Data Protection

(1) The website is owned and operated by UNITED TECHNOLOGY NETWORK LTD (registered address: 61 Bridge Street, Suite 34250, Kington, Herefordshire, United Kingdom, HR5 3DJ).

(2) In the following statement we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail address, user behavior.

(3) Responsible according to Art. 4 para. 7 EU Data Protection Basic Regulation (DS-GVO) is UNITED TECHNOLOGY NETWORK LTD (registered address: 61 Bridge Street, Suite 34250, Kington, Herefordshire, United Kingdom, HR5 3DJ), telephone, e-mail (see our imprint).

(4) When you contact us by e-mail or via a contact form, the data you provide us with (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. We delete the data arising in this collection after the storage is no longer necessary, or restrict the processing if there are legal storage obligations. The legal basis for this is our legitimate interest within the meaning of Art. 6 para. 1 lit. f DS-GVO and, if your enquiry is aimed at the conclusion of a contract, Art. 6 para. 1 lit. b DS-GVO.

(5) If we wish to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you below in detail about the respective processes. We also specify the fixed criteria for the storage period.

(1) You have the following rights against us with regard to your personal data:

• Right of access (Art. 15 DS-GVO),
• Right to rectification (Art. 16 DS-GVO) or deletion (Art. 17 DS-GVO),
• Right to limitation of processing (Art. 18 DS-GVO),
• Right to revoke consent granted (Art. 7 para. 3 DS-GVO),
• Right to object to the processing (see paragraph 3),
• Right to information (Art. 19 DS-GVO),
• Right to data transferability (Art. 20 DS-GVO).

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Art. 77 DS-GVO).

(3) If personal data is processed for the performance of tasks in the public interest (Art. 6 para. 1 sentence 1 lit. e DS-GVO) or to safeguard legitimate interests (Art. 6 para. 1 sentence 1 lit. f DS-GVO), you may object to the processing of your personal data at any time with effect for the future. In the event of objection, we shall refrain from any further processing of your data for the aforementioned purposes unless there are compelling grounds for processing worthy of protection which override your interests, rights and freedoms, or the processing is necessary for the assertion, exercise or defense of legal claims. You can object to the use of your data for the purpose of direct advertising at any time with effect for the future; this also applies to profiling in so far as it is connected with direct advertising.

(4) In order to exercise your rights (with the exception of the right to complain to a data protection supervisory authority), please contact the office named in § 1 Paragraph 2.

(1) If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f DS-GVO): IP address; date and time of the request; time zone difference to Greenwich Mean Time (GMT); contents of the request (concrete page); access status/HTTP status code; amount of data transferred in each case; website from which the request originates; browser; operating system and its interface; language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall (legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO). You can manage the cookie settings in your browser and, among other things, refuse the acceptance of cookies in general or for our website as well as delete any cookies that have already been set.

(3) Use of cookies: this website uses transient cookies (automatically deleted when you close your browser, e.g. session cookies storing a session ID) and persistent cookies (automatically deleted after a specified period, which you can delete in the security settings of your browser at any time). You can configure your browser settings to refuse the acceptance of third party cookies or all cookies; please note that you may not be able to use all functions of this website if you do so. We use cookies to identify you for future visits if you have an account with us. We also use HTML5 storage objects that are stored on your device. You can prevent the use of HTML5 storage objects by using private mode in your browser, and we recommend that you regularly delete your cookies and browser history manually.

(1) If you would like to be referred to a seller on our platform, you must first register with your e-mail address. Registration does not require double opt-in confirmation via an email link. When a customer registers using the standard registration process, their password is sent to them by email. Customers who create an account using Google, Apple or Discord do not receive a registration email.

(2) If you use our portal, we store the data necessary for the fulfilment of the transaction, including details of payment method, until you finally delete your access. You can do this by simply sending a message to the contact details specified in § 1 Para. 2. The legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO. On this basis, your payment data will also be transmitted to the corresponding payment service provider. For payment by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg): paypal.com/de/webapps/mpp/ua/privacy-full.

(3) You will find further information on this mediation process and the associated data transfer in our General Terms and Conditions, specifically in paragraphs 4 and 7.

(4) To prevent unauthorized access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is enabled on this website, Google will previously truncate your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

(2) The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser; however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are further processed in a shortened form, thus excluding the possibility of personal references.

(5) We use Google Analytics to analyze the use of our website and to improve it regularly. The statistics obtained will enable us to improve our services and make them more interesting for you as a user. The legal basis for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit. f DS-GVO.

(6) Third Party Information: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. Terms of Use and privacy information are available on Google's websites.

If you would like to contact our customer service via Telegram, please note that the connection between you and us via Telegram is not encrypted and sensitive information should not be shared. We will store the chat communication and your phone number for 2 weeks for quality assurance unless you object earlier. The legal basis for this is our legitimate interest within the meaning of Art. 6 para. 1 lit. f DS-GVO and, if your enquiry is aimed at the conclusion of a contract, Art. 6 para. 1 lit. b DS-GVO. We have no precise knowledge of how Telegram collects, processes, or uses the information. For more information about Telegram's privacy practices, see telegram.org/privacy.

(1) We have included YouTube videos on our website, which are stored at youtube.com and can be played directly from our website. These are all included in the “extended data protection mode”, i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the relevant data be transmitted. We have no influence on this data transmission.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account that you are logged in to. When you are logged in to Google, your information will be directly associated with your account. If you do not want your profile to be associated with YouTube, you must log out before activating the button. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in Google's Privacy Policy.

Unless we explicitly state otherwise, we will store personal data for as long as legal retention periods exist. After expiry of the statutory retention period, we will delete the data if we no longer need the data for the fulfilment of contractual obligations towards you or if we do not have any justified interest for further storage.

Customers can sign in to WhatsGaming or create an account using their Google account. Customers who already have a WhatsGaming account can also connect their Google account to it on their account page, as described in the section "Connecting and Removing Sign-In Methods". When using this feature, Google provides us with the following information, based on the permissions requested (openid, email, and profile):

• Google account ID
• Email address
• Whether the email address has been verified by Google
• Name
• Profile picture

We store the Google account ID, the email address associated with the Google account at the time of linking, the time when the email address was verified, the method used to establish the link, the last time the Google account was used to sign in, and the customer's email address.

We do not store the customer's name or profile picture received from Google. We also do not store any Google access tokens or refresh tokens. If a WhatsGaming account with the same email address already exists and the customer first has to sign in to it, the Google account ID and the email address are kept in the customer's session so that the Google account can be linked once the customer has signed in; the link can only be made within 15 minutes, and until it is made these details remain in the session at the longest until the session ends, which is at the latest 120 minutes after the customer's last request to our website. To protect the sign-in against abuse, we count per IP address the sign-in requests sent to Google, in one counter shared with the sign-in requests sent to Apple and Discord; this counter is stored under a hashed form of the IP address, in temporary storage only, and expires after one minute.

Purpose of processing

We use this information solely to authenticate customers, to create or link their WhatsGaming customer accounts and to send the security email described in the section "Connecting and Removing Sign-In Methods". We do not sell or share this data with any third party.

Data retention and deletion

The stored data associated with Google sign-in is deleted together with the customer's WhatsGaming account. Customers can also remove the connection to their Google account themselves on their account page; the Google account ID and the other stored details of this connection are then deleted. Customers may also request deletion of their data by contacting us at support@whatsgaming.net.

Customers can sign in to WhatsGaming or create an account using their Apple Account. Customers who already have a WhatsGaming account can also connect their Apple Account to it on their account page, as described in the section "Connecting and Removing Sign-In Methods". We request only the customer's email address (the email permission) and do not request the customer's name. When using this feature, Apple provides us with the following information:

• Apple user ID (an identifier Apple issues for the customer's Apple Account)
• Email address: either the customer's own email address or, if the customer chooses Apple's "Hide My Email" option, a unique, randomly generated forwarding address created by Apple
• Whether the email address has been verified by Apple
• Whether the email address is a forwarding address

We store the Apple user ID, the email address associated with the Apple Account at the time of linking, the time when the email address was verified, the method used to establish the link, the last time the Apple Account was used to sign in, and the customer's email address. If the customer hides their email address and a new WhatsGaming account is created, the forwarding address is used as the email address of this account. If the customer connects their Apple Account to an existing WhatsGaming account, the email address of that account does not change, even if the customer hides their email address.

We do not store the customer's name, and we do not store whether the email address is a forwarding address. When Apple returns the customer to our website, the authorization code and the security check value Apple sends back are held in temporary storage on our server for no more than two minutes so that the sign-in can be completed. Our server exchanges this code with Apple for an identity token that contains the Apple user ID and the email address; the identity token is processed only during the sign-in and is not stored. We do not store any Apple access tokens, refresh tokens or identity tokens. If a WhatsGaming account with the same email address already exists and the customer first has to sign in to it, the Apple user ID and the email address are kept in the customer's session so that the Apple Account can be linked once the customer has signed in. The link can only be made within 15 minutes. Until the link is made, these details remain in the session at the longest until the session ends; the session ends at the latest 120 minutes after the customer's last request to our website. To protect the sign-in against abuse, we count per IP address both the sign-in requests sent to Apple and the returns from Apple; these counters are stored under a hashed form of the IP address, in temporary storage only, and expire after one minute.

Purpose of processing

We use this information solely to authenticate customers, to create a WhatsGaming customer account or link the Apple Account to an existing one, and to send the security email described in the section "Connecting and Removing Sign-In Methods". If a customer who already has a WhatsGaming account signs in with Apple for the first time and hides their email address, a new, separate WhatsGaming account is created for the forwarding address. To avoid this, the customer can instead sign in to their existing WhatsGaming account and connect their Apple Account to it on the account page. We do not sell this data or share it with any third party; emails sent to a forwarding address are delivered through Apple as described below.

Apple's private email relay

If a customer uses a forwarding address, the emails we send to it, such as order and delivery emails, are delivered through Apple's Private Email Relay service, which forwards them to the customer's own email address. Apple only forwards emails from senders registered with Apple. Customers can turn off email forwarding, or stop using Sign in with Apple for WhatsGaming, at any time in their Apple Account settings. If forwarding is turned off, our emails no longer reach the customer.

Data retention and deletion

The stored data associated with Sign in with Apple is deleted together with the customer's WhatsGaming account. Customers can also remove the connection to their Apple Account themselves on their account page; the Apple user ID and the other stored details of this connection are then deleted. Customers may also request deletion of their data by contacting us at support@whatsgaming.net. If a customer stops using Sign in with Apple for WhatsGaming in their Apple Account settings, we currently receive no notification from Apple; the stored link remains until the customer removes it on their account page, the customer's account is deleted or the customer asks us to delete it.

Customers can sign in to WhatsGaming or create an account using their Discord account. Customers who already have a WhatsGaming account can also connect their Discord account to it on their account page, as described in the section "Connecting and Removing Sign-In Methods". When using this feature, Discord provides us with the following information, based on the permissions requested (identify and email):

• Discord user ID
• Username and display name
• Avatar and other details of the Discord profile, such as the profile banner and the profile color
• Account details, such as the language set in Discord and whether two-factor authentication is enabled
• Email address, if the Discord account has one
• Whether the email address has been verified by Discord

We create a WhatsGaming account or link a Discord account only if Discord provides an email address for the Discord account and has verified it. We store the Discord user ID, the email address associated with the Discord account at the time of linking, the time when the email address was verified, the method used to establish the link, the last time the Discord account was used to sign in, and the customer's email address. If a new WhatsGaming account is created, the email address of the Discord account becomes the email address of this account.

We do not store the customer's Discord username, display name, avatar or any other profile or account details received from Discord. We also do not store any Discord access tokens or refresh tokens; the access token issued by Discord is used only to retrieve the information above. Signing in with Discord never signs a customer in to an existing WhatsGaming account that is not yet linked to this Discord account. If a WhatsGaming account with the same email address already exists and the customer first has to sign in to it, the Discord user ID and the email address are kept in the customer's session so that the Discord account can be linked once the customer has signed in. The link can only be made within 15 minutes. Until the link is made, these details remain in the session at the longest until the session ends; the session ends at the latest 120 minutes after the customer's last request to our website. To protect the sign-in against abuse, we count per IP address the sign-in requests sent to Discord, in one counter shared with the sign-in requests sent to Google and Apple; this counter is stored under a hashed form of the IP address, in temporary storage only, and expires after one minute.

Purpose of processing

We use this information solely to authenticate customers, to create a WhatsGaming customer account or link the Discord account to an existing one, and to send the security email described in the section "Connecting and Removing Sign-In Methods". We do not sell or share this data with any third party.

Data retention and deletion

The stored data associated with Sign in with Discord is deleted together with the customer's WhatsGaming account. Customers can also remove the connection to their Discord account themselves on their account page; the Discord user ID and the other stored details of this connection are then deleted. Customers may also request deletion of their data by contacting us at support@whatsgaming.net. If a customer removes WhatsGaming's access in the settings of their Discord account, we receive no notification from Discord; the stored link remains until the customer removes it on their account page, the customer's account is deleted or the customer asks us to delete it.

Customers whose WhatsGaming account has an email address can connect a sign-in method, such as their Google account, their Apple Account or their Discord account, to this account on their account page and remove it there again. Once a sign-in method is connected, the customer can sign in to this WhatsGaming account with it. Guest accounts cannot connect sign-in methods.

Connecting a sign-in method

To make sure that it is the customer who connects a sign-in method, a connection can only be started within 30 minutes after the customer's last sign-in in this browser that was not the automatic sign-in on return visits, for example a sign-in with their password or with Google, Apple or Discord, a change or reset of their password, or the creation of an account or a guest checkout. Being signed in automatically when returning to our website, or being signed in again on the same device after removing a connection, does not count. For this purpose, we note the customer's internal customer number and the time of this sign-in in the customer's session; this note is kept at the longest until the session ends.

When the customer starts a connection, we keep in the customer's session which provider is being connected, that the connection was started on the account page, the customer's internal customer number, the language of the page and the time the connection was started; the connection has to be completed within 10 minutes. The customer is then forwarded to the provider, which sends us the information described in the section for that provider. The details kept in the session are removed when the customer returns from the provider and otherwise remain there at the longest until the session ends, which is at the latest 120 minutes after the customer's last request to our website. The session also holds random security values for the return from the provider; they remain there at the longest until the session ends.

We connect the provider account only if the provider has verified its email address. We do not connect it if it is already connected to another WhatsGaming account, if the customer's WhatsGaming account is already connected to a different account with the same provider, or if its email address belongs to another WhatsGaming account. If the connection is made, we store the same details as described in the section for that provider and the time the connection was made, and note that the connection was made on the account page. The email address of the provider account may differ from the email address of the WhatsGaming account; connecting never changes the email address of the WhatsGaming account. If both addresses are the same and the email address of the WhatsGaming account has not yet been recorded as verified, we record it as verified at the time of the connection.

After a sign-in method has been connected on the account page, we send an email to the email address of the WhatsGaming account. It names the provider and the email address of the connected provider account, so that the customer notices a connection they did not make themselves. Our log of sent emails records that this email was sent, the address it was sent to, the customer's internal customer number, the language, the status and the time and, if sending fails, the error message returned. It does not record the provider or the provider account; the email address of the provider account appears in it only where it is the same as the address the email was sent to. Each entry is deleted after 90 days. If the email cannot be sent, this is also recorded in our error log. No email is sent when a connection is removed.

After a connection attempt or a removal, the account page shows a short message with the result; this message, which may contain the email address of the provider account, is kept in the session only until it has been displayed, and is part of the data of the account page that displays it.

To protect this function against misuse, the requests we send to the provider for a connection and, for Apple, the returns from Apple are counted per IP address in the same counters as for a sign-in, as described in the sections on Google, Apple and Discord. In addition, we limit how often a connection or a removal can be started for each WhatsGaming account; for this, we count these attempts under the customer's internal customer number, in temporary storage only, and the count is deleted automatically after a short waiting period.

Removing a sign-in method

Customers can remove a connected sign-in method at any time on their account page. The provider account ID and the other stored details of this connection are then deleted; if the email address of the WhatsGaming account was recorded as verified at the time of the connection, this record remains. For security, removing a connection also ends the automatic sign-in on future visits on the customer's other devices: there, the customer has to sign in again once the current session has ended. The device on which the customer removes the connection stays signed in: it is signed in again, and this sign-in is recorded in our sign-in log as described below. Our support team can also remove a connection at the customer's request; the automatic sign-in on future visits then ends on all of the customer's devices.

Removing a connection on our website does not remove WhatsGaming from the customer's account with the provider. The customer can do this in the settings of their account with the provider, for example in their Google Account settings, in the Sign in with Apple settings of their Apple Account or in the settings of their Discord account. If the customer later signs in with the same provider account again, this sign-in is handled like a first sign-in, as described in the section for that provider.

Record of sign-in methods

We keep a record each time a sign-in method is connected to or removed from a WhatsGaming account, including connections that are made automatically during a sign-in as described in the sections on Google, Apple and Discord. The record contains the WhatsGaming account concerned, the provider, the time, whether the change was made by the customer, by our support team (in this case, which member of our support team) or automatically, and how the connection was established. It contains no email address, no provider account ID, no token and no IP address. Our support team can see these records in our administration system. Each record is deleted automatically after 730 days, or earlier together with the customer's WhatsGaming account.

Logs

Our sign-in log records each sign-in to a WhatsGaming account, including the sign-in again after a connection has been removed: the customer's internal customer number, the page requested and the type of request, which sign-in cookies were sent, a shortened code derived from the session ID, whether the customer stays signed in on return visits, whether the sign-in was automatic, whether the request came from our own website, the domain of the website from which the customer came and the type of browser, operating system and device. The sign-in log contains no email address and no IP address. If the exchange with a provider fails during a sign-in or a connection, our error log records the provider and the type of error.

Purpose and legal basis

We process this data so that customers can connect sign-in methods to their WhatsGaming account and remove them again (Art. 6 para. 1 sentence 1 lit. b DS-GVO), and to protect customer accounts against misuse through the security email, the limits, the record and the logs described above (Art. 6 para. 1 sentence 1 lit. f DS-GVO). We do not sell this data or share it with any third party; if the email address of the WhatsGaming account is an Apple forwarding address, the security email is delivered through Apple, as described in the section on Apple.

(1) We invite content creators, for example streamers, YouTubers and TikTok creators, to join our partner program. To do so, we write to a creator once by e-mail from partners@whatsgaming.net or, if we have no e-mail address, once by a direct message on a platform where the creator publishes. We do not send reminders. This section explains why we have your contact details and what we do with them.

(2) Where your data comes from: we find creators in publicly accessible sources, in particular their public channels, profiles and websites, partly with the help of AI-assisted search tools. We only use contact details that creators publish for business enquiries, or contact details that a creator or their team has given us so that we get in touch.

(3) Which data we process: your name or channel name; the business e-mail address and other contact details you publish, such as your user names on YouTube, Twitch, TikTok, Instagram, X, Discord or Telegram, a link page such as Linktree, or your website; the links to your channels; the size of your audience, such as your number of followers or subscribers; a sponsor you work with, as far as this is public; your country and language, as far as they are publicly stated or can be derived from the ending of your e-mail address, and the time zone derived from them, so that our e-mail reaches you at a suitable local time; internal notes our team writes about our contact with you, including what we agreed; and the history of our contact: when we wrote to you, whether our e-mail was opened, whether you clicked its button, whether and how you replied, and whether you applied or became a partner.

(4) Purpose and legal basis: we process this data to present our partner program to you and, if you are interested, to start a partnership with you. The legal basis is our legitimate interest in winning creators as partners for our business (Art. 6 para. 1 sentence 1 lit. f DS-GVO). If you apply, we process your application in order to run the partner program with you (Art. 6 para. 1 sentence 1 lit. b DS-GVO). We do not make automated decisions about you.

(5) Opens and clicks: our e-mail contains a small invisible image. When your e-mail program loads it for the first time, we record that the e-mail was opened. The "Apply now" button contains a personal code. When you open our partner page through this button, we record the click and can assign a later application to our e-mail; without the code, we assign an application by your e-mail address or by the link to your channel. We use this only to see whether our e-mail reached you and how many creators respond to our invitations. You can prevent the open record by not loading images in your e-mail program. The legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO.

(6) Recipients: our e-mails are sent, and our mailbox partners@whatsgaming.net is operated, by our e-mail provider one.com. Our partner team reads the replies in this mailbox. The data is stored on servers that service providers operate for us. We do not sell your data and do not pass it on to other third parties.

(7) Storage period: if you neither reply nor apply, we delete your details and the history of our contact no later than 12 months after the last change to them; this also applies to the copy of our e-mail in our mailbox. If you reply, we keep your details and our correspondence while we are in contact about a partnership and delete them when you ask us to. If you become a partner, your data is processed as part of the partner program. If you unsubscribe or tell us that you do not want to be contacted again, we keep your e-mail address and, where needed, your record with this wish on a block list so that we never contact you again; this entry is not deleted. We may do the same with an address to which our e-mail cannot be delivered. On request, we also block an entire domain, for example that of an agency.

(8) Your right to object: you can object to being contacted at any time, free of charge and with effect for the future: use the unsubscribe link at the end of our e-mail (one click is enough and takes effect immediately), reply "no", or write to partners@whatsgaming.net. We will then not contact you again. Your other rights are set out in § 2; if you write to us on Telegram, § 6 also applies.