1. Name and contact data of the controllers responsible for processing, as well as the company data protection officer This data protection information applies to data processing by:

Controller: Wicked games AG
Bernstrasse 51
3114 Wichtrach
Switzerland
represented by the CEO DR. GERD MIKULCAK

2. Collection and storage of personal data and the purpose of their use

a) When visiting our websites
When accessing our website “http://wicked-games.ch”, the browser used on your end device automatically sends information to our website server. This information is stored temporarily in a so-called log file. The following information is collected and stored without any action on your part, until its automatic erasure:

• IP address of the accessing computer
• Date and time of the access
• Name and URL of the retrieved file
• Website from which access was made
• Browser used and, where applicable, the operating system of your computer and the name of your access provider.

The aforementioned data will be processed by us for the following purposes:

• Guaranteeing the smooth connection setup of the website
• Guaranteeing the comfortable use of our website
• Evaluating system security and stability, and
• Other administrative purposes

The legal basis for the data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest is derived from the purposes listed above for data collection. Under no circumstances shall we use the data collected for the purpose of making any inferences to your person.

b) When contacting us per E-Mail or using our contact form For questions of any kind, we offer you the opportunity to contact us via a form provided on our website or our e-mail address. In this case, your e-mail address is a mandatory data and is required in order to be able to assign and answer the request. Further information can be given voluntarily. The processing of data for the purpose of contacting us takes place in accordance with Art. 6 para. 1 sent. 1 lit. a DSGVO based on your voluntarily granted consent. The personal data collected by us for the use of the contact form will be deleted after completion of the request made by you.

c) When registering for our newsletter If you have granted your express permission pursuant to Art. 6 clause 1 first sentence letter a GDPR, we will use your e-mail address to send you our newsletter on a regular basis. In order to receive the newsletter, it is sufficient to only provide an e-mail address. After you have subscribed to our newsletter, we will email a subscription confirmation to you. You must confirm the receipt of this email to receive our newsletter. This procedure is known as double opt-in procedure. For us, your email response serves as confirmation that you are in fact the person who subscribed to our newsletter. You can unsubscribe at any time, for example using a link. Alternatively, you can also e-mail your unsubscription request to “info@wicked-games.ch ” at any time. Once we have received your cancellation of the newsletter subscription, we will immediately delete your email address from our distribution list.

d) When communicating with our Social Media channels We use a Social Media Management Software that is connected to our wicked-games Facebook Page, wicked-games Twitter channel, wicked-games Instagram Profile, wicked-games Facebook Page, wicked-games Twitter channel and wicked-games Instagram Page. It collects all users (their name and social media profile URL), their posts, comments and messages that reach us via those platforms. This helps us to react to user requests and issues quickly as well as to further improve our customer service and community management (Art. 6 (1) f GDPR). If you contact us via the named channels, we also use this data to resolve and answer your request (Art. 6 (1) f GDPR). The data will be processed by the following categories of receivers:

• Hosting Provider (to host the service and save the requests for us to answer)
• Social Media Software provider (preparing the requests to be answered and resolved)
• Wicked Games and authorized social media moderation partners (to resolve the issue)

3. Forwarding data

Your personal data will not be transferred to any third party for any purpose other than those listed below.We shall forward your personal data to third parties only

• if you have given your explicit consent, in accordance with Art. 6 (1) a GDPR
• if under Art. 6 (1) f GDPR the transfer is necessary for the establishment, exercise or defence of legal claims, and there is no reason to assume that you have an overriding interest, which must be protected, in the non-forwarding of your data
• in the event that there is a legal obligation to forward the data under Art. 6 (1) c GDPR and if this is legally permissible and necessary under Art. 6 (1) b GDPR for the processing of contractual relationships with you.

4. Cookies

We use cookies on our website. These are small files that are created automatically by your browser and stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your end device, and do not contain any viruses, Trojans or other malware.The cookie contains information derived in connection with the specific end device used in each case. However, this does not mean that we gain knowledge of your identity by these means.The use of cookies serves on the one hand to make the use of our offer more comfortable for you. Thus weuse so-called session cookies in order to recognise that you have already visited individual pages of our website. These are deleted automatically once you leave our website.In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain defined period. If your visit our website again, in order to avail of our services, it is automatically recognised that you have already visited us before, and which inputs and settings you established, so that you do not have to repeat the process.These cookies allow us to recognise automatically, when you visit our website, that you have already visited us previously. These cookies are deleted automatically after a defined period of time.The data processed with cookies are necessary for the aforementioned purposes to protect our legitimate interests and those of third parties pursuant to Art. 6 (1) f GDPR.Most browsers accept cookies automatically. However, you can configure your browser in such a manner that no cookies are stored on your computer, or a notification always appears before a new cookie is installed. However, the complete deactivation of cookies may mean that you cannot use all of the functions of our website.

5. Social media plugins

On the basis of Art. 6 (1) lit. f GDPR, we use social media plug-ins of the social networks Facebook, Twitter, Instagram, YouTube, Steam and Discord on our Website.No personal data will be transmitted to the providers of these plug-ins without you clicking on the button of a plug-in –irrespective of whether you place an order.If you press the button of a plug-in personal data will be automatically transmitted to the provider of the plug-in and can be stored and used by that provider. Please note that this may be carried out overseas, i.e. in particular in the United States of America.We do have no full knowledge of the type and scope of the data collection and their use and processing and cannot exert any influence on such processes either.If you activate a plug-in, the plug-in provider will receive the information that you have activated this on the respective website of our Website or the corresponding subpage of the respective website from our Website. In addition, the log files, as stated in clause 2 of this privacy statement will be transmitted to the plug-in provider.The data collection and transmission is carried out irrespective of whether you have a user account at the respective plug-in provider or not. If you have a user account at the respective plug-inprovider and you are logged into this user account at the time, at which you click on the respective plug-in the data transmitted to the respective plug-in provider will be directly allocated to your user account. If you confirm the activated plug-in and e.g. link the page, the plug-in provider will also store this information in your user account and can also notify your contacts to the public. In order to prevent the allocation to your user account at the respective plug-in provider you should log-out from your user account at the respective plug-in provider before clicking the plug-in on Website.The respective plug-in provider stores the data transmitted to it, irrespective of whether you are also logged-in to your user account at the respective plug-inprovider as a rule as user profiles, which are used for the following purposes:

• Advertising suitable for the needs
• Market research
• Optimization of the websites of the plug-in provider suitable for the needs.

6. Data subject rights

You have the right:

• pursuant to Art. 15 GDPR, to demand information about your personal data that we have processed. In particular, you can obtain information about the purposes of the processing, The categories of personal data concerned, the recipients or category ofrecipients to whom you data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request rectification, erasure, or restriction of the processing, or to object to it, the right to lodge a complaint with a supervisory authority, the source of your data, if these have not been collected by us, and on the existence of automated decision-making, including profiling, and any other meaningful information about their details or the logic involved;
• pursuant to Art. 16 GDPR, to demand the immediate rectification or completion of inaccurate personal data stored by us;
• pursuant to Art. 17 GDPR, to demand the erasure of personal data stored by us, unless their processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data in cases where you contest the accuracy of the data, where the processing is unlawful yet you oppose the erasure of the personal data, where we no longer need the data but you still require them to establish, exercise or defend legal claims, or where you have objected to the processing of the data pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, to obtain your personal data that you have provided to us in a structured, commonly used and machine-readable format and to demand the transfer of these data to another controller;
• pursuant to Art. 7 (3) GDPR, to withdraw your consent at any time, which will mean that in future we may no longer carry out the data processing that was contingent upon this consent and
• pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. In general you can contact the supervisory authority of your usual residence or place of employment, or that of our company headquarters for this purpose.

7. Data security

During your visit to our website weuse the widespread TSL/SSL (Transport Layer Security/Secure Socket Layer) method in combination with the currently highest encryption level that is supported by your browser. This is generally a 256-bit encryption. If your browser does not support 256-bitencryption, we revert instead to 128-bit v3 technology. You can see whether individual pages of our website are transmitted in encrypted form by means of the closed illustration of the key or lock symbol in your browser’s status bar.Furthermore, we availof suitable technical and organisation security measures in order to protect your data against random or deliberate manipulation, partial or complete loss, destruction, or unauthorised third-party access. Our security measures are improved on an ongoing basis in accordance with technological developments.

8. Analysis Tools and Advertising

Google Analytics This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this analysis tool is based on Art. 6 (1) lit (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent was requested (e.g. consent to the storage of cookies), the processing takes place exclusively on the basis of Article 6 Paragraph 1 lit. the consent can be revoked at any time.

IP anonymization
We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other Google data.

Browser plug-in
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout.
You can find more information on how Google Analytics handles user data in Google's data protection declaration: https://support.google.com/analytics/answer/6004245.

Disable Google Analytics
You can also prevent the collection by setting an opt-out cookie. If you want to prevent the future collection of your data when you visit this website, please click here: Disable Google Analytics

Order processing
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics
This website uses the "demographic characteristics" function of Google Analytics to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be created that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the point "Objection to data collection".

Google Analytics Ecommerce Tracking
This website uses the Google Analytics e-commerce tracking feature. With the help of e-commerce tracking, the website operator can analyze the purchasing behavior of website visitors in order to improve their online marketing campaigns. This involves recording information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product. This data can be summarized by Google under a transaction ID that is assigned to the respective user or their device.

Storage duration
Data stored by Google at the user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are anonymised or deleted after 26 months. You can see details on this under the following link: https://support.google.com/analytics/answer/7667196