Privacypolicy

1. Controller

Lars Gerigk

Kipperweg 10

70569 Stuttgart

Germany

Email: info@dendree.de

2. General information on data processing

We take the protection of your personal data very seriously. Personal data is treated confidentially and in accordance with the statutory data protection regulations and this privacy policy.

This website can be visited without registering. You only need an account if you want to get ready for an event and link your Minecraft account.

3. Collection and storage of personal data and the nature and purpose of its use

a) When you visit the website

When you open our website, your browser automatically sends information to our server. It is stored temporarily in a log file. This includes:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Website from which access is made
• Browser used and, where applicable, your operating system

Purpose: smooth connection, system security and stability. Legal basis: Art. 6(1)(f) GDPR.

b) Account with Dendree Accounts

Sign-in runs through Dendree Accounts (auth.dendree.de), Dendree’s shared sign-in service. It processes your email address, display name and the session data needed for signing in. From this, this website receives your account ID, your email address and your name. Legal basis: Art. 6(1)(b) GDPR.

For accounts and sign-in, Dendree Accounts uses the service Supabase (Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992) as a processor. It holds your email address, display name, password as a hash and session data.

c) Profile and Minecraft link

For your account, Dendree Cup stores:

• Display name
• Name and ID (UUID) of your Minecraft account, if you link it
• The state of your preparation for the event (for example: joined Discord, been on the server)
• Your settings (public profile, notifications) and redeemed codes

Purpose: assigning your results to your account, clearing you for the event, showing your profile. Legal basis: Art. 6(1)(b) GDPR. Your profile is visible only to you unless you make it public yourself. You can remove the link at any time and delete your data at Dendree Cup in the settings.

d) Access to the event page

The event page is protected by a password you receive from us personally. After you enter it, your browser remembers the access (see section 5). If you are signed in, we note on your account that you belong to the event.

e) Minecraft server

When you join our Minecraft server, we process your Minecraft name, your ID (UUID), your IP address as well as game progress, results and chat messages there in order to run the server and the event. We run the Minecraft server ourselves on our own hardware; no service provider is involved. Legal basis: Art. 6(1)(b) and (f) GDPR.

f) Discord

Coordination for the event runs through a Discord server. Discord is a service of Discord Netherlands B.V., Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands; its terms and privacy notice apply (discord.com/privacy). If you link your Minecraft account there, our Discord bot stores your Discord ID together with your Minecraft account in order to assign roles and channels. The bot runs on a server of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Legal basis: Art. 6(1)(b) GDPR.

g) Contact form and email

If you write to us through the contact form, the following data is collected:

• First and last name
• Email address
• Phone number, if you provide it
• Your message

The message is delivered as an email to our mailbox, which is hosted by Hetzner Online GmbH. We use the details solely to handle your request. The same applies if you email us directly. Legal basis: Art. 6(1)(b) and (f) GDPR.

4. Disclosure of data

Your personal data is only passed on to third parties if:

• you have given your express consent (Art. 6(1)(a) GDPR),
• processing is necessary to perform a contract (Art. 6(1)(b) GDPR),
• there is a legal obligation (Art. 6(1)(c) GDPR),
• or disclosure is necessary to protect legitimate interests (Art. 6(1)(f) GDPR).

5. Cookies and browser storage

This website only uses cookies and storage that are technically necessary. No consent is required for these (§ 25(2) TDDDG):

• Dendree Accounts session on the dendree.de domain, so you stay signed in
• Access to the event page after entering the password (cookie “dc-event”, 60 days)
• Ticked-off guide steps, the choice of the captain shown and your choice in the cookie notice, in your browser’s storage

Statistics: only if you allow “Statistics” in the cookie notice, your browser loads the tracker of Dendree Analytics (https://stats.dendree.de), our own analytics service. It runs on our server at Hetzner in Nuremberg, Germany, and keeps its records in our Supabase database in the EU. It sets no cookies and stores nothing in your browser.

It records the page and its title, the referring website, your country, browser, operating system, device type, screen size and language. Your IP address is only used briefly to look up the country and is never stored. Visits are told apart by a fingerprint of website, IP address, user agent and a secret that changes every day, so no profile across days is possible.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via “Cookie settings” in the footer. We do not embed third-party content.

6. Retention

We keep data only for as long as we need it for the stated purpose:

• Web server log files: 30 days at most
• Chat messages and logs of the Minecraft server: 30 days after the event at most
• Contact requests: until your request is settled, 6 months after that at most
• Profile, Minecraft link and the state of your preparation: until you delete them in the settings, otherwise 12 months after your last sign-in at most
• Results and rankings from events: for as long as the season is in the archive; on request we remove your name from it
• Access to the event page: 60 days in your browser

Your account with Dendree Accounts remains until you have it deleted there.

7. Hosting by Hetzner Online GmbH

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes personal data on our behalf on the basis of a data processing agreement under Art. 28 GDPR.

8. Protection of minors

Our services are also aimed at young people aged 12 and over. We take particular care to handle minors’ data in line with data protection law. Where required, we obtain the consent of a parent or guardian.

9. Rights of data subjects

You have the right to:

• access to your stored data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure of your data (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing (Art. 21 GDPR).

To exercise your rights, please contact: info@dendree.de

10. Withdrawal of consent

If you have given consent to the processing of your data, you can withdraw it at any time with effect for the future.

11. Right to lodge a complaint with the supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of your personal data. The authority responsible for Baden-Württemberg is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de).

12. Currency of and changes to this privacy policy

This privacy policy describes the preliminary operation of the website before the first event. We update it as soon as further features are added or technology or the legal situation changes.