Privacy policy.

Controller

In short

gelvik.com sets no cookies of its own, uses no analytics and no advertising, and loads fonts, scripts and images only from this website. We process personal data in three situations: when a page is delivered to you, when you join the waitlist, and when you write to us.

Hosting: Hetzner

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Nuremberg. Hetzner acts as our processor. The waitlist is stored on this server.

Our server keeps no log of page requests. The legal basis for hosting is Art. 6 (1) (f) GDPR; our legitimate interest is the reliable operation of this website.

Delivery and protection: Cloudflare

Requests to gelvik.com pass through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare delivers the pages and protects the site against attacks. To do this it processes your IP address, the date and time of the request, the requested address and the browser identification your device sends. What you send through our forms also travels through Cloudflare on its way to our server.

Cloudflare may set a strictly necessary cookie if it has to check whether a request comes from a person or from a bot.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and fast delivery of this website. Data may be transferred to the United States. Cloudflare is certified under the EU-US Data Privacy Framework.

The waitlist

If you join the waitlist we store your email address and, if you enter them, your team name and game, together with the language of the page, the form you used, any campaign parameters of the link you arrived through, and the time of your sign-up.

We then send one email with a confirmation link (double opt-in). Only when you confirm are you on the list; we store the time of the confirmation as proof of your consent. Addresses that are not confirmed are deleted after 14 days.

We use the data only to tell you when gelvik opens. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time by writing to [email protected]; we then delete your entry. Otherwise we keep it until the waitlist is closed.

Contact form and email

If you use the contact form or write to us by email, we process your name, your email address and your message in order to answer you. A message from the form is sent to our mailbox by email and you receive an automatic acknowledgement. The website itself does not store it.

The legal basis is Art. 6 (1) (b) GDPR where your request relates to a contract, and Art. 6 (1) (f) GDPR otherwise. We delete the data once it is no longer needed, unless statutory retention periods apply.

Our mailbox: Google Workspace

Our mailbox [email protected] is run with Google Workspace, which in Europe is provided by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. Messages from the contact form and emails you send us are received and stored there. Google acts as our processor.

Data may also be processed in the United States. Google LLC is certified under the EU-US Data Privacy Framework.

Sending email: SMTP2GO

The emails this website sends (the waitlist confirmation, the acknowledgement of a contact message and the message itself) are delivered through SMTP2GO, a service of Sand Dune Mail Ltd, 96-106 Manchester Street, Christchurch 8011, New Zealand. We use its servers in the European Union. SMTP2GO acts as our processor and processes the recipient address, the content of the email and delivery records.

For New Zealand the European Commission has decided that the level of data protection is adequate (Art. 45 GDPR).

To prevent abuse

To keep the forms from being misused, our server counts for a few minutes, in memory only, how many submissions arrive from an IP address. The addresses are not written to disk. The legal basis is Art. 6 (1) (f) GDPR.

External links

The links to Instagram and X are plain links. No data is sent to these services until you click one. After that, the privacy policy of the respective service applies.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have incorrect data corrected, to have your data erased, to have processing restricted, to receive your data in a portable format, to object to processing that is based on legitimate interests, and to withdraw a consent at any time with effect for the future.

To exercise these rights, write to [email protected]. You can also complain to a data protection supervisory authority, for example the State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen).