Currently there's no shipping to Russia. Sorry! We're working on a solution. Sign up for our newsletter to get notified when shipping is resumed!
Cart (0) Check Out

Privacy policy

1. Responsible entity

The

HYBR Games GmbH

Jordanstr. 2

D-01099 Dresden

E-Mail: info@hybr.co

is responsible according to Art. 4 No. 7 EU Data Protection Basic Regulation (DSGVO).

HYBR Games takes the protection of your data seriously. This data protection declaration informs you about the type, scope and purpose of the processing of personal data and about the rights to which you as a affected person are entitled. If you have any questions on the subject of data protection, please do not hesitate to contact us at any time using the contact details provided.

2. Orders via our Online Shop

The processing of personal data (name, address, contact and payment data) is necessary for the processing of orders via our online shop. We process this data exclusively for the handling of the order and, if desired, for the opening of a customer account.

A passing on of the data takes place to the necessary extent to the company commissioned with the delivery (e.g. DHL) or the service provider commissioned with the payment.

For the operation of our online shop we use Shopify, a service of Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5. Shopify provides an e-commerce platform through which we offer our goods for sale. The data provided during the ordering process will be stored on a Shopify server in the USA. Further information can be found in Shopify's privacy policy at http://www.shopify.com/legal/privacy.

The legal basis for this data processing is Art. 6 para. 1 lit. b) DSGVO. With complete completion of the contract and complete payment of the purchase price, your data will be blocked for further use and, insofar as legal requirements do not require longer storage, deleted. If you have created a customer account, your data will remain stored until you delete the customer account. If no orders are placed via a customer account for more than two years, we will delete the account including the data.

3. Requests by E-Mail

If you contact us via the e-mail address provided, the personal data transmitted along with the e-mail will be stored. These data are processed exclusively for the purpose of answering the request. The legal basis for the processing is Art. 6 para. 1 lit. f.) DSGVO or Art. 6 para. 1 lit. b) DSGVO if the request is directed to the conclusion of a contract. The data will be deleted when the purpose of the processing no longer applies, e.g. the request has been conclusively answered.

You can object to the processing of your personal data at any time by sending an e-mail to info@hybr.co .

4. Cookies

Our website utilizes cookies. Cookies are text files that are stored by the browser on the user's computer system. Cookies enable the browser to be identified when the page is called up again. Cookies can also be used to analyse visits to the website and its use, as well as to play out and measure advertising.

You can control the use of cookies via your browser settings. Depending on the browser you are using, you can deactivate or restrict the use of cookies. Cookies that have already been saved can be deleted at any time. If you have deactivated cookies, you may not be able to use all the functions of our website.

  • We use cookies to make our site user-friendly. For this purpose, the items are stored in the shopping cart and the log-in information. This data is not used for profile building. The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO.
  • We use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), to analyze the use of our website. The information generated by the cookie about your use of this website will generally be transmitted to and stored by Google on servers in the United States. We have activated the IP anonymization function on our website. This means that your IP address will be previously curtailed by Google within the member states of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. After shortening, the IP address can no longer be assigned to a specific user.

Google processes this information on our behalf in order to evaluate the use of our website and compile reports on website activity. The IP address transmitted by your browser will not be merged with other data from Google. Further information can be found in Google's privacy policy at https://policies.google.com/privacy?hl=en.

The use of these analysis cookies serves to improve the quality of our website and our offer. The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO.

You can prevent the storage of cookies by setting your browser software accordingly. In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in https://tools.google.com/dlpage/gaoptout?hl=en available under the following link.

5. Rights of the Individual affected

Individuals who are affected by the processing of personal data have the following rights:

5.1 Right to Information

(1) The person affected shall have the right to obtain from the person responsible confirmation as to whether personal data relating to him or her are being processed; if this is the case, he or she shall have the right of access to such personal data and to the following information:

  1. the processing purposes;
  2. the categories of personal data to be processed;
  3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  4. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
  5. the existence of a right to the rectification or erasure of personal data concerning him or her or to the limitation of the processing by the controller or of a right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. if the personal data are not collected from the data subject, any available information on the origin of the data;
  8. the existence of automated decision-making including profiling in accordance with Article 22 para. 1 and 4 DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

(2) Where personal data are transferred to a third country or to an international organisation, the person affected shall have the right to be informed of the appropriate safeguards in accordance with Article 46 DSGVO in relation to the transfer.

5.2 Right to Rectification

The data subject shall have the right to request the responsible person to rectify without delay any inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

5.3 Right to Cancellation

(1) The person affected shall have the right to request the responsible person to delete personal data concerning him or her without delay and the responsible person shall be obliged to delete personal data without delay if one of the following reasons applies:

  1. Personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. The data subject withdraws his consent on which the processing was based pursuant to Article 6 para. 1 lit. a or Article 9 para. 2 lit. a) DSGVO and there is no other legal basis for the processing.
  3. The data subject objects to the processing under Article 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing under Article 21 para. 2 DSGVO.
  4. The personal data have been processed unlawfully.
  5. The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
  6. The personal data have been collected in relation to information society services offered in accordance with Article 8 para. 1 DSGVO.

(2) Where the responsible person has made the personal data public and is obliged to delete them in accordance with paragraph 1, he shall take reasonable measures, including measures of a technical nature, taking into account the technology available and the costs of implementation, to inform data controllers processing the personal data that a data subject has requested them to delete all links to or copies or replications of those personal data.

(3) Paragraphs 1 and 2 shall not apply to the extent that processing is necessary

  1. the exercise of the right to freedom of expression and information;
  2. to fulfil a legal obligation which the processing requires under the law of the Union or of the Member States to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the field of public health pursuant to Article 9 para. 2 lit. h and i and Article 9 para. 3 DSGVO;
  4. for archival, scientific or historical research purposes in the public interest or for statistical purposes as referred to in Article 89 para. 1, in so far as the law referred to in paragraph 1 is likely to make it impossible or seriously prejudicial to the attainment of the objectives of such processing; or
  5. to assert, exercise or defend legal claims.

5.4 Right to Limitation of Processing

(1) The person affected shall have the right to require the responsible person to restrict the processing if one of the following conditions is met:

  1. the accuracy of the personal data is disputed by the data subject for a period of time which enables the data controller to verify the accuracy of the personal data,
  2. the processing is unlawful and the data subject refuses to erase the personal data and instead requests that the use of the personal data be restricted;
  3. the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the assertion, exercise or defence of legal rights, or
  4. the data subject has lodged an objection to the processing pursuant to Article 21 para. 1 DSGVO, as long as it is not yet clear whether the controller's legitimate reasons outweigh those of the data subject.

(2) Where processing has been restricted in accordance with paragraph 1, such personal data shall not be processed, other than with the consent of the person affected, for the purpose of exercising or defending legal rights or safeguarding the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State, except with regard to their storage.

5.5 Right to Data Transferability

(1) The person affected shall have the right to obtain the personal data concerning him which he has made available to a controller in a structured, common and machine-readable format and shall have the right to communicate such data to another controller without being hampered by the responsible person to whom the personal data were made available, provided that

  1. the processing is based on consent pursuant to Article 6 para. 1 lit. a or Article 9 para. 2 lit. a DSGVO or on a contract pursuant to Article 6 para. 1 b. DSGVO, and
  2. the processing is carried out by automated means.

(2) In exercising his right to data transfer in accordance with paragraph 1, the person affected shall have the right to request that the personal data be transferred directly from one responsible person to another, in so far as this is technically feasible.

The right referred to in paragraph 1 shall not prejudice the rights and freedoms of other persons.

This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

5.6 Right of Objection

The person affected has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him or her carried out on the basis of Article 6 para. 1 lit. e or f DSGVO, including profiling based on these provisions. The responsible person shall no longer process personal data unless he or she can prove compelling legitimate reasons for the processing outweighing the interests, rights and freedoms of the data subject or the processing is for the exercise, exercise or defence of legal rights.

In the context of the use of information society services, notwithstanding Directive 2002/58/EC, the data subject may exercise his right of objection by means of automated procedures using technical specifications.

5.7 Right of Withdrawal

The person affected has the right to revoke his/her declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.

5.8. Right of Appeal to a Supervisory Authority

Every person affected shall, irrespective of any other administrative or judicial remedy, have the right to complain to a supervisory authority, in particular in the Member State in which he or she is staying, at his or her place of work or at the place where the alleged infringement occurred, if he or she considers that the processing of his or her personal data is contrary to this Regulation.

6. Safety

We have taken technical and organizational measures to ensure that your personal information is protected.

7. Status and Update

The status of this data protection declaration is August 2019.