1) Energeenies takes our current and very real concerns about environmental issues and sets out to educate players about them through a fun and rewarding geolocation-type game. By consulting with experts in the field of renewable energy, the game takes good care to fictionally represent and gamify scientific data in a way that stays true to it, while wrapping it up in an easily accessible and highly entertaining game experience.

2) The person responsible within the meaning of data protection law is ENERGEENIES GmbH, with its registered office at Girmes-Kreuz-Str. 55, 41564 Kaarst, Germany, registered at the district court Neuss under HRB 21721. In this document we also refer to ENERGEENIES GmbH as “us”, “we” or “our” and we refer to you as “you” and “your”. You can directly contact us by e-mail at info@energeenies.com.

3) You can reach our data protection officer at dpo@energeenies.com.

4) This “Privacy Policy“ explains how we collect, process and store any personal data belonging to you, meaning information about you which is personally identifiable such as your name, address, telephone number or E-Mail address. Such information is hereinafter referred to as “Personal Information” or “data”.

5) This privacy policy only applies to our Website and App. The information presented also applies to our App, unless otherwise stated or supplemented in figure 10. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your personal data.

6) If you have any concerns about providing data to us or having it used in any manner as set forth in this Agreement you should not use our Services.

7) As set out in the terms and conditions relating to our Services, you must be at least 13 years old to access and use our Services. Insofar as certain countries or platforms apply a higher age of consent for the collection of personal data, ENERGEENIES GmbH requires parental or guardian consent before an Account is created and personal data associated with it is collected.

We automatically collect and store so-called log files data, which your browser transmits to us. These are:

• Browser type/version
• Operating system
• URL of the previously visited website
• URL of the page you are viewing on the website
• IP address of the accessing terminal device
• the name and URL of the requested file
• the amount of data transferred
• the message as to whether the call was successful
• Date and time of access to our website

The collection of this data is necessary for technical reasons. Unfortunately, it is not technically possible to use the website without providing your IP address. The data is collected for pre-contractual purposes or in our legitimate interest to provide you with the content of our website and for prosecution in the event of illegal use of our website.

The use of our website is associated with the creation and use of cookies, as long as you have given us your consent via our banner (see figure Ziff. 2.2). Cookies are small text files that are sent from our web server to the browser of your terminal device and stored there. In most cases the browser of your terminal is set in such a way that it accepts the creation and storage of cookies. You can prevent cookies from being saved by setting your browser accordingly.

The presentation of the cookies will later be structured as follows:

Name	Description	Storage Duration

You can set your browser to being informed when cookies are set and decide individually whether to fully accept them or to only accept them in certain cases or not to accept them at all. If cookies are deactivated, however, the functionality of our website may be restricted.

2.1. Google Analytics
Our website also uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses cookies to help the website analyze how users use the site. The data can be used to create user profiles under a pseudonym. The cookies make it possible to recognize your browser. However, the data collected will not be used to identify you personally and will not be merged with your personal data.

The following cookies will be set and used:

Name	Description	Storage Duration
_ga	Anonymous ID for analyzing page views in Google Analytics	2 years
_gat	Cookie to throttle the request requests	1 minute
_gid	Unique User Identification	24 hours

Google will use this data on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

The data processing associated with analyses of website usage carried out by Google serves the purpose of optimally adapting the website to the needs and wishes of users.

Google and its affiliated companies operate servers worldwide on which personal data can be stored. When transferring data to third countries, Google ensures an adequate level of data protection in accordance with its data protection declaration.

In order to guarantee an anonymized collection of IP addresses, the source code of Google Analytics was extended by the code "_anonymizeIP". The IP addresses are thus only processed in abbreviated form in order to exclude the possibility of personal references. The IP address transmitted by your browser as part of Google Analytics is also not merged with other Google data.

A link in the cookie banner gives you the opportunity to obtain further information about the individual cookies. You can prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google not only through your browser settings, but also by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

By clicking this link an Opt-Out Cookie is set, which prevents that your data are seized by Google.

Please do not delete the respective opt-out cookie as long as you wish to maintain your revocation.

For more information about Google's terms of use and privacy policy, please visit the links below:

• to Google: https://policies.google.com/privacy?hl=en
• to Google Analytics: https://marketingplatform.google.com/about/analytics/terms/de/ https://www.google.com/intl/de/analytics/learn/privacy.html

2.2. Cookie Banner
If you give us permission to set and use tracking cookies via our cookie banner, you have made the following declaration:

"I consent to ENERGEENIES GmbH, Girmes-Kreuz-Str. 55, 41564 Kaarst, Germany, using tracking cookies to optimize its website and to analyze my usage patterns using Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. ENERGEENIES GmbH will pass this information on to Google Ireland Limited, whereby my IP address will be anonymized as soon as possible. The information transmitted by Google to ENERGEENIES GmbH does not allow any conclusions to be drawn about my person. I can revoke this consent at any time with effect for the future, without affecting the legality and permissibility of the cookies set and used up to the time of exercising the revocation. Further information can be found in the data protection declaration".

We are present on various platforms and social networks. This enables us to get in touch with our users and interested parties active there and to inform them about our game. The terms and conditions and data protection information of the respective operators apply on the respective platforms. By maintaining a presence there, we are jointly responsible with the operator in the sense of data protection law.

If you visit the presences held by us, we process your data, which you communicate to us in the course of an interaction with our presence (in particular by posting contents, etc.) on the basis of your consent, provided that you have given this, otherwise the processing takes place on the basis of our legitimate interest in being able to offer you a presence on the respective platform. If you communicate with us via the comment or message function, your data will be processed in order to reply to your message or comment and thus to implement the contract or because of our legitimate interest in being able to react to your message or comment.

In addition, the platforms generally use cookies, which enable an analysis of your user behavior and on the basis of which user profiles of your interests or preferences are created. Based on these usage profiles, advertisements will be placed with the respective operator of the platform or with your activity on the Internet that correspond to your interests. If you have an account with the respective platform, the data you have stored there can also be merged with the user profiles. This applies in particular if you as a registered user of the platform have an account and are logged in. We have no influence on the concrete data processing of the respective operator. You can find further information about data processing by the respective operator of the platform in the links below. Please note that your rights (as described in figure 8) in connection with data processing on the respective platform may only be asserted against the respective operator. You are welcome to send us your request and we will forward it to the respective operator.

We are represented in the following social media:

3.1 Facebook
We maintain a Facebook page at https://www.facebook.com/profile.php?id=100072728186803. Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Please refer to Facebook's Privacy Policy for Facebook privacy notices and information: https://de-de.facebook.com/policy.php

3.2 Instagram
We also have an Instagram account at https://www.instagram.com/energeenies/. Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Please refer to Instagram's Privacy Policy for information about Instagram's privacy practices: https://help.instagram.com/519522125107875.

3.3 Twitter
We have Twitter account at https://twitter.com/energeenies_g. Twitter is operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103. Please refer to Twitter's Privacy Policy for information about Twitter's privacy practices: https://twitter.com/en/privacy.

3.4 YouTube
We also have a YouTube account at https://www.youtube.com/channel/UCZBIpmsb3SUdp-SQ4uHLFTQ. YouTube is operated by YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066 USA. Please refer to YouTube's Privacy Policy for information about YouTube's privacy practices: https://policies.google.com/privacy?hl=en.

The provision of all data to us is neither contractually nor legally prescribed.

We can use your data for our own legal prosecution or defense as a legitimate interest.

The log files data that your browser transmits to us, in particular your IP address, will be anonymized or deleted 7 days after the end of your last use of the website.

The storage period of the data you enter during registration depends on the usage contract concluded with us. If the user contract is terminated by you or us through termination, we are entitled, subject to statutory retention periods, to irretrievably delete your data. The protection of the data in case of termination is incumbent on you.

Data that we process on the basis of your consent will be blocked or deleted if you revoke your consent.

The data which you have provided to us in connection with the registration for our newsletter and which you have subsequently confirmed as part of the double opt-in procedure will be deleted as soon as you have unsubscribed from the newsletter. If you do not confirm your subscription to our newsletter, your e-mail address will also be blocked or deleted after one month if we are not allowed to process your e-mail address any further.

Data that you make available in the course of using one of our presences in social media (e.g. communication with us via the comment or message function) will be deleted as soon as the purpose of the processing has ceased, i.e. your request has been dealt with and the respective platform permits deletion.

As far as we process your data in the case of a legal dispute for legal prosecution or legal defence, these data remain stored for the duration of the legal dispute or statutory limitation periods. The limitation period can be up to 30 years, whereby the regular limitation period ends after 3 years.

We will only pass on your data to third parties if we are entitled to do so on the basis of your consent or if we are entitled or obliged to do so on the basis of the applicable law. The same applies if we receive your data from third parties, i.e. neither from you nor from companies commissioned by us.

An authorization exists both in the case in which third parties on our behalf collect data for us and transmit it to us, as well as in the case in which we on our part pass on data to other companies and these process the data on our behalf.

The latter is particularly the case if we do not carry out our business activities (e.g. IT services in connection with the operation of the website, creation and sending of newsletters) ourselves, but have them carried out by other companies, and this activity is connected with the processing of your data. In such cases, we have previously contractually obliged these companies to use the data only for the purposes permitted by law. We are authorized to control these companies in this respect.

There is a legal obligation, for example, to pass on data to criminal prosecution authorities.

8.1 Opposition
You can object to the processing of your personal data by us at any time for reasons arising from your particular situation. For this, you can use the contact possibilities mentioned above. If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweighs your interests, rights and freedoms.

8.2 Revocation
Furthermore, you have the right to revoke any consent you have given with effect for the future. However, the legality of the data processing based on your consent remains unaffected until the revocation is exercised.

8.3 Other rights
You have the right at any time to receive information about your personal data stored by us free of charge, to correct incorrect data and to block or delete data. Furthermore, you have the right to receive your data in a structured, common and machine-readable format and to have your data transferred by us to someone else. Finally, you have the right to complain to a data protection authority.

With the exception of your right of complaint to the data protection authority, you can address your respective request to us by using the contact data mentioned above.

Your personal data will be transmitted encrypted over the internet. We secure our website and other systems by technical and organizational measures, in particular the encryption technology TSL (Transport Layer Security), against loss, destruction, access, alteration or distribution of your data by unauthorized persons.

All data collected and processed in connection with our website is stored on servers located in Kaarst and therefore subject to the high standards of the General Data Protection Regulation.

We take the appropriate technical and organizational measures within Art. 32 DS-GVO, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the probability and severity of the infringement of rights and freedoms of natural persons.

In this sense, the following measures, among others, are taken to protect your data and to secure it against loss, destruction, access, alteration and distribution by unauthorized persons:

• Ensuring the confidentiality, integrity, availability and resilience of the systems and services in connection with the processing
• Ensure rapid recovery of the availability of personal data in the event of a physical or technical incident
• Implement procedures to regularly review, evaluate and evaluate the effectiveness of the technical and organisational measures taken to ensure the security of the processing

Please be aware that while we strive to provide a secure and reliable website for our users, the absolute confidentiality of any communications or materials transmitted in the course of using our website cannot be guaranteed.

10.1 Access to our App
We automatically collect and store so-called Log Files data, which your terminal transmits to us. These are:

• Type of mobile device (e.g. "iPhone 127")
• Operating system ("iOS" or "Android")
• Device version (e.g. "10.1")
• Display width (e.g. 375)
• Display height (e.g. 812)
• Display scaling (e.g. 3)
• App version (e.g. "1.0.0")
• Date and time of access to our website
• IP address of the accessing terminal device

The collection of this data is necessary for technical reasons. Unfortunately, it is not technically possible to use the website without providing your IP address. The data is collected for precontractual purposes or in our legitimate interest to inform you of the contents of our app as well as for legal prosecution in the event of illegal use of our app. If you have already registered to use our app, your data will be processed to fulfill the contract.

10.2 Registration with ENERGEENIES GmbH

10.2.1 Registration with Username and Password

When creating a user account, you will be asked to enter your first and last name, an e-mail address and a user name and password of your choice.

The username and password serve as access data. We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you as far as this is necessary for the use of our app, e.g. to inform you about new features. This data processing serves the implementation of pre-contractual measures and the fulfillment of the contract. Without the provision of the aforementioned data, you cannot create a user account with us with the choice of your own user name and password.

You can cancel your user account at any time by sending us a message (see contact details above).

In addition, we save the IP address and time each time you access the user account. The storage takes place due to the protection against abuse and other unauthorized uses in our legitimate interest.

10.2.2 Registration via Facebook Connect

If you have a Facebook account and would like to register with ENERGEENIES GmbH using your Facebook login, we will first ask you for permission to process data in this context. Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

If you choose to register using your Facebook login, you have given the following statement:

"I agree that my public profile data stored on Facebook in the form of my first and last name, my Facebook ID (identification number) and my e-mail address will be forwarded from Facebook to ENERGEENIES GmbH if I register with my Facebook login data for the ENERGEENIES GmbH app and Facebook can see when I use the ENERGEENIES GmbH app. I can revoke this consent at any time with effect for the future. The revocation does not affect the legality of the processing of the data carried out up to that point".

ENERGEENIES GmbH does not provide any data from you to Facebook. We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you as far as this is necessary for the use of our app, e.g. to inform you about innovations. This data processing serves the implementation of pre-contractual measures and the fulfillment of the contract.

You can revoke your consent to the processing of your first and last name, your Facebook ID and your e-mail address at any time by notifying us, e.g. by e-mail, or by cancelling your user account.

You will not be able to use the registration function via Facebook-Connect without providing the aforementioned data, which will be transferred from Facebook to us. Please refer to Facebook's Privacy Policy for information about Facebook's privacy practices: https://de-de.facebook.com/policy.php.

If the data is transferred outside the EEA, this is based on the EU-US Privacy Shields. The parent company Facebook, Inc., USA, is currently certified accordingly, so that an appropriate level of data protection exists in accordance with Art. 45 Para. 3 DS-GVO.

10.2.3 Registration via Google Account

If you have a Google account and would like to register with ENERGEENIES GmbH using your Google login, we will first ask you for permission to process the data in this context. Google is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

If you choose to register using your Google Account, you have made the following statement:

"I agree that the public profile data deposited in my Google account in the form of my first and last name, my Google ID (identification number), my e-mail address, my profile picture and the indication of my gender will be passed on by Google to ENERGEENIES GmbH if I register with my Google login data for the ENERGEENIES GmbH app and Google can see when I use the ENERGEENIES GmbH app. I can revoke this consent at any time with effect for the future. The revocation does not affect the legality of the processing of the data carried out up to that point."

ENERGEENIES GmbH for its part does not make any data from you available to Google.

We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you as far as this is necessary for the use of our app, e.g. to inform you about innovations. This data processing serves the implementation of pre-contractual measures and the fulfillment of the contract.

You can revoke your consent to the processing of your first and last name, your Google ID and e-mail address as well as your profile picture and the indication of your gender in the context of the registration for our website at any time by notifying us, e.g. by e-mail, or by terminating your user account.

You will not be able to use the Google Account registration feature unless you provide us with the aforementioned information, which will be transmitted to us by Google. You can find information about data protection at Google in Google's data protection regulations: https://policies.google.com/privacy?hl=en.

If the data is transferred outside the EEA, this is based on the EU-US Privacy Shields. The parent company Google LLC, USA, is currently certified accordingly, so that an appropriate level of data protection exists according to Art. 45 Para. 3 DS-GVO.

10.2.4 Registration via Apple ID

If you have an Apple account and wish to register with ENERGEENIES GmbH using your Apple ID, we will first ask you for permission to process data in this context. Apple is operated by Apple Inc, 1 Infinite Loop, Cupertino, CA 95014, USA ("Apple").

If you choose to register using your Apple account, you have provided the following statement:

"I agree that the public profile data stored in my Apple account in the form of my first and last name, my Apple ID (identification number), my email address, my profile picture and the indication of my gender will be shared by Apple with ENERGEENIES GmbH when I register for the ENERGEENIES GmbH app using my Apple login data, and Apple can see when I use the ENERGEENIES GmbH app. I can revoke this consent at any time with effect for the future. The revocation does not affect the lawfulness of the processing of the data carried out up to that point."

ENERGEENIES GmbH does not provide Apple with any of your data.

We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you, as far as this is necessary in the context of the use of our app, e.g. to inform you about innovations. This data processing is used to carry out pre-contractual measures and to fulfill the contract.

You can revoke your consent to the processing of your first and last name, your Apple ID and e-mail address, as well as your profile picture and the specification of your gender in the context of registering for our website at any time by notifying us, e.g. by e-mail, or by terminating your user account.

Without providing the aforementioned data, which is transferred to us by Apple, you cannot use the registration function via Apple ID. Notes and information on data protection at Apple can be found in Apple's privacy policy: https://support.apple.com/de-de/HT210318.

10.3 Push Notifications

When installing our app, we ask for your permission to send you push notifications. Push notifications are text messages that are displayed on your mobile device and that concern news about the app or the game. If you allow the receipt of push notifications, your device will send an encrypted, anonymized device identification number to the push notification system of your device's operating system so that the push notifications can be sent and received by you. This is done through the Google Firebase service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We receive statistics from Google in anonymous and aggregated form about user behavior, which we use to improve our app and identify errors.

With permission to receive push notifications, you have given the following consent:

"I agree that ENERGEENIES GmbH may send me push notifications with news about the app or the game and that my device identification number may be sent to Google Firebase, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to receive the push notifications and to anonymously evaluate my user behavior. I may revoke this consent at any time without prejudice to the legality and permissibility of the data processing carried out prior to the exercise of the revocation".

You may revoke your permission to receive push notifications at any time via the settings of your mobile device under "Settings", "Privacy" and "Messages" (iOS operating system) or under "Settings", "Device" and the administration of your "App Permissions" (Android operating system).

You can find out more about Google's Terms of Use and Privacy by clicking the links below:

• to Google: https://policies.google.com/privacy?hl=en
• to Google Firebase: https://firebase.google.com/terms/

10.4 How to contact us

You can contact us at any time with any questions about our app or leave us a message with E-Mail at info@energeenies.com. Your message and your e-mail or postal address are mandatory information that we need in order to process your request. If you provide us with further data on a voluntary basis (e.g. first name and surname for your inquiry by e-mail), these will also be used to contact you or process your request.

Depending on your position as an interested party or already registered user, the aforementioned data processing of the mandatory data serves to initiate the contractual relationship with us and thus the implementation of pre-contractual measures or the fulfilment of the user contract and thus the execution of the contract.

You will not receive any feedback on your request from us without providing the mandatory information. The non-availability of voluntary information remains without consequences.

10.5 Integration of Services of Third Parties

10.5.1 Google Firebase

We use Google Firebase features on our app, which provide developers of apps with various ways to improve their developed products and fix bugs, including analysis of user data. Google Firebase is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Firebase captures the interaction with our app, storing the events that occur. An overview of the events stored (e.g. user registration, clicking on an advertisement, etc.) can be found here: https://support.google.com/firebase/topic/6317484?hl=en&ref_topic=6386699=en&reftopic=6386699.

When Google Firebase is used, the following data is collected in particular: Number of users and sessions, session duration, operating systems, device models, regions, first-time starts, app executions, app updates and screens visited. The data processing associated with the integration of Google Firebase serves our legitimate interest to continuously improve our app and, in particular, to detect malfunctions at an early stage and to correct errors.

Google and its affiliated companies operate servers worldwide on which personal data can be stored. When Google transfers personal data to third countries, it ensures an adequate level of data protection in accordance with its data protection declaration.

For more information on Google's terms of use and privacy policy, please see the links below:

• to Google: https://policies.google.com/privacy?hl=en
• to Google Firebase: https://firebase.google.com/terms/

10.5.2 Crashlytics

In addition, we use Google's Crashlytics service, which allows us to analyze the crashes of our app and fix the causes of the crashes. This also includes an analysis of the user data. Crashlytics is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Crashlytics captures the events within our app that lead to a crash of the app, these are: Stacktrace (source code class and line number). These are all anonymous and not personally identifiable.

When Crashlytics is used, the following data is collected in particular: Number of users and sessions, session duration, operating systems, device models, regions, initial starts, app executions, app updates and current version of the ENERGEENIES app. The data processing associated with the integration of Crashlytics serves our legitimate interest in analysing app crashes and being able to prevent them as far as possible in the future.

Google and its affiliated companies operate servers worldwide on which personal data can be stored. Google ensures an adequate level of data protection when transferring data to third countries in accordance with its data protection declaration.

For more information on Google's terms of use and privacy policy, please see the links below:

• to Google: https://policies.google.com/privacy?hl=en
• about Crashlytics: https://firebase.google.com/terms/crashlytics/

Last updated on October 14, 2021