there will be stored and used for processing the enquiry. You do not have to enter your real name, a pseudonym is sufficient.

We collect this data in order to be able to receive and process your request, Art. 6(1) point (b) GDPR. If we process your data as described above for the purpose of receiving and processing your request, you are obliged to make this data available to us. Without this data we are not able to provide you with the contact form or process your enquiries.

We store your enquiries for a period of 3 years from the end of the year in which we have received your enquiry or until the end of a possible legal dispute based on our legitimate interest to be able to assert or defend against legal claims which might arise from your request (Art. 6(1) point f GDPR).

Cookies and Local Storage

We store so-called "Cookies" and Local Storage in order to offer you all features of our website and to make the use of our websites more convenient. Cookies are small files that are stored on your computer with the help of your Internet browser. Local Storage is a special storage space that your internet browser provides to websites to store data. If you do not wish the usage of Cookies or Local Storage, you can prevent the storage of Cookies or Local Storage on your computer by appropriate settings of your Internet browser. Please note that the functionality and range of functions of our website-offer may be reduced as a result. 

Specifically, we use the following types of Cookies / Local Storage:

- Session Cookies: These cookies are required for the technical operation of our website and are automatically deleted after closing your browser.
- Third party Cookies: Used for pseudonymous usage statistics (see below).
- Local Storage: We store information about your user account in local storage.

These Cookies cannot identify you as a person. In any case, the use of Cookies is justified on the basis of our legitimate interest in a demand-based design as well as in the statistical evaluation of our website (Art. 6(1) point (f) GDPR).

Game Analytics

We use GameAnalytics, a service provided by GameAnalytics ApS. GameAnalytics allows us to get statistical insights in the use of our game. For this purpose, GameAnalytics collects and stores pseudonymous data such as Platform (automatic), Device (automatic), OS (automatic), IP address (automatic) – used to infer country information. The collection of data is subject to the following Privacy Terms: https://gameanalytics.com/privacy.

The use of GameAnalytics is justified on the basis of our legitimate interest in a demand-based design as well as in the statistical evaluation of and efficient advertising on our games, Art. 6(1) point (f) GDPR.

Transfer of personal data to third parties

Your personal data will be transferred to third parties in the following cases:

If it is necessary to discover or investigate any illegal use of our services or for prosecution, personal data will be forwarded to the law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are specific indications of illegal or abusive activity. A transfer may also take place if this serves to enforce terms of use or other agreements. We are also legally obliged to provide information to certain public authorities upon request. These are law enforcement authorities, authorities that prosecute fined administrative offences and the tax authorities.

The transfer of this data is justified by our legitimate interest in combating abuse, prosecuting criminal offences and securing, asserting and enforcing legal claims and that your rights and interests in protecting your personal data do not prevail, Art. 6(1) point (f) GDPR.

For the provision of services, we are depending on contractually affiliated external companies and external service providers set out in this privacy policy ("processors"). In such cases, personal data will be transferred to these processors in order to enable them to process the data further. These processors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The processors may only use the data for the purposes specified by us and are also contractually obligated to treat your data in accordance with this privacy policy and applicable data protection laws.

In particular, we are using the following processors:

- Microsoft Corporation (Microsoft Azure Hosting)
- GameAnalytics ApS (GameAnalytics)

These processors are located in the United States of America. The European Union does not consider the data protection level in the US as adequate. However, all processors are certified under the EU-U.S. Privacy Shield (see https://www.privacyshield.gov).

As our business develops, the structure of Flying Sheep GmbH may be altered by changing its legal form, establishing, buying or selling subsidiaries, parts of companies or components, or by transferring the operation of our website as a whole to a new company. In such transactions, your personal data may also be passed on together with the part of the company to be transferred. Whenever personal data is passed on to third parties to the described extent, we ensure that this is done in accordance with this data protection declaration and the relevant data protection laws.

A possible transfer of data is in these cases justified by our legitimate interest in adapting our company form and adapting the operation of our website to the economic and legal circumstances as required and that your rights and interests in the protection of your personal data do not prevail, Art. 6(1) point (f) GDPR.

Automated individual case decisions and measures for profiling

We do not use automated processing procedures to bring about a decision or profiling.

Your rights as data subject

Right of access

You have the right to request information from us at any time about the personal data we have processed concerning you within the scope of Art. 15 GDPR. You can submit an application by mail or email to the above addresses.

Right to rectification of inaccurate data

You have the right to have us correct any personal data concerning you immediately if it is inaccurate. To do so, please contact the above addresses.

Right to erasure

You have the right to have us delete personal data concerning you under the conditions described in Art. 17 GDPR. These conditions provide in particular for a right of erasure if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed and in cases of unlawful processing, the existence of an objection or the existence of an obligation to erase under Union law or the law of the Member State to which we are subject. With regard to the period of data storage, please refer to section 9 of this privacy policy. To exercise your right to erasure, please contact the above addresses.

Right to restriction of processing

You have the right to have us restrict processing of your personal data in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period necessary for the verification of the accuracy and in the event that the user requires limited processing in the case of an existing right to erasure instead of erasure; furthermore in the event that the data is no longer required for the purposes pursued by us but the user needs it for the establishment, exercise or defence of legal claims and if the successful exercise of an objection is still disputed between us and the user. To exercise your above right, please contact the above addresses.

Right to data portability

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR. To exercise your above right, please contact the above addresses.

Right to object

You have the right to object on grounds relating to your particular situation at any time to processing of your personal data which is based, inter alia, on Art. 6(1) point (e) or (f), according to Art. 21 GDPR. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Right to lodge a complaint

You also have the right to contact a competent supervisory authority in the event of complaints. You can find a list of the competent supervisory authorities at https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

Last Updated: 23 January 2023