This Data Protection Statement (information obligation according to Art. 13 General Data Protection Regulation - GDPR) refers to the processing of personal Data in the course of the usage of the app “Border Zone”.
General information on Data Processing
The app “Border Zone” (hereinafter also referred to as “app“) is an offer of the Prussian Palaces and Gardens Foundation Berlin-Brandenburg. It may be downloaded from the Apple Store as well as the Google Play Store and installed on a mobile phone.
The providers of the app stores are responsible for data processing on the respective platform. Die Prussian Palaces and Gardens Foundation Berlin-Brandenburg is responsible for the app, as such.
For further information:
Apple Store: https://www.apple.com/de/legal/privacy/data/de/app-store/
Google Play Store: https://policies.google.com/privacy?hl=de
1. Categories of the personal data processed
Information on the session: IP address as well as date and time of the request, device identification numbers (so-called UDUD – unique device identifiers), device type, country of app installation, game identification number (app ID), checksum of the transferred data
Location data: GPS coordinates of the device in real time
Camera function: Live camera images
User information and scores: unique user identification (user ID, in Apple only)
Device identification/Device ID: Device-ID, i. e., a unique hexadecimal character string for the respective device
2. Scope of the processing of personal data
During the download of the app the necessary information is transferred to the app store, i. e., especially e-mail address and customer number of your account, time of the download and the individual device code number. We have no influence on this data collection and are not responsible for it. We process the data only as far as it is necessary for downloading of the mobile app to your mobile device.
“Border Zone” is a localised digital game. That means that the GPS location of the user is needed for them to move within the game and to be located at the same time.
“Border Zone” uses AR functionalities. To this end 3D objects are placed in real space by means of the smartphone or tablet camera. The camera is used so that the real world may be seen.
“Border Zone” saves the progress of users locally on the device. Additionally, by means of the camera a picture that mixes virtual and real elements is taken within the game. Apple calls this “user-generated content” or user contents. For this purpose, the “User Content Gameplay” authorisation is needed. This is an Apple-specific authorisation.
We use Unity3D for “Border Zone”. This is a game engine. It sends the device ID to the company who develops Unity3D: Unity Technologies. This is a part of the game engine and cannot be adapted. See below for a further explanation on this.
3. Legal foundation for the processing of personal data
From users who wish to use our mobile app we collect the personal data that are necessary for us to offer you the functions of our mobile app and to ensure stability and security (legal foundation is Art. 6 Par. 1 S. 1 lit. f GDPR).
4. Data deletion and storage period
The personal data of the person concerned that are created in using the app will be deleted or blocked as soon as the requirement of storage ceases. A requirement may persist especially when the data are still needed to perform contractual services, to be able to examine and grant or ward off warranty and guarantee claims, as the case may be. In the case of statutory storage obligations, a deletion will be considered after expiry of the respective storage obligation.
5. Objection and deletion possibility
The collection of the data for providing the app and the storage of the data are mandatorily necessary for the usage of the app. Hence there is no objection possibility on the part of the users.
To which recipients will the data be passed?
As providers of “Border Zone” neither the Foundation nor the Cologne Game Lab have access to these data.
“Border Zone” is built by means of the game developing platform Unity. In the course of this, software modules and libraries that originate from Unity themselves or third parties and become an inherent part of “Border Zone” (so-called game engine) are used. During the execution of the app a processing of the personal data by Unity themselves may proceed, i. a., device identification numbers (so-called UDUD – unique device identifiers, IP address) are processed. Additionally, data such as the device type, the country of the app installation, game identification number (app ID), as well as the checksum of the transferred data, will be processed.
Data processing outside the European Union
The app transmits data to recipients outside the EU. The recipient is Unity Technologies, 30 3rd Street, San Francisco, CA 94103, United States.
An order processing contract exists with the provider. In addition, EU standard data protection clauses according to Art. 46 GDPR were concluded. Upon request, a copy of the EU standard data protection clauses will be provided by the responsible person.
Your rights as “persons concerned”
You have the right of access to information on the personal data concerning you that are processed by us, according to Art. 15 GDPR. In case of a request for access that is not made in writing we ask for understanding that we then, if necessary, will request evidence proving that you are the person you claim to be.
Furthermore, you have the right to rectification or erasure or to restriction of processing as far as you are legally entitled to, according to Art. 16, 17 and 18 GDPR.
An automated decision-making within the meaning of Art. 22 GDPR will not be employed.
Furthermore, you have a right of objection against the processing within the scope of the statutory provisions. The same applies to a right to data portability.
You have the right to lodge a complaint about the processing of personal data by us with a supervisory authority for data protection.
